I0427 01:33:25.314188 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0427 01:33:25.314293 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0427 01:33:25.314362 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 01:33:25.320514 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0427 01:33:25.321119 1 controller.go:156] "cert-manager/controller: starting leader election" I0427 01:33:25.321165 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0427 01:33:25.321262 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0427 01:33:25.325267 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 01:33:25.356053 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0427 01:33:25.359827 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0427 01:33:25.362307 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0427 01:33:25.364824 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0427 01:33:25.370600 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0427 01:33:25.374625 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0427 01:33:25.377027 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0427 01:33:25.377086 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0427 01:33:25.379467 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0427 01:33:25.382117 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0427 01:33:25.383896 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0427 01:33:25.385529 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0427 01:33:25.385552 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0427 01:33:25.385650 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0427 01:33:25.387394 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0427 01:33:25.389708 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0427 01:33:25.395390 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0427 01:33:25.400025 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0427 01:33:25.402998 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0427 01:33:25.404946 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0427 01:33:25.406630 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0427 01:33:25.408460 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0427 01:33:25.408493 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0427 01:33:25.408504 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0427 01:33:25.408557 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0427 01:33:45.553977 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 01:33:45.553953954 +0000 UTC m=+20.289740038 I0427 01:33:46.244555 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:33:46.244622 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 01:33:46.244613474 +0000 UTC m=+20.980399528 I0427 01:33:46.245769 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 01:33:46.24576136 +0000 UTC m=+20.981547424 E0427 01:33:46.259604 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:33:46.259656 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 01:33:46.259648307 +0000 UTC m=+20.995434341 E0427 01:33:46.259684 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:33:46.261253 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:46.261325 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 01:33:46.261317331 +0000 UTC m=+20.997103395 E0427 01:33:46.271848 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0427 01:33:46.272440 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:33:46.272478 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:33:46.272589 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0427 01:33:46.276485 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:46.301254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5n4bv" condition "Approved" to 2026-04-27 01:33:46.301237105 +0000 UTC m=+21.037023159 I0427 01:33:46.314321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5n4bv" condition "Ready" to 2026-04-27 01:33:46.314308465 +0000 UTC m=+21.050094489 I0427 01:33:46.339292 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:33:46.339277388 +0000 UTC m=+21.075063422 I0427 01:33:46.356339 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:46.356697 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:33:46.356688227 +0000 UTC m=+21.092474261 I0427 01:33:46.372261 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:46.376712 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:33:51.272386 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:33:51.272373149 +0000 UTC m=+26.008159203 I0427 01:34:12.526680 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:34:12.527629 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 01:34:12.527610698 +0000 UTC m=+47.263396732 I0427 01:34:12.526742 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 01:34:12.526725979 +0000 UTC m=+47.262512033 I0427 01:34:12.537032 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 01:34:12.537019709 +0000 UTC m=+47.272805733 I0427 01:34:12.553060 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:34:12.553118 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 01:34:12.553111444 +0000 UTC m=+47.288897478 I0427 01:34:12.689396 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:34:12.724974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tj54k" condition "Approved" to 2026-04-27 01:34:12.724954856 +0000 UTC m=+47.460740920 I0427 01:34:12.760016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tj54k" condition "Ready" to 2026-04-27 01:34:12.760000908 +0000 UTC m=+47.495786942 I0427 01:34:12.790455 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:34:12.790439182 +0000 UTC m=+47.526225216 I0427 01:34:12.810962 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:57.049433 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-67.nip.io-tls" condition "Ready" to 2026-04-27 01:36:57.049386589 +0000 UTC m=+211.785172643 I0427 01:36:57.049585 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-67.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:36:57.049698 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-67.nip.io-tls" condition "Issuing" to 2026-04-27 01:36:57.049687249 +0000 UTC m=+211.785473313 I0427 01:36:57.064790 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-67.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-67.