I0708 03:37:04.025038 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0708 03:37:04.025142 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0708 03:37:04.025239 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0708 03:37:04.029736 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0708 03:37:04.030471 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0708 03:37:04.030469 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0708 03:37:04.030469 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0708 03:37:04.034422 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0708 03:37:04.051566 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0708 03:37:04.051738 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0708 03:37:04.055205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0708 03:37:04.060016 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0708 03:37:04.062462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0708 03:37:04.064253 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0708 03:37:04.069269 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0708 03:37:04.071219 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0708 03:37:04.073871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0708 03:37:04.076609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0708 03:37:04.079123 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0708 03:37:04.081276 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0708 03:37:04.081312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0708 03:37:04.084030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0708 03:37:04.086520 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0708 03:37:04.086548 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0708 03:37:04.086579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0708 03:37:04.092713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0708 03:37:04.096405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0708 03:37:04.098935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0708 03:37:04.101598 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0708 03:37:04.101633 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0708 03:37:04.101710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0708 03:37:04.104433 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0708 03:37:04.107419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0708 03:37:04.110014 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.110022 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.111082 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.131640 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.154665 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.193734 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.211677 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.238324 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.255338 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:04.273129 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 03:37:16.233529 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-08 03:37:16.233513611 +0000 UTC m=+12.240950446 I0708 03:37:16.984278 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 03:37:16.984198221 +0000 UTC m=+12.991635076 I0708 03:37:16.984314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:37:16.984412 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 03:37:16.984398776 +0000 UTC m=+12.991835621 E0708 03:37:17.000142 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 03:37:17.000219 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-08 03:37:17.000204972 +0000 UTC m=+13.007641837 E0708 03:37:17.000300 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 03:37:17.001316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:37:17.001591 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 03:37:17.00157239 +0000 UTC m=+13.009009265 E0708 03:37:17.009596 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0708 03:37:17.009789 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 03:37:17.009874 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 03:37:17.009979 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0708 03:37:17.016102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:37:17.036322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fpnrc" condition "Approved" to 2026-07-08 03:37:17.036305097 +0000 UTC m=+13.043742022 I0708 03:37:17.049873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fpnrc" condition "Ready" to 2026-07-08 03:37:17.049860841 +0000 UTC m=+13.057297646 I0708 03:37:17.073122 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:37:17.073108061 +0000 UTC m=+13.080544866 I0708 03:37:17.090134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:37:17.133049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:37:22.010887 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:37:22.010875131 +0000 UTC m=+18.018311956 I0708 03:37:42.497792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:37:42.497821 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 03:37:42.497816138 +0000 UTC m=+38.505252923 I0708 03:37:42.498244 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 03:37:42.49823961 +0000 UTC m=+38.505676405 I0708 03:37:42.524812 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-08 03:37:42.524802722 +0000 UTC m=+38.532239527 I0708 03:37:42.528618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:37:42.528691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:37:42.528716 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 03:37:42.528709469 +0000 UTC m=+38.536146264 I0708 03:37:42.901829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:37:42.909750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mvt8b" condition "Approved" to 2026-07-08 03:37:42.90973965 +0000 UTC m=+38.917176455 I0708 03:37:42.946065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mvt8b" condition "Ready" to 2026-07-08 03:37:42.946048611 +0000 UTC m=+38.953485446 I0708 03:37:42.976706 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:37:42.976683866 +0000 UTC m=+38.984120701 I0708 03:37:43.015823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:37:43.016276 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:37:43.016244976 +0000 UTC m=+39.023681781 I0708 03:37:43.037074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:37:43.037602 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:37:43.037593374 +0000 UTC m=+39.045030189 I0708 03:39:17.177983 