I0728 09:59:20.505023 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0728 09:59:20.505235 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0728 09:59:20.508816 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0728 09:59:20.508842 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0728 09:59:20.508860 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0728 09:59:20.509302 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0728 09:59:20.509365 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0728 09:59:20.509403 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0728 09:59:20.512055 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0728 09:59:20.529117 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0728 09:59:20.541342 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0728 09:59:20.544599 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0728 09:59:20.547257 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0728 09:59:20.547370 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0728 09:59:20.550233 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0728 09:59:20.553052 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0728 09:59:20.557910 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0728 09:59:20.561954 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0728 09:59:20.564791 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0728 09:59:20.567553 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0728 09:59:20.570261 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0728 09:59:20.573023 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0728 09:59:20.573049 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0728 09:59:20.573166 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0728 09:59:20.575148 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0728 09:59:20.575545 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0728 09:59:20.579648 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0728 09:59:20.585603 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0728 09:59:20.588497 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0728 09:59:20.591014 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0728 09:59:20.591039 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0728 09:59:20.591141 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0728 09:59:20.593762 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0728 09:59:20.596053 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0728 09:59:20.601154 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.601472 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.601638 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.602153 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.602352 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.618666 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.636565 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.675314 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.705933 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.709623 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:20.736119 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 09:59:33.041526 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-28 09:59:33.041491454 +0000 UTC m=+12.568215820 I0728 09:59:33.763524 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 09:59:33.763506854 +0000 UTC m=+13.290231180 I0728 09:59:33.763779 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 09:59:33.764064 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 09:59:33.764058078 +0000 UTC m=+13.290782404 E0728 09:59:33.777299 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 09:59:33.777485 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-28 09:59:33.777474596 +0000 UTC m=+13.304198922 E0728 09:59:33.777555 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 09:59:33.777729 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 09:59:33.777806 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 09:59:33.777835 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 09:59:33.777825726 +0000 UTC m=+13.304550052 E0728 09:59:33.784632 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0728 09:59:33.784994 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 09:59:33.785026 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 09:59:33.785075 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0728 09:59:33.833379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-28 09:59:33.833358511 +0000 UTC m=+13.360082917 I0728 09:59:33.860817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-28 09:59:33.860799336 +0000 UTC m=+13.387523692 I0728 09:59:33.886418 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 09:59:33.886407414 +0000 UTC m=+13.413131750 I0728 09:59:33.901457 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 09:59:33.901751 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 09:59:33.901743663 +0000 UTC m=+13.428467979 I0728 09:59:33.917010 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 09:59:38.785952 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 09:59:38.785938629 +0000 UTC m=+18.312662955 I0728 10:00:00.110875 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:00:00.110956 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 10:00:00.110947628 +0000 UTC m=+39.637671954 I0728 10:00:00.111353 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 10:00:00.111331468 +0000 UTC m=+39.638055794 I0728 10:00:00.120875 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-28 10:00:00.120866379 +0000 UTC m=+39.647590705 I0728 10:00:00.124258 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:00:00.124345 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 10:00:00.124335366 +0000 UTC m=+39.651059692 I0728 10:00:00.210600 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:00:00.244024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-28 10:00:00.244004546 +0000 UTC m=+39.770728862 I0728 10:00:00.277791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-28 10:00:00.277773341 +0000 UTC m=+39.804497657 I0728 10:00:00.310938 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:00:00.310918151 +0000 UTC m=+39.837642497 I0728 10:00:00.326003 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:00:00.326924 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:00:00.326911576 +0000 UTC m=+39.853635922 I0728 10:00:00.333065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:00:00.340580 