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:57.064872 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-67.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:36:57.064894 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-67.nip.io-tls" condition "Issuing" to 2026-04-27 01:36:57.064885205 +0000 UTC m=+211.800671259 I0427 01:36:57.414144 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-67.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-67.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:36:57.421010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-67.nip.io-tls-5pp8s" condition "Approved" to 2026-04-27 01:36:57.420981217 +0000 UTC m=+212.156767301 I0427 01:36:57.451473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-67.nip.io-tls-5pp8s" condition "Ready" to 2026-04-27 01:36:57.45145907 +0000 UTC m=+212.187245124 I0427 01:36:57.487295 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-67.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:36:57.487278294 +0000 UTC m=+212.223064358 I0427 01:36:57.505809 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-67.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-67.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:58.353553 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:37:58.353592 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 01:37:58.353584031 +0000 UTC m=+273.089370065 I0427 01:37:58.353872 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 01:37:58.35386405 +0000 UTC m=+273.089650084 I0427 01:37:58.365188 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:58.365345 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:37:58.365371 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 01:37:58.365364787 +0000 UTC m=+273.101150821 E0427 01:37:58.366793 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 01:37:58.366841 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 01:37:58.366831694 +0000 UTC m=+273.102617718 E0427 01:37:58.366904 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:37:58.377355 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0427 01:37:58.377437 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:37:58.377472 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 01:37:58.377506 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0427 01:37:58.401925 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:37:58.405923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bzlbn" condition "Approved" to 2026-04-27 01:37:58.40590349 +0000 UTC m=+273.141689554 I0427 01:37:58.420043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bzlbn" condition "Ready" to 2026-04-27 01:37:58.420026951 +0000 UTC m=+273.155812995 I0427 01:37:58.443529 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:37:58.44351144 +0000 UTC m=+273.179297474 I0427 01:37:58.462274 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:03.377771 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:38:03.377753147 +0000 UTC m=+278.113539201 I0427 01:38:40.034606 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:38:40.034659 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 01:38:40.034648524 +0000 UTC m=+314.770434558 I0427 01:38:40.035835 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 01:38:40.035823062 +0000 UTC m=+314.771609086 I0427 01:38:40.036302 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:38:40.036333 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 01:38:40.036326078 +0000 UTC m=+314.772112102 I0427 01:38:40.036395 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 01:38:40.03638506 +0000 UTC m=+314.772171094 I0427 01:38:40.043774 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 01:38:40.043754004 +0000 UTC m=+314.779540038 I0427 01:38:40.043826 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:38:40.043905 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 01:38:40.043898509 +0000 UTC m=+314.779684533 I0427 01:38:40.073013 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:40.073063 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:38:40.073082 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 01:38:40.073077131 +0000 UTC m=+314.808863155 I0427 01:38:40.073300 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:40.073529 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 01:38:40.073524885 +0000 UTC m=+314.809310909 I0427 01:38:40.073716 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:40.073744 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 01:38:40.073741642 +0000 UTC m=+314.809527666 I0427 01:38:40.222363 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:40.236604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wwlks" condition "Approved" to 2026-04-27 01:38:40.23659181 +0000 UTC m=+314.972377844 I0427 01:38:40.236706 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:40.256182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wwlks" condition "Ready" to 2026-04-27 01:38:40.256172224 +0000 UTC m=+314.991958258 I0427 01:38:40.267892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4kf57" condition "Approved" to 2026-04-27 01:38:40.267876688 +0000 UTC m=+315.003662722 I0427 01:38:40.276190 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:40.282851 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:38:40.282837096 +0000 UTC m=+315.018623160 I0427 01:38:40.287119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4kf57" condition "Ready" to 2026-04-27 01:38:40.287106172 +0000 UTC m=+315.022892196 I0427 01:38:40.307109 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:40.321845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bpk69" condition "Approved" to 2026-04-27 01:38:40.32182124 +0000 UTC m=+315.057607294 I0427 01:38:40.423044 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:38:40.42302736 +0000 UTC m=+315.158813414 I0427 01:38:40.538742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bpk69" condition "Ready" to 2026-04-27 01:38:40.538730023 +0000 UTC m=+315.274516047 I0427 01:38:40.920727 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:40.921618 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:38:40.921608794 +0000 UTC m=+315.657394828 I0427 01:38:41.322548 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:38:41.32253116 +0000 UTC m=+316.058317184 I0427 01:38:41.540329 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:41.581538 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:41.582367 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:38:41.582357304 +0000 UTC m=+316.318143368 I0427 01:38:41.821267 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:53.130124 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" condition "Ready" to 2026-04-27 01:38:53.13010912 +0000 UTC m=+327.865895154 I0427 01:38:53.130317 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:38:53.130396 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" condition "Issuing" to 2026-04-27 01:38:53.130379648 +0000 UTC m=+327.866165682 I0427 01:38:53.147342 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dd87l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:53.147486 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:38:53.147516 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" condition "Issuing" to 2026-04-27 01:38:53.147507535 +0000 UTC m=+327.883293569 I0427 01:38:53.336800 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dd87l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:53.344434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dd87l-6dx6v" condition "Approved" to 2026-04-27 01:38:53.34440782 +0000 UTC m=+328.080193884 I0427 01:38:53.367941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dd87l-6dx6v" condition "Ready" to 2026-04-27 01:38:53.36792186 +0000 UTC m=+328.103707904 I0427 01:38:53.406881 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:38:53.406861873 +0000 UTC m=+328.142647897 I0427 01:38:53.430134 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dd87l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:38:53.430604 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:38:53.430596571 +0000 UTC m=+328.166382605 I0427 01:38:53.454537 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dd87l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dd87l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:39:26.631759 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 01:39:26.631736402 +0000 UTC m=+361.367522486 I0427 01:39:26.631849 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:39:26.631883 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 01:39:26.631876956 +0000 UTC m=+361.367662990 I0427 01:39:26.669109 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:39:26.669551 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:39:26.669575 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 01:39:26.669568009 +0000 UTC m=+361.405354033 I0427 01:39:26.849158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4qvhd" condition "Approved" to 2026-04-27 01:39:26.849142561 +0000 UTC m=+361.584928595 I0427 01:39:26.868678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4qvhd" condition "Ready" to 2026-04-27 01:39:26.868659444 +0000 UTC m=+361.604445498 I0427 01:39:26.901134 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:39:26.90111634 +0000 UTC m=+361.636902374 I0427 01:39:26.921530 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:39:26.922289 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:39:26.922281095 +0000 UTC m=+361.658067139 I0427 01:39:26.938873 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:39:26.939300 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:39:26.939293149 +0000 UTC m=+361.675079173 I0427 01:42:39.992797 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 01:42:39.992770845 +0000 UTC m=+554.728556879 I0427 01:42:39.993068 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:42:39.993088 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 01:42:39.993084835 +0000 UTC m=+554.728870869 I0427 01:42:40.008834 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:42:40.008929 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 01:42:40.008918767 +0000 UTC m=+554.744704801 I0427 01:42:40.248627 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:42:40.278414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xlcwd" condition "Approved" to 2026-04-27 01:42:40.278390176 +0000 UTC m=+555.014176200 I0427 01:42:40.298285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xlcwd" condition "Ready" to 2026-04-27 01:42:40.298271877 +0000 UTC m=+555.034057901 I0427 01:42:40.330041 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:42:40.330018504 +0000 UTC m=+555.065804558 I0427 01:42:40.354297 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:42:40.354939 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:42:40.354931335 +0000 UTC m=+555.090717369 I0427 01:42:40.364899 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:42:40.375051 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:42:40.398866 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:45:03.161395 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-27 01:45:03.161371084 +0000 UTC m=+697.897157138 I0427 01:45:03.161738 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:45:03.161823 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-27 01:45:03.161779737 +0000 UTC m=+697.897565801 I0427 01:45:03.177355 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:45:03.177492 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:45:03.177553 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-27 01:45:03.177546335 +0000 UTC m=+697.913332369 I0427 01:45:03.301715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-9ph52" condition "Approved" to 2026-04-27 01:45:03.301698688 +0000 UTC m=+698.037484722 I0427 01:45:03.323111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-9ph52" condition "Ready" to 2026-04-27 01:45:03.323086514 +0000 UTC m=+698.058872578 I0427 01:45:03.357704 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:45:03.357689447 +0000 UTC m=+698.093475501 I0427 01:45:03.386786 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:45:03.387344 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:45:03.387336904 +0000 UTC m=+698.123122928 I0427 01:45:03.404751 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:45:03.405319 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:45:03.405310232 +0000 UTC m=+698.141096266 I0427 01:45:03.405941 