I0724 22:58:43.710837       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0724 22:58:43.711222       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0724 22:58:43.716714       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0724 22:58:43.716753       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0724 22:58:43.716767       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0724 22:58:43.717195       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0724 22:58:43.717273       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0724 22:58:43.717340       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0724 22:58:43.722275       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0724 22:58:43.738755       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0724 22:58:43.744269       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0724 22:58:43.747218       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0724 22:58:43.751559       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0724 22:58:43.751719       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0724 22:58:43.755993       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0724 22:58:43.759990       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0724 22:58:43.762375       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0724 22:58:43.764166       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0724 22:58:43.766050       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0724 22:58:43.772606       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0724 22:58:43.775219       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0724 22:58:43.777581       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0724 22:58:43.777686       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0724 22:58:43.780211       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0724 22:58:43.782244       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0724 22:58:43.783945       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0724 22:58:43.785703       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0724 22:58:43.785828       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0724 22:58:43.791241       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0724 22:58:43.793667       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0724 22:58:43.793693       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0724 22:58:43.793701       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0724 22:58:43.793805       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0724 22:58:43.797736       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0724 22:58:43.801095       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.801837       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.801925       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.802256       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.802288       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.802546       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.803129       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.803131       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.803571       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.804235       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:58:43.804541       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0724 22:59:23.835277       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-24 22:59:23.835252761 +0000 UTC m=+40.151500314
I0724 22:59:24.015593       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-24 22:59:24.015581287 +0000 UTC m=+40.331828810
I0724 22:59:24.015803       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:24.015987       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 22:59:24.015970225 +0000 UTC m=+40.332217828
I0724 22:59:24.031151       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-24 22:59:24.031137287 +0000 UTC m=+40.347384820
I0724 22:59:24.031585       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:24.032356       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:24.032409       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 22:59:24.032401886 +0000 UTC m=+40.348649419
I0724 22:59:24.230546       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:24.251796       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-24 22:59:24.251769912 +0000 UTC m=+40.568017475
I0724 22:59:24.289442       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-24 22:59:24.289427701 +0000 UTC m=+40.605675234
I0724 22:59:24.990801       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 22:59:24.990788364 +0000 UTC m=+41.307035917
I0724 22:59:25.008239       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:25.009745       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-24 22:59:25.009736632 +0000 UTC m=+41.325984165
I0724 22:59:25.009982       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:25.010085       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 22:59:25.010022098 +0000 UTC m=+41.326269631
I0724 22:59:25.021243       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:25.021326       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:25.021349       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 22:59:25.021342263 +0000 UTC m=+41.337589776
E0724 22:59:25.022187       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0724 22:59:25.023694       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-24 22:59:25.023683936 +0000 UTC m=+41.339931499
E0724 22:59:25.023725       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0724 22:59:25.036932       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0724 22:59:25.037015       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0724 22:59:25.037037       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0724 22:59:25.037066       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0724 22:59:25.055355       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:25.059541       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:25.066377       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-24 22:59:25.066368328 +0000 UTC m=+41.382615861
I0724 22:59:25.094154       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-24 22:59:25.094139615 +0000 UTC m=+41.410387168
I0724 22:59:25.134113       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 22:59:25.134097665 +0000 UTC m=+41.450345228
I0724 22:59:25.148823       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:25.149339       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 22:59:25.149326359 +0000 UTC m=+41.465573922
I0724 22:59:25.155322       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:25.160982       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:30.038156       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 22:59:30.038135325 +0000 UTC m=+46.354382888
I0724 22:59:39.585336       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:39.585353       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-24 22:59:39.585338141 +0000 UTC m=+55.901585684
I0724 22:59:39.585405       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-24 22:59:39.585392462 +0000 UTC m=+55.901640055
I0724 22:59:42.105845       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:42.106004       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:42.106051       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-24 22:59:42.106037694 +0000 UTC m=+58.422285257
I0724 22:59:44.326979       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:44.327017       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-24 22:59:44.327007708 +0000 UTC m=+60.643255251
I0724 22:59:44.977522       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:44.997925       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-24 22:59:44.997910725 +0000 UTC m=+61.314158258
I0724 22:59:44.998080       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:44.998113       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-24 22:59:44.99810485 +0000 UTC m=+61.314352383
I0724 22:59:45.031898       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:45.031979       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 22:59:45.031995       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-24 22:59:45.031987524 +0000 UTC m=+61.348235057