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:01:48.334172 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-28 10:01:48.334153787 +0000 UTC m=+147.860878103 I0728 10:01:48.334362 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:01:48.334428 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-28 10:01:48.334417334 +0000 UTC m=+147.861141660 E0728 10:01:48.345518 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:01:48.345602 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-28 10:01:48.34559337 +0000 UTC m=+147.872317686 I0728 10:01:48.345621 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:01:48.346871 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:01:48.346935 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:01:48.346969 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-28 10:01:48.346965324 +0000 UTC m=+147.873689640 E0728 10:01:48.353339 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0728 10:01:48.353395 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:01:48.353412 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 10:01:48.353441 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0728 10:01:48.357135 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:01:48.357269 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-28 10:01:48.357251299 +0000 UTC m=+147.883975695 I0728 10:01:48.357931 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-28 10:01:48.357919245 +0000 UTC m=+147.884643631 I0728 10:01:48.370403 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:01:48.370623 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:01:48.370751 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-28 10:01:48.370697692 +0000 UTC m=+147.897422048 I0728 10:01:48.514945 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:01:48.529502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-07-28 10:01:48.529475641 +0000 UTC m=+148.056199987 I0728 10:01:48.545733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-07-28 10:01:48.545719642 +0000 UTC m=+148.072443958 I0728 10:01:48.570725 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:01:48.570710611 +0000 UTC m=+148.097434947 I0728 10:01:48.585442 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:01:48.585958 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:01:48.585953849 +0000 UTC m=+148.112678165 I0728 10:01:48.597735 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:01:48.606254 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:01:48.945242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-07-28 10:01:48.945229129 +0000 UTC m=+148.471953445 I0728 10:01:48.957763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-07-28 10:01:48.957731288 +0000 UTC m=+148.484455614 I0728 10:01:53.355063 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:01:53.355044744 +0000 UTC m=+152.881769100 I0728 10:01:53.369712 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:01:53.369701697 +0000 UTC m=+152.896426023 I0728 10:01:53.402725 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:01:53.402671523 +0000 UTC m=+152.929395849 I0728 10:01:53.420299 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:01:53.421171 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:01:53.421160281 +0000 UTC m=+152.947884637 I0728 10:01:53.458547 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:04:30.355302 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready" to 2026-07-28 10:04:30.355283021 +0000 UTC m=+309.882007367 I0728 10:04:30.355339 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:04:30.355569 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Issuing" to 2026-07-28 10:04:30.355560028 +0000 UTC m=+309.882284344 I0728 10:04:30.366168 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:04:30.366280 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:04:30.366317 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Issuing" to 2026-07-28 10:04:30.366306572 +0000 UTC m=+309.893030928 I0728 10:04:30.553897 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:04:30.569382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-44.nip.io-tls-1" condition "Approved" to 2026-07-28 10:04:30.569371284 +0000 UTC m=+310.096095610 I0728 10:04:30.588316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-44.nip.io-tls-1" condition "Ready" to 2026-07-28 10:04:30.58830185 +0000 UTC m=+310.115026176 I0728 10:04:30.616360 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:04:30.616343129 +0000 UTC m=+310.143067455 I0728 10:04:30.636166 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:04:30.636599 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:04:30.636592547 +0000 UTC m=+310.163316863 I0728 10:04:30.650186 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:05:43.240294 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 10:05:43.240273317 +0000 UTC m=+382.766997643 I0728 10:05:43.240399 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:05:43.240447 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 10:05:43.240433411 +0000 UTC m=+382.767157737 E0728 10:05:43.254287 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 10:05:43.254386 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-28 10:05:43.254375981 +0000 UTC m=+382.781100307 E0728 10:05:43.254413 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 10:05:43.255531 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:05:43.255629 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:05:43.255659 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 10:05:43.255651272 +0000 UTC m=+382.782375598 E0728 10:05:43.262573 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0728 10:05:43.262671 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 10:05:43.262707 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 10:05:43.262744 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0728 10:05:43.290432 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:05:43.295052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-28 10:05:43.295026094 +0000 UTC m=+382.821750450 I0728 10:05:43.309317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-28 10:05:43.309301472 +0000 UTC m=+382.836025788 I0728 10:05:43.337028 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:05:43.337010369 +0000 UTC m=+382.863734715 I0728 10:05:43.353966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:05:48.263418 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:05:48.263398314 +0000 UTC m=+387.790122630 I0728 10:06:30.239146 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:06:30.239192 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 10:06:30.23918285 +0000 UTC m=+429.765907176 I0728 10:06:30.239371 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-28 10:06:30.239363085 +0000 UTC m=+429.766087411 I0728 10:06:30.249203 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 10:06:30.249184604 +0000 UTC m=+429.775908920 I0728 10:06:30.249504 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:06:30.249546 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:06:30.249582 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 10:06:30.249573143 +0000 UTC m=+429.776297469 I0728 10:06:30.250539 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 10:06:30.249544422 +0000 UTC m=+429.776268738 I0728 10:06:30.252253 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 10:06:30.252232388 +0000 UTC m=+429.778956694 I0728 10:06:30.265037 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.265159 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-28 10:06:30.265146664 +0000 UTC m=+429.791870990 I0728 10:06:30.269773 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.270651 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.270807 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 10:06:30.270794692 +0000 UTC m=+429.797519018 I0728 10:06:30.271248 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 10:06:30.271241132 +0000 UTC m=+429.797965458 I0728 10:06:30.538892 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.572974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-28 10:06:30.572959031 +0000 UTC m=+430.099683337 I0728 10:06:30.585937 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.590377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-28 10:06:30.590364846 +0000 UTC m=+430.117089172 I0728 10:06:30.618623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-28 10:06:30.618603485 +0000 UTC m=+430.145327811 I0728 10:06:30.638119 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:06:30.638099231 +0000 UTC m=+430.164823587 I0728 10:06:30.641671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-28 10:06:30.641656418 +0000 UTC m=+430.168380774 I0728 10:06:30.652393 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.652751 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:06:30.652744029 +0000 UTC m=+430.179468345 I0728 10:06:30.663158 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:06:30.663142093 +0000 UTC m=+430.189866419 I0728 10:06:30.667833 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.676065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.676693 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:06:30.676684784 +0000 UTC m=+430.203409110 I0728 10:06:30.930795 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:30.978041 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:31.128415 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:31.283997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-28 10:06:31.283976014 +0000 UTC m=+430.810700360 I0728 10:06:31.485972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-28 10:06:31.485954807 +0000 UTC m=+431.012679153 I0728 10:06:31.830219 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:06:31.830198944 +0000 UTC m=+431.356923300 I0728 10:06:31.926164 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:39.068568 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" condition "Ready" to 2026-07-28 10:06:39.068547254 +0000 UTC m=+438.595271570 I0728 10:06:39.068593 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:06:39.068617 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" condition "Issuing" to 2026-07-28 10:06:39.068612326 +0000 UTC m=+438.595336642 I0728 10:06:39.078965 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:39.079044 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:06:39.079067 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" condition "Issuing" to 2026-07-28 10:06:39.079059392 +0000 UTC m=+438.605783718 I0728 10:06:39.367799 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:39.381835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls-1" condition "Approved" to 2026-07-28 10:06:39.381817173 +0000 UTC m=+438.908541499 I0728 10:06:39.405006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls-1" condition "Ready" to 2026-07-28 10:06:39.404994532 +0000 UTC m=+438.931718858 I0728 10:06:39.437910 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:06:39.437891217 +0000 UTC m=+438.964615543 I0728 10:06:39.450480 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:39.451102 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:06:39.451094951 +0000 UTC m=+438.977819277 I0728 10:06:39.462053 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:06:39.465107 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xtqj5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:07:05.460501 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:07:05.460555 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 10:07:05.46054608 +0000 UTC m=+464.987270406 I0728 10:07:05.460916 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 10:07:05.460910469 +0000 UTC m=+464.987634795 I0728 10:07:05.473306 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:07:05.473491 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 10:07:05.473474436 +0000 UTC m=+465.000198792 I0728 10:07:05.750900 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:07:05.796772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-28 10:07:05.796749241 +0000 UTC m=+465.323473567 I0728 10:07:05.814719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-28 10:07:05.81470554 +0000 UTC m=+465.341429866 I0728 10:07:05.845253 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:07:05.845241529 +0000 UTC m=+465.371965845 I0728 10:07:05.862577 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:10:36.772248 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 10:10:36.772231151 +0000 UTC m=+676.298955477 I0728 10:10:36.772298 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:10:36.772390 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 10:10:36.772373854 +0000 UTC m=+676.299098210 I0728 10:10:36.783848 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:10:36.783973 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 10:10:36.783956259 +0000 UTC m=+676.310680625 I0728 