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:46:05.114851 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:46:05.114929 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-27 01:46:05.114917882 +0000 UTC m=+759.850703906 I0427 01:46:05.115194 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-27 01:46:05.115185531 +0000 UTC m=+759.850971555 I0427 01:46:05.130852 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:46:05.130927 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-27 01:46:05.130918988 +0000 UTC m=+759.866705022 I0427 01:46:05.499635 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:46:05.616381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ls7pw" condition "Approved" to 2026-04-27 01:46:05.616357176 +0000 UTC m=+760.352143230 I0427 01:46:05.731159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ls7pw" condition "Ready" to 2026-04-27 01:46:05.731148443 +0000 UTC m=+760.466934477 I0427 01:46:05.786017 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:46:05.786000207 +0000 UTC m=+760.521786241 I0427 01:46:05.826835 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:46:05.827628 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:46:05.827618962 +0000 UTC m=+760.563405006 I0427 01:46:05.937951 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:49:04.718402 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-27 01:49:04.718211639 +0000 UTC m=+939.453997653 I0427 01:49:04.718401 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:49:04.718505 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-27 01:49:04.718494958 +0000 UTC m=+939.454281002 I0427 01:49:04.738461 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:49:04.738614 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:49:04.738651 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-27 01:49:04.738645845 +0000 UTC m=+939.474431869 I0427 01:49:05.071669 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:49:05.079338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-x68nw" condition "Approved" to 2026-04-27 01:49:05.079324769 +0000 UTC m=+939.815110803 I0427 01:49:05.103121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-x68nw" condition "Ready" to 2026-04-27 01:49:05.10310717 +0000 UTC m=+939.838893194 I0427 01:49:05.130184 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:49:05.130172906 +0000 UTC m=+939.865958940 I0427 01:49:05.152852 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:55:21.690990 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:55:21.691137 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-27 01:55:21.691127648 +0000 UTC m=+1316.426913702 I0427 01:55:21.690992 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-27 01:55:21.690949063 +0000 UTC m=+1316.426735087 I0427 01:55:21.709043 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:55:21.709173 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-27 01:55:21.709159209 +0000 UTC m=+1316.444945273 I0427 01:55:21.994769 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:55:22.024893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-mzt4t" condition "Approved" to 2026-04-27 01:55:22.024866297 +0000 UTC m=+1316.760652331 I0427 01:55:22.047678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-mzt4t" condition "Ready" to 2026-04-27 01:55:22.047666148 +0000 UTC m=+1316.783452182 I0427 01:55:22.082419 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:55:22.082403637 +0000 UTC m=+1316.818189681 I0427 01:55:22.106857 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:55:22.107758 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:55:22.107748399 +0000 UTC m=+1316.843534453 I0427 01:55:22.131529 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:55:22.132155 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:55:22.132145271 +0000 UTC m=+1316.867931305 I0427 01:55:22.134060 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:56:50.071748 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:56:50.071772 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-27 01:56:50.071742879 +0000 UTC m=+1404.807528933 I0427 01:56:50.071802 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-27 01:56:50.07178952 +0000 UTC m=+1404.807575574 I0427 01:56:50.089773 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:56:50.089912 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-27 01:56:50.089898752 +0000 UTC m=+1404.825684776 I0427 01:56:50.362027 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:56:50.400009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-85d4f" condition "Approved" to 2026-04-27 01:56:50.399989211 +0000 UTC m=+1405.135775255 I0427 01:56:50.422712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-85d4f" condition "Ready" to 2026-04-27 01:56:50.422695249 +0000 UTC m=+1405.158481283 I0427 01:56:50.457859 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:56:50.457832759 +0000 UTC m=+1405.193618813 I0427 01:56:50.484465 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:56:50.485575 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:56:50.485563465 +0000 UTC m=+1405.221349519 I0427 01:56:50.486167 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:56:50.505878 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:57:46.764852 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:57:46.764956 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-27 01:57:46.764944846 +0000 UTC m=+1461.500730900 I0427 01:57:46.764935 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-27 01:57:46.764908945 +0000 UTC m=+1461.500694969 I0427 01:57:46.943221 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:57:46.943347 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:57:46.943384 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-27 01:57:46.943374655 +0000 UTC m=+1461.679160709 I0427 01:57:47.234761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-rccdp" condition "Approved" to 2026-04-27 01:57:47.234722561 +0000 UTC m=+1461.970508615 I0427 01:57:47.257608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-rccdp" condition "Ready" to 2026-04-27 01:57:47.257585164 +0000 UTC m=+1461.993371248 I0427 01:57:47.287522 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:57:47.28750251 +0000 UTC m=+1462.023288574 I0427 01:57:47.320879 