I0724 22:59:45.050156       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-07-24 22:59:45.050144723 +0000 UTC m=+61.366392266
I0724 22:59:45.080774       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-07-24 22:59:45.080755403 +0000 UTC m=+61.397002926
I0724 22:59:45.095485       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-07-24 22:59:45.095469535 +0000 UTC m=+61.411717068
I0724 22:59:45.103115       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 22:59:45.103098537 +0000 UTC m=+61.419346060
I0724 22:59:45.107458       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-07-24 22:59:45.107447835 +0000 UTC m=+61.423695358
I0724 22:59:45.119620       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:45.136444       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 22:59:45.136422018 +0000 UTC m=+61.452669581
I0724 22:59:45.165181       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:45.165603       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 22:59:45.165583166 +0000 UTC m=+61.481830719
I0724 22:59:45.170903       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:45.170949       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:45.179350       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 22:59:45.806913       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-24 22:59:45.806902956 +0000 UTC m=+62.123150489
I0724 22:59:46.608844       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-24 22:59:46.608822026 +0000 UTC m=+62.925069549
I0724 23:00:36.953409       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 23:00:36.953465       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-24 23:00:36.953453592 +0000 UTC m=+113.269701145
I0724 23:00:36.953602       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-24 23:00:36.953580185 +0000 UTC m=+113.269827738
I0724 23:00:38.227708       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:38.227911       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-24 23:00:38.227895063 +0000 UTC m=+114.544142696
E0724 23:00:38.885266       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0724 23:00:38.885342       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-24 23:00:38.885328466 +0000 UTC m=+115.201576019
I0724 23:00:38.885374       1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0724 23:00:40.858514       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey"
E0724 23:00:40.858861       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0724 23:00:40.858965       1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0724 23:00:40.859043       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey"
I0724 23:00:40.921669       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:42.282450       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 23:00:42.282489       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-24 23:00:42.282480987 +0000 UTC m=+118.598728520
I0724 23:00:42.282604       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-24 23:00:42.282560148 +0000 UTC m=+118.598807701
I0724 23:00:42.771700       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:42.796062       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-24 23:00:42.796042803 +0000 UTC m=+119.112290366
I0724 23:00:42.806913       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-07-24 23:00:42.806903281 +0000 UTC m=+119.123150804
I0724 23:00:42.987859       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:43.032311       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-07-24 23:00:43.032299087 +0000 UTC m=+119.348546620
I0724 23:00:43.065135       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 23:00:43.065120827 +0000 UTC m=+119.381368380
I0724 23:00:43.078499       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:43.125683       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:43.225058       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:43.270308       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-07-24 23:00:43.270293022 +0000 UTC m=+119.586540575
I0724 23:00:43.389534       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-07-24 23:00:43.389495564 +0000 UTC m=+119.705743077
I0724 23:00:45.859689       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 23:00:45.859669078 +0000 UTC m=+122.175916641
I0724 23:00:45.873450       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 23:00:45.873434902 +0000 UTC m=+122.189682435
I0724 23:00:45.897561       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 23:00:45.897549093 +0000 UTC m=+122.213796626
I0724 23:00:45.911638       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:45.912233       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 23:00:45.912224068 +0000 UTC m=+122.228471601
I0724 23:00:45.922355       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:00:45.926856       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:07:55.947701       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0724 23:07:55.947766       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Ready" to 2026-07-24 23:07:55.947760319 +0000 UTC m=+552.264007842
I0724 23:07:55.947788       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Issuing" to 2026-07-24 23:07:55.947753739 +0000 UTC m=+552.264001262
I0724 23:07:55.995677       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:07:55.995854       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Ready" to 2026-07-24 23:07:55.99584362 +0000 UTC m=+552.312091173
I0724 23:07:56.265618       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:07:56.358655       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-61.nip.io-tls-1" condition "Approved" to 2026-07-24 23:07:56.358639264 +0000 UTC m=+552.674886797
I0724 23:07:56.407305       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-61.nip.io-tls-1" condition "Ready" to 2026-07-24 23:07:56.407294748 +0000 UTC m=+552.723542281
I0724 23:07:56.483907       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 23:07:56.483895282 +0000 UTC m=+552.800142815
I0724 23:07:56.609281       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0724 23:07:56.609845       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-61.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 23:07:56.609838573 +0000 UTC m=+552.926086106
I0724 23:07:56.689399       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
E0724 23:10:43.057082       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path
E0724 23:11:16.051157       1 leaderelection.go:383] Failed to update lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded
I0724 23:11:16.051226       1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition
I0724 23:11:21.510247       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-acme"
I0724 23:11:21.510770       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-selfsigned"
I0724 23:11:21.510793       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-issuing"
I0724 23:11:21.510806       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-readiness"
I0724 23:11:21.510819       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-vault"
I0724 23:11:21.510839       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.challenges"
I0724 23:11:21.510828       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-revision-manager"
I0724 23:11:21.510859       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.orders"
I0724 23:11:21.510874       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-venafi"
I0724 23:11:21.510892       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.ingress-shim"
I0724 23:11:21.510905       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-approver"
I0724 23:11:21.511454       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-request-manager"
I0724 23:11:21.510852       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-metrics"
I0724 23:11:21.512080       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-key-manager"
I0724 23:11:21.512109       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.clusterissuers"
I0724 23:11:21.512133       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-ca"
I0724 23:11:21.512151       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.issuers"
I0724 23:11:21.512173       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-trigger"
E0724 23:11:21.512929       1 main.go:40] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"