10:10:36.921557 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:10:36.956903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-28 10:10:36.956884268 +0000 UTC m=+676.483608594 I0728 10:10:36.970735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-28 10:10:36.970711917 +0000 UTC m=+676.497436273 I0728 10:10:36.997499 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:10:36.997476435 +0000 UTC m=+676.524200751 I0728 10:10:37.012861 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:13:21.103502 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:13:21.103566 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-28 10:13:21.103559162 +0000 UTC m=+840.630283488 I0728 10:13:21.103811 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-28 10:13:21.103789528 +0000 UTC m=+840.630513874 I0728 10:13:21.113724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:13:21.113873 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-28 10:13:21.113846742 +0000 UTC m=+840.640571058 I0728 10:13:21.398318 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:13:21.434658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-07-28 10:13:21.434645941 +0000 UTC m=+840.961370257 I0728 10:13:21.452489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-07-28 10:13:21.452478194 +0000 UTC m=+840.979202510 I0728 10:13:21.481460 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:13:21.481422649 +0000 UTC m=+841.008146965 I0728 10:13:21.494473 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:13:21.495091 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:13:21.495082662 +0000 UTC m=+841.021806988 I0728 10:13:21.508191 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:14:30.643941 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-28 10:14:30.643917823 +0000 UTC m=+910.170642169 I0728 10:14:30.644013 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:14:30.644241 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-28 10:14:30.64420045 +0000 UTC m=+910.170924816 I0728 10:14:30.665691 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:14:30.665808 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-28 10:14:30.665797996 +0000 UTC m=+910.192522312 I0728 10:14:30.739130 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:14:30.769629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-07-28 10:14:30.769617123 +0000 UTC m=+910.296341449 I0728 10:14:30.793569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-07-28 10:14:30.793558906 +0000 UTC m=+910.320283232 I0728 10:14:30.825467 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:14:30.825446062 +0000 UTC m=+910.352170388 I0728 10:14:30.840572 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:14:30.841402 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:14:30.8413901 +0000 UTC m=+910.368114426 I0728 10:14:30.859678 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:17:50.902840 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:17:50.902943 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-28 10:17:50.902930008 +0000 UTC m=+1110.429654364 I0728 10:17:50.902961 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-28 10:17:50.902931958 +0000 UTC m=+1110.429656314 I0728 10:17:50.913414 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:17:50.913501 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-28 10:17:50.913492172 +0000 UTC m=+1110.440216498 I0728 10:17:51.061915 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:17:51.093203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-07-28 10:17:51.093182442 +0000 UTC m=+1110.619906768 I0728 10:17:51.108981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-07-28 10:17:51.108970663 +0000 UTC m=+1110.635694979 I0728 10:17:51.130669 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:17:51.130654877 +0000 UTC m=+1110.657379203 I0728 10:17:51.144637 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:17:51.145124 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:17:51.145116166 +0000 UTC m=+1110.671840492 I0728 10:17:51.159635 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:25:49.436610 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:25:49.436681 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-28 10:25:49.436671693 +0000 UTC m=+1588.963396019 I0728 10:25:49.436796 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-28 10:25:49.436755066 +0000 UTC m=+1588.963479392 I0728 10:25:49.455039 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:25:49.455192 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-28 10:25:49.455178968 +0000 UTC m=+1588.981903314 I0728 10:25:49.893516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:25:49.933688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-07-28 10:25:49.93366741 +0000 UTC m=+1589.460391736 I0728 10:25:49.947548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-07-28 10:25:49.947533813 +0000 UTC m=+1589.474258139 I0728 10:25:49.973106 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:25:49.973090567 +0000 UTC m=+1589.499814883 I0728 10:25:49.989532 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:25:49.990231 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:25:49.990223749 +0000 UTC m=+1589.516948075 I0728 10:25:50.005490 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:25:50.006152 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:25:50.006140982 +0000 UTC m=+1589.532865298 I0728 10:27:40.025978 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-28 10:27:40.025954805 +0000 UTC m=+1699.552679211 I0728 10:27:40.026027 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:27:40.026066 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-28 10:27:40.026057698 +0000 UTC m=+1699.552782024 I0728 10:27:40.038212 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:27:40.038326 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:27:40.038409 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-28 10:27:40.03839833 +0000 UTC m=+1699.565122676 I0728 10:27:40.238266 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:27:40.253242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-07-28 10:27:40.253225775 +0000 UTC m=+1699.779950091 I0728 10:27:40.268129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-07-28 10:27:40.26811626 +0000 UTC m=+1699.794840576 I0728 10:27:40.293331 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:27:40.293315376 +0000 UTC m=+1699.820039732 I0728 10:27:40.308111 