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:57:47.453683 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:57:47.453728 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-27 01:57:47.453717191 +0000 UTC m=+1462.189503225 I0427 01:57:47.454105 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-27 01:57:47.454076253 +0000 UTC m=+1462.189862327 I0427 01:57:47.473831 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:57:47.473943 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:57:47.473972 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-27 01:57:47.473963861 +0000 UTC m=+1462.209749885 I0427 01:57:47.565931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-p8lqg" condition "Approved" to 2026-04-27 01:57:47.565912197 +0000 UTC m=+1462.301698241 I0427 01:57:47.581669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-p8lqg" condition "Ready" to 2026-04-27 01:57:47.581653575 +0000 UTC m=+1462.317439599 I0427 01:57:47.610732 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:57:47.610714983 +0000 UTC m=+1462.346501027 I0427 01:57:47.631393 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:57:47.631911 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:57:47.631901702 +0000 UTC m=+1462.367687736 I0427 01:57:47.654157 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:57:48.169422 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-27 01:57:48.169408379 +0000 UTC m=+1462.905194413 I0427 01:57:48.797679 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-27 01:57:48.797665063 +0000 UTC m=+1463.533451097 I0427 01:58:35.917318 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:58:35.917354 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-27 01:58:35.91734669 +0000 UTC m=+1510.653132714 I0427 01:58:35.917846 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-27 01:58:35.917840815 +0000 UTC m=+1510.653626839 I0427 01:58:35.953915 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:58:35.954017 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 01:58:35.954037 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-27 01:58:35.954032409 +0000 UTC m=+1510.689818433 I0427 01:58:39.082932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vnqlj" condition "Approved" to 2026-04-27 01:58:39.082897877 +0000 UTC m=+1513.818683931 I0427 01:58:39.108268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vnqlj" condition "Ready" to 2026-04-27 01:58:39.108251588 +0000 UTC m=+1513.844037622 I0427 01:58:39.144514 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:58:39.144494693 +0000 UTC m=+1513.880280717 I0427 01:58:39.172087 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:58:39.174296 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:58:39.174281904 +0000 UTC m=+1513.910067948 I0427 01:58:39.182055 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:58:39.193879 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 01:58:39.195203 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 01:58:39.195194336 +0000 UTC m=+1513.930980370 I0427 01:58:39.196323 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:04.404752 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:01:04.404818 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-27 02:01:04.404812472 +0000 UTC m=+1659.140598506 I0427 02:01:04.404738 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-27 02:01:04.404689428 +0000 UTC m=+1659.140475492 I0427 02:01:04.424369 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:04.424519 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:01:04.424567 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-27 02:01:04.424552616 +0000 UTC m=+1659.160338670 I0427 02:01:04.777022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-wg8tk" condition "Approved" to 2026-04-27 02:01:04.776985883 +0000 UTC m=+1659.512771917 I0427 02:01:04.799969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-wg8tk" condition "Ready" to 2026-04-27 02:01:04.799951629 +0000 UTC m=+1659.535737663 I0427 02:01:04.837184 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:01:04.837142915 +0000 UTC m=+1659.572928939 I0427 02:01:04.862257 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:04.862841 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:01:04.862833267 +0000 UTC m=+1659.598619301 I0427 02:01:04.873482 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:04.887658 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:05.838281 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:01:05.838341 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-27 02:01:05.838328895 +0000 UTC m=+1660.574114949 I0427 02:01:05.838333 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-27 02:01:05.838311265 +0000 UTC m=+1660.574097299 I0427 02:01:05.857246 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:05.857333 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-27 02:01:05.857325786 +0000 UTC m=+1660.593111820 I0427 02:01:06.096287 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:06.142815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-6knj2" condition "Approved" to 2026-04-27 02:01:06.142782667 +0000 UTC m=+1660.878568711 I0427 02:01:06.164961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-6knj2" condition "Ready" to 2026-04-27 02:01:06.164943367 +0000 UTC m=+1660.900729401 I0427 02:01:06.196584 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:01:06.196559687 +0000 UTC m=+1660.932345751 I0427 02:01:06.220865 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:06.221770 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:01:06.221759013 +0000 UTC m=+1660.957545057 I0427 02:01:06.231944 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:01:06.245393 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:04:00.016833 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-27 02:04:00.016787055 +0000 UTC m=+1834.752573109 I0427 02:04:00.016840 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:04:00.017026 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-27 02:04:00.017013943 +0000 UTC m=+1834.752799997 I0427 02:04:00.032801 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:04:00.032869 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:04:00.032889 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-27 