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-08 03:39:17.177969198 +0000 UTC m=+133.185406033 I0708 03:39:17.178035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:39:17.178079 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-08 03:39:17.178067261 +0000 UTC m=+133.185504086 E0708 03:39:17.192523 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 03:39:17.192612 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-08 03:39:17.192600191 +0000 UTC m=+133.200036996 I0708 03:39:17.192664 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 03:39:17.194925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:39:17.195004 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-08 03:39:17.194995657 +0000 UTC m=+133.202432492 E0708 03:39:17.203503 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0708 03:39:17.203599 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 03:39:17.203635 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0708 03:39:17.203680 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0708 03:39:17.213808 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-08 03:39:17.213794406 +0000 UTC m=+133.221231211 I0708 03:39:17.213845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:39:17.213873 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-08 03:39:17.213864128 +0000 UTC m=+133.221300933 I0708 03:39:17.230794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:39:17.230882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:39:17.230900 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-08 03:39:17.230894017 +0000 UTC m=+133.238330822 I0708 03:39:17.384249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:39:17.410781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-q5z52" condition "Approved" to 2026-07-08 03:39:17.410761827 +0000 UTC m=+133.418198652 I0708 03:39:17.438918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-q5z52" condition "Ready" to 2026-07-08 03:39:17.438905173 +0000 UTC m=+133.446341978 I0708 03:39:17.456208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:39:17.462623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-c4p5x" condition "Approved" to 2026-07-08 03:39:17.462614446 +0000 UTC m=+133.470051251 I0708 03:39:17.472398 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:39:17.472382736 +0000 UTC m=+133.479819541 I0708 03:39:17.482876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-c4p5x" condition "Ready" to 2026-07-08 03:39:17.482863125 +0000 UTC m=+133.490299930 I0708 03:39:17.493004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:39:17.493551 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:39:17.493540439 +0000 UTC m=+133.500977274 I0708 03:39:17.506192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:39:17.506486 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:39:17.506477746 +0000 UTC m=+133.513914551 I0708 03:39:17.510137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:39:22.204618 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:39:22.204605022 +0000 UTC m=+138.212041847 I0708 03:39:22.218929 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-c4p5x" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:39:22.218917815 +0000 UTC m=+138.226354650 I0708 03:39:22.250957 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:39:22.250943526 +0000 UTC m=+138.258380331 I0708 03:39:22.270365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:41:48.682601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:41:48.682659 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-07-08 03:41:48.682646424 +0000 UTC m=+284.690083279 I0708 03:41:48.682654 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-07-08 03:41:48.682592593 +0000 UTC m=+284.690029418 I0708 03:41:48.698067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:41:48.698158 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-07-08 03:41:48.698146807 +0000 UTC m=+284.705583642 I0708 03:41:49.205617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:41:49.238894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-chpdp" condition "Approved" to 2026-07-08 03:41:49.238877806 +0000 UTC m=+285.246314621 I0708 03:41:49.258326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-chpdp" condition "Ready" to 2026-07-08 03:41:49.258308979 +0000 UTC m=+285.265745784 I0708 03:41:49.284957 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:41:49.284932673 +0000 UTC m=+285.292369518 I0708 03:41:49.306397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:41:49.306661 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:41:49.306655511 +0000 UTC m=+285.314092316 I0708 03:41:49.321182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:41:49.326633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:41:49.326975 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:41:49.326966769 +0000 UTC m=+285.334403594 I0708 03:43:00.369856 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 03:43:00.369837093 +0000 UTC m=+356.377273918 I0708 03:43:00.370133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:43:00.370175 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 03:43:00.370165212 +0000 UTC m=+356.377602017 E0708 03:43:00.383726 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 03:43:00.383775 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-08 03:43:00.383763363 +0000 UTC m=+356.391200188 E0708 03:43:00.383843 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 03:43:00.388988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:00.389082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:43:00.389109 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 03:43:00.389101042 +0000 UTC m=+356.396537877 E0708 03:43:00.391555 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0708 03:43:00.391662 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 03:43:00.391695 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 03:43:00.391755 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0708 03:43:00.422134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:00.425759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zd6ww" condition "Approved" to 2026-07-08 03:43:00.425739507 +0000 UTC m=+356.433176332 I0708 03:43:00.440160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zd6ww" condition "Ready" to 2026-07-08 03:43:00.44014867 +0000 UTC m=+356.447585475 I0708 03:43:00.458231 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:00.458218145 +0000 UTC m=+356.465654940 I0708 