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:41.438114 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:28:41.438200 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-28 10:28:41.438188055 +0000 UTC m=+1760.964912411 I0728 10:28:41.438734 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-28 10:28:41.438724888 +0000 UTC m=+1760.965449244 I0728 10:28:41.456580 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:41.456682 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-28 10:28:41.456672988 +0000 UTC m=+1760.983397314 I0728 10:28:41.476590 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:41.505744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-07-28 10:28:41.505729059 +0000 UTC m=+1761.032453385 I0728 10:28:41.520328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-07-28 10:28:41.520311866 +0000 UTC m=+1761.047036192 I0728 10:28:41.564154 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:28:41.5641306 +0000 UTC m=+1761.090854926 I0728 10:28:41.579350 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:41.580654 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:28:41.580586813 +0000 UTC m=+1761.107311139 I0728 10:28:41.591974 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:42.111652 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:28:42.111739 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-28 10:28:42.11172762 +0000 UTC m=+1761.638451946 I0728 10:28:42.112145 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-28 10:28:42.112121879 +0000 UTC m=+1761.638846235 I0728 10:28:42.126540 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:42.126915 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-28 10:28:42.126901131 +0000 UTC m=+1761.653625457 I0728 10:28:42.141083 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:42.164208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-07-28 10:28:42.164185014 +0000 UTC m=+1761.690909340 I0728 10:28:42.181178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-07-28 10:28:42.18116642 +0000 UTC m=+1761.707890736 I0728 10:28:42.207550 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:28:42.207526886 +0000 UTC m=+1761.734251212 I0728 10:28:42.225390 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:42.225916 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:28:42.225902605 +0000 UTC m=+1761.752626951 I0728 10:28:42.236593 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:42.243040 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:28:42.885973 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-28 10:28:42.885952239 +0000 UTC m=+1762.412676575 I0728 10:28:43.594624 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-28 10:28:43.594606183 +0000 UTC m=+1763.121330539 I0728 10:29:29.606559 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:29:29.606594 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-28 10:29:29.606586269 +0000 UTC m=+1809.133310585 I0728 10:29:29.608872 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-28 10:29:29.608866144 +0000 UTC m=+1809.135590460 I0728 10:29:29.632685 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:29:29.632814 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-28 10:29:29.632804871 +0000 UTC m=+1809.159529187 I0728 10:29:31.870388 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:29:31.915943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-07-28 10:29:31.915925221 +0000 UTC m=+1811.442649567 I0728 10:29:31.934962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-07-28 10:29:31.934949507 +0000 UTC m=+1811.461673863 I0728 10:29:31.965019 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:29:31.965003212 +0000 UTC m=+1811.491727558 I0728 10:29:31.979826 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:29:31.984197 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:29:31.984183452 +0000 UTC m=+1811.510907808 I0728 10:29:31.997939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:32:27.315011 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:32:27.315078 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-28 10:32:27.315067618 +0000 UTC m=+1986.841791964 I0728 10:32:27.315445 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-28 10:32:27.315437767 +0000 UTC m=+1986.842162113 I0728 10:32:27.330366 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:32:27.330579 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:32:27.330643 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-28 10:32:27.33060457 +0000 UTC m=+1986.857328896 I0728 10:32:27.678129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-07-28 10:32:27.677294459 +0000 UTC m=+1987.204018815 I0728 10:32:27.695917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-07-28 10:32:27.695903577 +0000 UTC m=+1987.222627903 I0728 10:32:27.733403 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:32:27.733388019 +0000 UTC m=+1987.260112335 I0728 10:32:27.748072 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:32:27.748723 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:32:27.748715446 +0000 UTC m=+1987.275439772 I0728 10:32:27.764697 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:32:29.029673 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:32:29.029740 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-28 10:32:29.029728931 +0000 UTC m=+1988.556453277 I0728 10:32:29.031379 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-28 10:32:29.03136914 +0000 UTC m=+1988.558093496 I0728 10:32:29.049391 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:32:29.049510 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-28 10:32:29.049501497 +0000 UTC m=+1988.576225813 I0728 10:32:29.218678 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:32:29.254068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-07-28 10:32:29.25405397 +0000 UTC m=+1988.780778276 I0728 10:32:29.272196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-07-28 10:32:29.272179555 +0000 UTC m=+1988.798903881 I0728 10:32:29.303041 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:32:29.303019994 +0000 UTC m=+1988.829744320 I0728 10:32:29.322643 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:32:29.323246 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:32:29.323230431 +0000 UTC m=+1988.849954747 I0728 10:32:29.338067 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:32:29.338667 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:32:29.338656851 +0000 UTC m=+1988.865381177 I0728 10:32:29.344241 