02:04:00.032883694 +0000 UTC m=+1834.768669728 I0427 02:04:00.566414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-h9mvp" condition "Approved" to 2026-04-27 02:04:00.566388505 +0000 UTC m=+1835.302174549 I0427 02:04:00.585259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-h9mvp" condition "Ready" to 2026-04-27 02:04:00.585246901 +0000 UTC m=+1835.321032915 I0427 02:04:00.616998 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:04:00.616964663 +0000 UTC m=+1835.352750687 I0427 02:04:00.646011 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:04:00.646738 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:04:00.646730664 +0000 UTC m=+1835.382516698 I0427 02:04:00.649586 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:04:00.663782 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:05:11.966990 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-rjmnv-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:05:11.967020 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rjmnv-vnc" condition "Issuing" to 2026-04-27 02:05:11.967012547 +0000 UTC m=+1906.702798571 I0427 02:05:11.967662 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rjmnv-vnc" condition "Ready" to 2026-04-27 02:05:11.967655617 +0000 UTC m=+1906.703441641 I0427 02:05:11.970938 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rjmnv-api" condition "Ready" to 2026-04-27 02:05:11.970933631 +0000 UTC m=+1906.706719655 I0427 02:05:11.971137 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-rjmnv-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:05:11.971218 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rjmnv-api" condition "Issuing" to 2026-04-27 02:05:11.971206739 +0000 UTC m=+1906.706992803 I0427 02:05:11.995967 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-rjmnv-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rjmnv-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:05:11.996100 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-rjmnv-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:05:11.996140 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rjmnv-vnc" condition "Issuing" to 2026-04-27 02:05:11.996130047 +0000 UTC m=+1906.731916081 I0427 02:05:11.997186 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-rjmnv-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rjmnv-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:05:11.997260 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rjmnv-api" condition "Ready" to 2026-04-27 02:05:11.997254602 +0000 UTC m=+1906.733040636 I0427 02:05:12.100405 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-rjmnv-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rjmnv-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:05:12.137207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rjmnv-api-6dgfk" condition "Approved" to 2026-04-27 02:05:12.137191344 +0000 UTC m=+1906.872977378 I0427 02:05:12.155593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rjmnv-api-6dgfk" condition "Ready" to 2026-04-27 02:05:12.155556155 +0000 UTC m=+1906.891342189 I0427 02:05:12.189109 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rjmnv-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:05:12.189094244 +0000 UTC m=+1906.924880278 I0427 02:05:12.206318 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-rjmnv-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rjmnv-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:05:12.206829 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rjmnv-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:05:12.206822565 +0000 UTC m=+1906.942608589 I0427 02:05:12.228477 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-rjmnv-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rjmnv-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:05:12.275478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rjmnv-vnc-244c4" condition "Approved" to 2026-04-27 02:05:12.275453583 +0000 UTC m=+1907.011239637 I0427 02:05:12.293590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rjmnv-vnc-244c4" condition "Ready" to 2026-04-27 02:05:12.293577576 +0000 UTC m=+1907.029363620 I0427 02:05:12.322608 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rjmnv-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:05:12.322595873 +0000 UTC m=+1907.058381907 I0427 02:05:12.341268 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-rjmnv-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rjmnv-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:05:12.342081 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rjmnv-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:05:12.342068028 +0000 UTC m=+1907.077854062 I0427 02:05:12.360352 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-rjmnv-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rjmnv-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:05:12.368195 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-rjmnv-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rjmnv-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:06:33.751715 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-27 02:06:33.751696307 +0000 UTC m=+1988.487482341 I0427 02:06:33.751943 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:06:33.752010 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-27 02:06:33.752000926 +0000 UTC m=+1988.487787010 I0427 02:06:33.773383 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:06:33.773602 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:06:33.773678 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-27 02:06:33.773670601 +0000 UTC m=+1988.509456635 I0427 02:06:34.033164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-9fbxg" condition "Approved" to 2026-04-27 02:06:34.03313423 +0000 UTC m=+1988.768920274 I0427 02:06:34.053643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-9fbxg" condition "Ready" to 2026-04-27 02:06:34.053632068 +0000 UTC m=+1988.789418092 I0427 02:06:34.086287 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:06:34.086263849 +0000 UTC m=+1988.822049903 I0427 02:06:34.109898 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:06:34.111010 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:06:34.111000161 +0000 UTC m=+1988.846786195 I0427 02:06:34.114889 