03:43:00.475416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:05.392005 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:05.391990915 +0000 UTC m=+361.399427740 I0708 03:43:42.400976 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 03:43:42.400925139 +0000 UTC m=+398.408361944 I0708 03:43:42.401549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:43:42.401577 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 03:43:42.401572147 +0000 UTC m=+398.409008962 I0708 03:43:42.402029 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:43:42.402049 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 03:43:42.40204445 +0000 UTC m=+398.409481265 I0708 03:43:42.402318 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 03:43:42.402303808 +0000 UTC m=+398.409740623 I0708 03:43:42.406208 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 03:43:42.406198026 +0000 UTC m=+398.413634821 I0708 03:43:42.406540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:43:42.406560 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 03:43:42.406556066 +0000 UTC m=+398.413992851 I0708 03:43:42.454153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.454223 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 03:43:42.454216353 +0000 UTC m=+398.461653138 I0708 03:43:42.461885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.461978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:43:42.462013 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 03:43:42.46200548 +0000 UTC m=+398.469442275 I0708 03:43:42.488336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.488484 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 03:43:42.488472226 +0000 UTC m=+398.495909031 I0708 03:43:42.600455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.605697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9bjbp" condition "Approved" to 2026-07-08 03:43:42.605677529 +0000 UTC m=+398.613114364 I0708 03:43:42.627132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.628897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9bjbp" condition "Ready" to 2026-07-08 03:43:42.628882895 +0000 UTC m=+398.636319700 I0708 03:43:42.654083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9l2v7" condition "Approved" to 2026-07-08 03:43:42.654073156 +0000 UTC m=+398.661509961 I0708 03:43:42.659527 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:42.659507607 +0000 UTC m=+398.666944442 I0708 03:43:42.671266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9l2v7" condition "Ready" to 2026-07-08 03:43:42.671248094 +0000 UTC m=+398.678684919 I0708 03:43:42.680117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.680525 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:42.680517362 +0000 UTC m=+398.687954157 I0708 03:43:42.696272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.696535 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:42.696526578 +0000 UTC m=+398.703963383 I0708 03:43:42.729101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.778819 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:42.778809868 +0000 UTC m=+398.786246663 I0708 03:43:42.979808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:42.980270 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:42.980261716 +0000 UTC m=+398.987698511 I0708 03:43:43.031118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:43.328630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:43.385670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6rjf2" condition "Approved" to 2026-07-08 03:43:43.385653681 +0000 UTC m=+399.393090506 I0708 03:43:43.791708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6rjf2" condition "Ready" to 2026-07-08 03:43:43.791673913 +0000 UTC m=+399.799110748 I0708 03:43:43.979509 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:43.979497151 +0000 UTC m=+399.986933956 I0708 03:43:44.077084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:44.077482 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:44.077473348 +0000 UTC m=+400.084910153 I0708 03:43:44.329536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:44.377406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:48.782645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:43:48.782722 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls" condition "Ready" to 2026-07-08 03:43:48.782697223 +0000 UTC m=+404.790134068 I0708 03:43:48.782740 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls" condition "Issuing" to 2026-07-08 03:43:48.782729684 +0000 UTC m=+404.790166509 I0708 03:43:48.797756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:43:48.797833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:43:48.797858 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls" condition "Issuing" to 2026-07-08 03:43:48.797851055 +0000 UTC m=+404.805287860 I0708 03:43:49.210070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rbb5r-hlmwt" condition "Approved" to 2026-07-08 03:43:49.210057499 +0000 UTC m=+405.217494304 I0708 03:43:49.236388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rbb5r-hlmwt" condition "Ready" to 2026-07-08 03:43:49.236372921 +0000 UTC m=+405.243809726 I0708 03:43:49.263801 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:43:49.263783035 +0000 UTC m=+405.271219860 I0708 03:43:49.283747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rbb5r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:44:19.676429 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 03:44:19.676406295 +0000 UTC m=+435.683843140 I0708 03:44:19.676672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:44:19.676762 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 03:44:19.676750595 +0000 UTC m=+435.684187470 I0708 03:44:19.689229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:44:19.689382 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:44:19.689453 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 03:44:19.689444258 +0000 UTC m=+435.696881063 I0708 03:44:20.093099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:44:20.104971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d5zwb" condition "Approved" to 2026-07-08 03:44:20.104949203 +0000 UTC m=+436.112386038 I0708 03:44:20.123158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d5zwb" condition "Ready" to 2026-07-08 03:44:20.123139559 +0000 UTC m=+436.130576384 I0708 03:44:20.150427 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:44:20.150398318 +0000 UTC m=+436.157835123 I0708 03:44:20.169963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:44:20.170382 