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:35:56.773655 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-28 10:35:56.77363824 +0000 UTC m=+2196.300362576 I0728 10:35:56.773882 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:35:56.773942 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-28 10:35:56.773937717 +0000 UTC m=+2196.300662033 I0728 10:35:56.792047 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:35:56.792469 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-28 10:35:56.792451248 +0000 UTC m=+2196.319175624 I0728 10:35:57.340460 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:35:57.384053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-07-28 10:35:57.384012127 +0000 UTC m=+2196.910736473 I0728 10:35:57.401551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-07-28 10:35:57.401535357 +0000 UTC m=+2196.928259673 I0728 10:35:57.430948 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:35:57.430926684 +0000 UTC m=+2196.957651000 I0728 10:35:57.447855 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:11.960319 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:36:11.960405 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t4szj-api" condition "Issuing" to 2026-07-28 10:36:11.960395186 +0000 UTC m=+2211.487119532 I0728 10:36:11.960582 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t4szj-api" condition "Ready" to 2026-07-28 10:36:11.960548989 +0000 UTC m=+2211.487273385 I0728 10:36:11.982379 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t4szj-vnc" condition "Ready" to 2026-07-28 10:36:11.982359432 +0000 UTC m=+2211.509083748 I0728 10:36:11.982493 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:36:11.982527 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t4szj-vnc" condition "Issuing" to 2026-07-28 10:36:11.982520036 +0000 UTC m=+2211.509244382 I0728 10:36:12.022136 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:12.022285 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t4szj-api" condition "Ready" to 2026-07-28 10:36:12.022272887 +0000 UTC m=+2211.548997233 I0728 10:36:12.049687 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:12.049843 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:36:12.049898 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t4szj-vnc" condition "Issuing" to 2026-07-28 10:36:12.049887217 +0000 UTC m=+2211.576611563 I0728 10:36:12.245609 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:12.410832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t4szj-api-1" condition "Approved" to 2026-07-28 10:36:12.410814794 +0000 UTC m=+2211.937539120 I0728 10:36:12.413606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t4szj-vnc-1" condition "Approved" to 2026-07-28 10:36:12.413597514 +0000 UTC m=+2211.940321840 I0728 10:36:12.430107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t4szj-api-1" condition "Ready" to 2026-07-28 10:36:12.430093462 +0000 UTC m=+2211.956817798 I0728 10:36:12.434435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t4szj-vnc-1" condition "Ready" to 2026-07-28 10:36:12.434430296 +0000 UTC m=+2211.961154612 I0728 10:36:12.456471 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t4szj-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:36:12.456450114 +0000 UTC m=+2211.983174440 I0728 10:36:12.462179 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t4szj-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:36:12.462169208 +0000 UTC m=+2211.988893534 I0728 10:36:12.475687 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:12.476563 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t4szj-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:36:12.476553189 +0000 UTC m=+2212.003277525 I0728 10:36:12.479551 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:12.480364 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t4szj-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:36:12.480352652 +0000 UTC m=+2212.007076978 I0728 10:36:12.485614 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:12.500576 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:12.501164 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:36:12.501911 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t4szj-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:36:12.501899009 +0000 UTC m=+2212.028623335 I0728 10:36:12.518789 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-t4szj-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t4szj-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:51.133671 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-28 10:40:51.133658577 +0000 UTC m=+2490.660382903 I0728 10:40:51.134002 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:40:51.134061 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-28 10:40:51.134051097 +0000 UTC m=+2490.660775443 I0728 10:40:51.146201 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:51.146293 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:40:51.146317 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-28 10:40:51.146308307 +0000 UTC m=+2490.673032633 I0728 10:40:51.267267 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:51.280793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-07-28 10:40:51.280779698 +0000 UTC m=+2490.807504034 I0728 10:40:51.297069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-07-28 10:40:51.297054253 +0000 UTC m=+2490.823778589 I0728 10:40:51.321768 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:40:51.321754498 +0000 UTC m=+2490.848478824 I0728 10:40:51.341120 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:51.341926 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:40:51.341916185 +0000 UTC m=+2490.868640511 I0728 10:40:51.349423 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:51.357186 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:52.677668 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-28 10:40:52.677652448 +0000 UTC m=+2492.204376774 I0728 10:40:52.677982 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:40:52.678069 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-28 10:40:52.67805826 +0000 UTC m=+2492.204782606 I0728 10:40:52.695655 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:52.695819 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:40:52.695869 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-28 10:40:52.695856444 +0000 UTC m=+2492.222580810 I0728 10:40:53.266115 