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:44:20.170375114 +0000 UTC m=+436.177811939 I0708 03:44:20.179968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:44:20.187501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:44:20.187812 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:44:20.187801959 +0000 UTC m=+436.195238764 I0708 03:44:20.193962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:47:31.562719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:47:31.562730 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 03:47:31.562697127 +0000 UTC m=+627.570133942 I0708 03:47:31.562752 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 03:47:31.562746779 +0000 UTC m=+627.570183584 I0708 03:47:31.580299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:47:31.580380 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 03:47:31.580370517 +0000 UTC m=+627.587807342 I0708 03:47:31.846945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:47:31.879083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-brm9q" condition "Approved" to 2026-07-08 03:47:31.879068452 +0000 UTC m=+627.886505257 I0708 03:47:31.900440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-brm9q" condition "Ready" to 2026-07-08 03:47:31.900429184 +0000 UTC m=+627.907865989 I0708 03:47:31.928110 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:47:31.92808392 +0000 UTC m=+627.935520705 I0708 03:47:31.949478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:47:31.995782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:50:01.745950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:50:01.746015 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-08 03:50:01.746008366 +0000 UTC m=+777.753445171 I0708 03:50:01.745965 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-08 03:50:01.745929444 +0000 UTC m=+777.753366269 I0708 03:50:01.765854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:50:01.766103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:50:01.766124 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-08 03:50:01.766119666 +0000 UTC m=+777.773556461 I0708 03:50:02.342307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dw9pl" condition "Approved" to 2026-07-08 03:50:02.342289781 +0000 UTC m=+778.349726616 I0708 03:50:02.377021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dw9pl" condition "Ready" to 2026-07-08 03:50:02.377009232 +0000 UTC m=+778.384446027 I0708 03:50:02.408224 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:50:02.408215996 +0000 UTC m=+778.415652801 I0708 03:50:02.428848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:50:02.429036 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:50:02.429031416 +0000 UTC m=+778.436468211 I0708 03:50:02.453613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:50:02.453845 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:50:02.453838795 +0000 UTC m=+778.461275600 I0708 03:50:02.454135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:51:07.267384 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-08 03:51:07.267337189 +0000 UTC m=+843.274773994 I0708 03:51:07.267870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:51:07.267911 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-08 03:51:07.267906985 +0000 UTC m=+843.275343780 I0708 03:51:07.281861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:51:07.281938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:51:07.281960 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-08 03:51:07.28195403 +0000 UTC m=+843.289390835 I0708 03:51:07.437282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rfnnd" condition "Approved" to 2026-07-08 03:51:07.437273894 +0000 UTC m=+843.444710689 I0708 03:51:07.460000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rfnnd" condition "Ready" to 2026-07-08 03:51:07.459987776 +0000 UTC m=+843.467424571 I0708 03:51:07.498532 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:51:07.498517521 +0000 UTC m=+843.505954326 I0708 03:51:07.525876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:51:07.526761 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:51:07.526753784 +0000 UTC m=+843.534190579 I0708 03:51:07.548584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:51:07.549030 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:51:07.549018604 +0000 UTC m=+843.556455429 I0708 03:54:10.085684 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-08 03:54:10.085656631 +0000 UTC m=+1026.093093436 I0708 03:54:10.085757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 03:54:10.085819 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-08 03:54:10.085810255 +0000 UTC m=+1026.093247090 I0708 03:54:10.102740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:54:10.102840 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-08 03:54:10.102832034 +0000 UTC m=+1026.110268839 I0708 03:54:10.357509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:54:10.383906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4kvgv" condition "Approved" to 2026-07-08 03:54:10.383898155 +0000 UTC m=+1026.391334960 I0708 03:54:10.401195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4kvgv" condition "Ready" to 2026-07-08 03:54:10.401189421 +0000 UTC m=+1026.408626216 I0708 03:54:10.431741 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:54:10.431724815 +0000 UTC m=+1026.439161650 I0708 03:54:10.452269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 03:54:10.452536 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 03:54:10.452530216 +0000 UTC m=+1026.459967011 I0708 03:54:10.469263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:00:23.349396 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-08 04:00:23.349349393 +0000 UTC m=+1399.356786198 I0708 04:00:23.349457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:00:23.349499 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-08 04:00:23.349494807 +0000 UTC m=+1399.356931612 I0708 04:00:23.365217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:00:23.365292 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-08 04:00:23.365284961 +0000 UTC m=+1399.372721766 I0708 04:00:23.509415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:00:23.540034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-vtdxn" condition "Approved" to 2026-07-08 04:00:23.540020577 +0000 UTC m=+1399.547457402 I0708 04:00:23.558271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-vtdxn" condition "Ready" to 2026-07-08 04:00:23.558257248 +0000 UTC m=+1399.565694083 