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:53.278630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-07-28 10:40:53.278615929 +0000 UTC m=+2492.805340265 I0728 10:40:53.292965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-07-28 10:40:53.292954153 +0000 UTC m=+2492.819678479 I0728 10:40:53.324938 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:40:53.324928839 +0000 UTC m=+2492.851653165 I0728 10:40:53.336704 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:40:53.337523 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:40:53.337513737 +0000 UTC m=+2492.864238083 I0728 10:40:53.354290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:11.531347 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-28 10:43:11.531324569 +0000 UTC m=+2631.058048925 I0728 10:43:11.531446 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:43:11.531526 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-28 10:43:11.531516404 +0000 UTC m=+2631.058240760 E0728 10:43:11.542733 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:43:11.542794 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-28 10:43:11.54278508 +0000 UTC m=+2631.069509406 I0728 10:43:11.542820 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:43:11.543454 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:11.543622 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-28 10:43:11.543609459 +0000 UTC m=+2631.070333785 E0728 10:43:11.555033 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E0728 10:43:11.555117 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:43:11.555149 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 10:43:11.555231 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I0728 10:43:11.555885 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:11.593244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-07-28 10:43:11.593216574 +0000 UTC m=+2631.119940920 I0728 10:43:11.610236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-07-28 10:43:11.61022424 +0000 UTC m=+2631.136948576 I0728 10:43:11.636700 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:43:11.636689446 +0000 UTC m=+2631.163413772 I0728 10:43:11.651060 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:11.651346 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:43:11.651339026 +0000 UTC m=+2631.178063352 I0728 10:43:11.661029 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:11.669068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:12.216879 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:43:12.216909 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-28 10:43:12.216903122 +0000 UTC m=+2631.743627438 I0728 10:43:12.216990 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-28 10:43:12.216981714 +0000 UTC m=+2631.743706040 E0728 10:43:12.226127 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:43:12.226172 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-28 10:43:12.22616354 +0000 UTC m=+2631.752887856 I0728 10:43:12.226222 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:43:12.227461 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:12.227539 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-28 10:43:12.227534013 +0000 UTC m=+2631.754258319 E0728 10:43:12.237612 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E0728 10:43:12.237712 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 10:43:12.237805 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 10:43:12.237904 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I0728 10:43:12.241778 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:12.264701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-07-28 10:43:12.264686653 +0000 UTC m=+2631.791410969 I0728 10:43:12.278925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-07-28 10:43:12.278912711 +0000 UTC m=+2631.805637027 I0728 10:43:12.309634 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:43:12.309620541 +0000 UTC m=+2631.836344867 I0728 10:43:12.319635 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:12.439529 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:12.930680 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:43:12.930742 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-28 10:43:12.930728202 +0000 UTC m=+2632.457452558 I0728 10:43:12.931317 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 10:43:12.931308826 +0000 UTC m=+2632.458033172 I0728 10:43:12.944636 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:12.944881 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 10:43:12.944868954 +0000 UTC m=+2632.471593320 I0728 10:43:12.959578 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:12.959804 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:12.959986 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 10:43:12.959855588 +0000 UTC m=+2632.486579944 I0728 10:43:12.967266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-07-28 10:43:12.967248842 +0000 UTC m=+2632.493973158 I0728 10:43:12.969910 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 10:43:12.969899468 +0000 UTC m=+2632.496623794 I0728 10:43:13.305010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-07-28 10:43:13.304997697 +0000 UTC m=+2632.831722023 I0728 10:43:13.337443 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:16.555879 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:43:16.555866911 +0000 UTC m=+2636.082591227 I0728 10:43:16.566926 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:43:16.566901866 +0000 UTC m=+2636.093626192 I0728 10:43:16.586383 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:43:16.586369551 +0000 UTC m=+2636.113093877 I0728 10:43:16.602883 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:16.603328 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:43:16.603318683 +0000 UTC m=+2636.130043009 I0728 10:43:16.611206 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:16.619011 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:43:17.239006 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:43:17.238996151 +0000 UTC m=+2636.765720477 I0728 10:45:49.376196 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-28 10:45:49.376183192 +0000 UTC m=+2788.902907508 I0728 10:45:49.376466 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:45:49.376521 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-28 10:45:49.37650898 +0000 UTC m=+2788.903233336 I0728 10:45:49.386944 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:45:49.387040 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-28 