I0708 04:00:23.596843 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:00:23.596825348 +0000 UTC m=+1399.604262183 I0708 04:00:23.628803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:00:23.629103 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:00:23.629097836 +0000 UTC m=+1399.636534631 I0708 04:00:23.641628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:00:23.642175 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:00:23.642164445 +0000 UTC m=+1399.649601280 I0708 04:00:23.647185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:01:55.373689 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:01:55.373732 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-08 04:01:55.373722667 +0000 UTC m=+1491.381159492 I0708 04:01:55.373672 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-08 04:01:55.373613024 +0000 UTC m=+1491.381049849 I0708 04:01:55.393386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:01:55.393591 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-08 04:01:55.393580995 +0000 UTC m=+1491.401017810 I0708 04:01:55.652539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:01:55.703219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wtbpm" condition "Approved" to 2026-07-08 04:01:55.703201506 +0000 UTC m=+1491.710638341 I0708 04:01:55.731735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wtbpm" condition "Ready" to 2026-07-08 04:01:55.731720282 +0000 UTC m=+1491.739157087 I0708 04:01:55.757135 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:01:55.757122012 +0000 UTC m=+1491.764558797 I0708 04:01:55.782701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:01:55.783127 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:01:55.783119338 +0000 UTC m=+1491.790556153 I0708 04:01:55.798472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:52.473778 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-08 04:02:52.473765706 +0000 UTC m=+1548.481202511 I0708 04:02:52.473755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:02:52.473890 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-08 04:02:52.473884779 +0000 UTC m=+1548.481321584 I0708 04:02:52.487388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:52.487866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:02:52.487887 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-08 04:02:52.487882065 +0000 UTC m=+1548.495318860 I0708 04:02:52.537425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:52.541298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-fdrg2" condition "Approved" to 2026-07-08 04:02:52.541285157 +0000 UTC m=+1548.548721962 I0708 04:02:52.556253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-fdrg2" condition "Ready" to 2026-07-08 04:02:52.556238859 +0000 UTC m=+1548.563675664 I0708 04:02:52.576844 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:02:52.576824726 +0000 UTC m=+1548.584261561 I0708 04:02:52.595960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:52.597178 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:02:52.597169887 +0000 UTC m=+1548.604606692 I0708 04:02:52.603142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:52.618221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:53.153024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:02:53.153067 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-08 04:02:53.153057164 +0000 UTC m=+1549.160493989 I0708 04:02:53.154210 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-08 04:02:53.154199525 +0000 UTC m=+1549.161636350 I0708 04:02:53.176166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:53.176251 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-08 04:02:53.176242582 +0000 UTC m=+1549.183679387 I0708 04:02:53.196571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:53.196637 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-08 04:02:53.196629484 +0000 UTC m=+1549.204066279 I0708 04:02:53.198159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-tctfq" condition "Approved" to 2026-07-08 04:02:53.198152056 +0000 UTC m=+1549.205588861 I0708 04:02:53.217494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-tctfq" condition "Ready" to 2026-07-08 04:02:53.217487418 +0000 UTC m=+1549.224924223 I0708 04:02:53.245652 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:02:53.245637994 +0000 UTC m=+1549.253074779 I0708 04:02:53.262859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:02:53.886621 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-08 04:02:53.886609345 +0000 UTC m=+1549.894046150 I0708 04:02:54.530788 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-08 04:02:54.530771965 +0000 UTC m=+1550.538208800 I0708 04:03:38.701737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:03:38.701780 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-08 04:03:38.701773197 +0000 UTC m=+1594.709209992 I0708 04:03:38.701882 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-08 04:03:38.701870409 +0000 UTC m=+1594.709307224 I0708 04:03:38.761947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:03:38.762026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:03:38.762091 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-08 04:03:38.762085748 +0000 UTC m=+1594.769522543 I0708 04:03:42.143520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-tl7k8" condition "Approved" to 2026-07-08 04:03:42.14349883 +0000 UTC m=+1598.150935625 I0708 04:03:42.175517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-tl7k8" condition "Ready" to 2026-07-08 04:03:42.175503592 +0000 UTC m=+1598.182940387 I0708 04:03:42.211885 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:03:42.211866834 +0000 UTC m=+1598.219303649 I0708 04:03:42.240199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:15.139782 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-08 04:06:15.13972228 +0000 UTC m=+1751.147159085 I0708 04:06:15.139847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:06:15.139970 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-08 04:06:15.139915025 +0000 UTC m=+1751.147351860 I0708 04:06:15.158499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:15.158640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:06:15.158702 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-08 04:06:15.158681614 +0000 UTC m=+1751.166118409 I0708 04:06:15.316620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:15.322233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-59fhk" condition "Approved" to 2026-07-08 04:06:15.322218013 +0000 UTC m=+1751.329654818 I0708 04:06:15.340765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-59fhk" condition "Ready" to 2026-07-08 04:06:15.340755375 +0000 UTC m=+1751.348192180 I0708 04:06:15.370540 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:06:15.370523838 +0000 UTC m=+1751.377960643 I0708 04:06:15.391491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:15.391801 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:06:15.391795366 +0000 UTC m=+1751.399232161 I0708 04:06:15.397492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:15.417185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:16.656921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:06:16.656957 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-08 04:06:16.656948725 +0000 UTC m=+1752.664385530 I0708 04:06:16.657398 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-08 04:06:16.657376186 +0000 UTC m=+1752.664813011 I0708 04:06:16.672574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:16.672693 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-08 04:06:16.67268252 +0000 UTC m=+1752.680119355 I0708 04:06:16.789538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:16.821204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-rl22x" condition "Approved" to 2026-07-08 04:06:16.821189893 +0000 UTC m=+1752.828626678 I0708 04:06:16.837692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-rl22x" condition "Ready" to 2026-07-08 04:06:16.837679909 +0000 UTC m=+1752.845116714 I0708 04:06:16.864840 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:06:16.864825469 +0000 UTC m=+1752.872262264 I0708 04:06:16.886156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:16.886363 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:06:16.886356304 +0000 UTC m=+1752.893793099 I0708 04:06:16.892568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:06:16.910479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.574840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gql5q-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:10:17.574839 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gql5q-vnc" condition "Ready" to 2026-07-08 04:10:17.574792866 +0000 UTC m=+1993.582229661 I0708 04:10:17.574883 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gql5q-vnc" condition "Issuing" to 2026-07-08 04:10:17.574874348 +0000 UTC m=+1993.582311173 I0708 04:10:17.575286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gql5q-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:10:17.575311 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gql5q-api" condition "Issuing" to 2026-07-08 04:10:17.57530446 +0000 UTC m=+1993.582741265 I0708 04:10:17.575590 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gql5q-api" condition "Ready" to 2026-07-08 04:10:17.575586398 +0000 UTC m=+1993.583023193 I0708 04:10:17.595670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gql5q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-api\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.595741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gql5q-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:10:17.595758 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gql5q-api" condition "Issuing" to 2026-07-08 04:10:17.595750605 +0000 UTC m=+1993.603187410 I0708 04:10:17.598862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gql5q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.598913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gql5q-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 04:10:17.598925 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gql5q-vnc" condition "Issuing" to 2026-07-08 04:10:17.598921593 +0000 UTC m=+1993.606358398 I0708 04:10:17.719511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gql5q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-api\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.731692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gql5q-api-ff85m" condition "Approved" to 2026-07-08 04:10:17.731681193 +0000 UTC m=+1993.739117998 I0708 04:10:17.747246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gql5q-api-ff85m" condition "Ready" to 2026-07-08 04:10:17.747235733 +0000 UTC m=+1993.754672538 I0708 04:10:17.776482 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gql5q-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:10:17.776468901 +0000 UTC m=+1993.783905696 I0708 04:10:17.795175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gql5q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-api\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.795525 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gql5q-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:10:17.795519347 +0000 UTC m=+1993.802956152 I0708 04:10:17.825474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gql5q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-api\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.858815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gql5q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.866632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gql5q-vnc-ctjz8" condition "Approved" to 2026-07-08 04:10:17.866618423 +0000 UTC m=+1993.874055248 I0708 04:10:17.881969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gql5q-vnc-ctjz8" condition "Ready" to 2026-07-08 04:10:17.881953277 +0000 UTC m=+1993.889390112 I0708 04:10:17.907086 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gql5q-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:10:17.907075041 +0000 UTC m=+1993.914511846 I0708 04:10:17.926173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gql5q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.926539 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gql5q-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:10:17.926531489 +0000 UTC m=+1993.933968294 I0708 04:10:17.933812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-gql5q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.940352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gql5q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 04:10:17.940719 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gql5q-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 04:10:17.940709431 +0000 UTC m=+1993.948146236 I0708 04:10:17.945220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gql5q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gql5q-vnc\": the object has been modified; please apply your changes to the latest version and try again"