10:45:49.387031112 +0000 UTC m=+2788.913755428 I0728 10:45:49.794862 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:45:49.830945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-07-28 10:45:49.830936648 +0000 UTC m=+2789.357660964 I0728 10:45:49.848611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-07-28 10:45:49.848601347 +0000 UTC m=+2789.375325663 I0728 10:45:49.871282 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:45:49.871267681 +0000 UTC m=+2789.397991997 I0728 10:45:49.884945 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:45:49.886011 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:45:49.885997108 +0000 UTC m=+2789.412721454 I0728 10:45:49.901239 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:36.431258 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-28 10:46:36.431245425 +0000 UTC m=+2835.957969751 I0728 10:46:36.448983 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-28 10:46:36.448961993 +0000 UTC m=+2835.975686319 I0728 10:46:36.449130 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:46:36.449218 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-28 10:46:36.449206909 +0000 UTC m=+2835.975931235 I0728 10:46:36.467796 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:36.467885 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-28 10:46:36.467874469 +0000 UTC m=+2835.994598785 E0728 10:46:36.483858 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0728 10:46:36.539727 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-28 10:46:36.539707743 +0000 UTC m=+2836.066432089 I0728 10:46:36.559664 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:46:36.559706 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-28 10:46:36.559696406 +0000 UTC m=+2836.086420732 I0728 10:46:36.560533 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-28 10:46:36.560519436 +0000 UTC m=+2836.087243792 I0728 10:46:36.573060 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:36.573182 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-28 10:46:36.573170389 +0000 UTC m=+2836.099894715 E0728 10:46:36.614431 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0728 10:46:36.723442 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:36.746387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-07-28 10:46:36.746375975 +0000 UTC m=+2836.273100301 I0728 10:46:36.767014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-07-28 10:46:36.766985004 +0000 UTC m=+2836.293709330 I0728 10:46:36.801254 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:46:36.801240029 +0000 UTC m=+2836.327964345 I0728 10:46:36.824182 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:36.824723 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:46:36.82471739 +0000 UTC m=+2836.351441696 I0728 10:46:36.842722 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:36.843037 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:37.443769 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-28 10:46:37.443752402 +0000 UTC m=+2836.970476718 I0728 10:46:37.463975 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:46:37.464003 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-28 10:46:37.463997032 +0000 UTC m=+2836.990721348 I0728 10:46:37.464222 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-28 10:46:37.464218897 +0000 UTC m=+2836.990943213 I0728 10:46:37.480867 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:37.481421 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-28 10:46:37.481395531 +0000 UTC m=+2837.008119937 I0728 10:46:37.715075 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:37.758694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-07-28 10:46:37.758677687 +0000 UTC m=+2837.285402003 I0728 10:46:37.783621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-07-28 10:46:37.783609912 +0000 UTC m=+2837.310334228 I0728 10:46:37.823955 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:46:37.823940637 +0000 UTC m=+2837.350664963 I0728 10:46:37.838733 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:37.893754 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:38.004366 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-28 10:46:38.004349062 +0000 UTC m=+2837.531073408 I0728 10:46:38.022965 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-28 10:46:38.022951641 +0000 UTC m=+2837.549675967 I0728 10:46:38.023573 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:46:38.023597 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-28 10:46:38.023591967 +0000 UTC m=+2837.550316293 I0728 10:46:38.043724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:38.043832 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:46:38.043879 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-28 10:46:38.043870927 +0000 UTC m=+2837.570595283 I0728 10:46:38.479400 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:38.494144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-07-28 10:46:38.494122903 +0000 UTC m=+2838.020847229 I0728 10:46:38.518521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-07-28 10:46:38.518508895 +0000 UTC m=+2838.045233211 I0728 10:46:38.536962 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-28 10:46:38.536947571 +0000 UTC m=+2838.063671887 I0728 10:46:38.548867 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:46:38.548850614 +0000 UTC m=+2838.075574930 I0728 10:46:38.572297 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 10:46:38.572328 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-28 10:46:38.572321924 +0000 UTC m=+2838.099046240 I0728 10:46:38.572583 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-28 10:46:38.57257893 +0000 UTC m=+2838.099303236 I0728 10:46:38.577986 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:38.584244 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:38.585019 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-28 10:46:38.585005417 +0000 UTC m=+2838.111729733 I0728 10:46:39.073370 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 10:46:39.102108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-07-28 10:46:39.102092323 +0000 UTC m=+2838.628816649 I0728 10:46:39.450719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-07-28 10:46:39.450708709 +0000 UTC m=+2838.977433025 I0728 10:46:39.702548 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 10:46:39.702529856 +0000 UTC m=+2839.229254212 I0728 10:46:39.786289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"