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:06:34.127198 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:06:34.127793 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:06:34.127783111 +0000 UTC m=+1988.863569145 I0427 02:10:08.983433 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:10:08.983511 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-27 02:10:08.983501645 +0000 UTC m=+2203.719287679 I0427 02:10:08.983474 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-27 02:10:08.983294798 +0000 UTC m=+2203.719080832 I0427 02:10:09.005511 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:09.005589 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:10:09.005607 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-27 02:10:09.005599233 +0000 UTC m=+2203.741385257 I0427 02:10:09.210885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-vtgp6" condition "Approved" to 2026-04-27 02:10:09.210869471 +0000 UTC m=+2203.946655505 I0427 02:10:09.231735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-vtgp6" condition "Ready" to 2026-04-27 02:10:09.231722289 +0000 UTC m=+2203.967508343 I0427 02:10:09.267129 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:10:09.267110128 +0000 UTC m=+2204.002896192 I0427 02:10:09.295606 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:09.296305 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:10:09.29629509 +0000 UTC m=+2204.032081124 I0427 02:10:09.315808 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:09.317936 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:10.645718 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:10:10.645764 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-27 02:10:10.645754037 +0000 UTC m=+2205.381540071 I0427 02:10:10.645963 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-27 02:10:10.645904192 +0000 UTC m=+2205.381690236 I0427 02:10:10.669053 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:10.669233 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-27 02:10:10.669219959 +0000 UTC m=+2205.405005993 I0427 02:10:11.018942 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:11.073510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-4sccq" condition "Approved" to 2026-04-27 02:10:11.073479015 +0000 UTC m=+2205.809265039 I0427 02:10:11.098263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-4sccq" condition "Ready" to 2026-04-27 02:10:11.098244607 +0000 UTC m=+2205.834030641 I0427 02:10:11.134615 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:10:11.134593646 +0000 UTC m=+2205.870379700 I0427 02:10:11.157600 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:11.158104 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:10:11.158092679 +0000 UTC m=+2205.893878703 I0427 02:10:11.165460 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:11.179687 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:10:11.180157 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:10:11.180133045 +0000 UTC m=+2205.915919059 I0427 02:12:21.170346 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-27 02:12:21.170307393 +0000 UTC m=+2335.906093477 I0427 02:12:21.171314 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:12:21.171508 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-27 02:12:21.17149345 +0000 UTC m=+2335.907279544 I0427 02:12:21.188005 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:21.188143 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:12:21.188349 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-27 02:12:21.188172987 +0000 UTC m=+2335.923959021 E0427 02:12:21.188372 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:12:21.188476 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-27 02:12:21.188464026 +0000 UTC m=+2335.924250080 I0427 02:12:21.188513 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 02:12:21.200553 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client" E0427 02:12:21.200829 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:12:21.200878 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 02:12:21.200984 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client" I0427 02:12:21.251080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-8s9jg" condition "Approved" to 2026-04-27 02:12:21.251058705 +0000 UTC m=+2335.986844729 I0427 02:12:21.269511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-8s9jg" condition "Ready" to 2026-04-27 02:12:21.269495367 +0000 UTC m=+2336.005281401 I0427 02:12:21.310938 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:21.310917286 +0000 UTC m=+2336.046703320 I0427 02:12:21.335238 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:21.335501 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:21.335494553 +0000 UTC m=+2336.071280577 I0427 02:12:21.358346 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:21.856088 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:12:21.856124 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-27 02:12:21.856114666 +0000 UTC m=+2336.591900700 I0427 02:12:21.856773 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-27 02:12:21.856764517 +0000 UTC m=+2336.592550561 E0427 02:12:21.887982 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:12:21.888084 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-27 02:12:21.888071426 +0000 UTC m=+2336.623857490 I0427 02:12:21.888121 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:12:21.889143 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:21.889294 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:12:21.889320 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-27 02:12:21.889311855 +0000 UTC m=+2336.625097889 E0427 02:12:21.907539 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server" E0427 02:12:21.907834 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:12:21.907935 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 02:12:21.908063 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server" I0427 02:12:21.938126 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:21.946450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-xj9h6" condition "Approved" to 2026-04-27 02:12:21.94642734 +0000 UTC m=+2336.682213454 I0427 02:12:21.970608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-xj9h6" condition "Ready" to 2026-04-27 02:12:21.970587284 +0000 UTC m=+2336.706373338 I0427 02:12:22.085242 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:22.085217437 +0000 UTC m=+2336.821003491 I0427 02:12:22.112946 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:22.113640 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:22.113625264 +0000 UTC m=+2336.849411298 I0427 02:12:22.135011 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:22.135297 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:22.135288849 +0000 UTC m=+2336.871074873 I0427 02:12:22.136085 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:22.643586 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:12:22.643637 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-27 02:12:22.643626134 +0000 UTC m=+2337.379412188 I0427 02:12:22.643582 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-27 02:12:22.643540531 +0000 UTC m=+2337.379326585 I0427 02:12:22.682188 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:22.682826 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:12:22.682878 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-27 02:12:22.682866064 +0000 UTC m=+2337.418652128 I0427 02:12:22.729760 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:22.741629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-97lp4" condition "Approved" to 2026-04-27 02:12:22.7416053 +0000 UTC m=+2337.477391364 I0427 02:12:22.773472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-97lp4" condition "Ready" to 2026-04-27 02:12:22.773452557 +0000 UTC m=+2337.509238591 I0427 02:12:26.201065 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:26.201040398 +0000 UTC m=+2340.936826462 I0427 02:12:26.217934 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-97lp4" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:26.217918151 +0000 UTC m=+2340.953704175 I0427 02:12:26.253419 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:26.253394672 +0000 UTC m=+2340.989180736 I0427 02:12:26.271471 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:26.271803 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:26.271793414 +0000 UTC m=+2341.007579448 I0427 02:12:26.290801 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:12:26.291403 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:26.291390263 +0000 UTC m=+2341.027176297 I0427 02:12:26.908582 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:12:26.908566668 +0000 UTC m=+2341.644352722 I0427 02:14:29.255992 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-27 02:14:29.255971651 +0000 UTC m=+2463.991757685 I0427 02:14:29.256605 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:14:29.256633 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-27 02:14:29.256628992 +0000 UTC m=+2463.992415026 I0427 02:14:29.274209 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:14:29.274310 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:14:29.274341 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-27 02:14:29.274332521 +0000 UTC m=+2464.010118575 I0427 02:14:29.524573 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:14:29.536824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-c4zhg" condition "Approved" to 2026-04-27 02:14:29.536805743 +0000 UTC m=+2464.272591807 I0427 02:14:29.553547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-c4zhg" condition "Ready" to 2026-04-27 02:14:29.553532631 +0000 UTC m=+2464.289318685 I0427 02:14:29.585045 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:14:29.585027106 +0000 UTC m=+2464.320813130 I0427 02:14:29.602898 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:14:29.603366 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:14:29.603359414 +0000 UTC m=+2464.339145438 I0427 02:14:29.617172 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:14:29.630255 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:16.124847 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-27 02:15:16.124811134 +0000 UTC m=+2510.860597198 I0427 02:15:16.145313 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-27 02:15:16.145296031 +0000 UTC m=+2510.881082075 I0427 02:15:16.145759 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:15:16.151452 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-27 02:15:16.151437355 +0000 UTC m=+2510.887223379 E0427 02:15:16.168521 1 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18aa150576dd95b8", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"b2cf0e14-82d8-47d0-8733-8ab529a597da", APIVersion:"cert-manager.io/v1", ResourceVersion:"25519", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.April, 27, 2, 15, 16, 164335032, time.Local), LastTimestamp:time.Date(2026, time.April, 27, 2, 15, 16, 164335032, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18aa150576dd95b8" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0427 02:15:16.171174 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:16.171256 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-27 02:15:16.17124525 +0000 UTC m=+2510.907031284 E0427 02:15:16.187458 1 controller.go:134] "cert-manager/issuers: issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" I0427 02:15:16.247416 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-27 02:15:16.247392036 +0000 UTC m=+2510.983178070 I0427 02:15:16.269583 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:15:16.269605 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-27 02:15:16.269591317 +0000 UTC m=+2511.005377361 I0427 02:15:16.269620 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-27 02:15:16.269617238 +0000 UTC m=+2511.005403262 I0427 02:15:16.290109 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:16.290222 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-27 02:15:16.290211548 +0000 UTC m=+2511.025997592 E0427 02:15:16.430071 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" key="cert-manager-test/selfsigned-cert" I0427 02:15:16.435402 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:16.475732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-d9bdg" condition "Approved" to 2026-04-27 02:15:16.475711668 +0000 UTC m=+2511.211497712 I0427 02:15:16.504639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-d9bdg" condition "Ready" to 2026-04-27 02:15:16.504616811 +0000 UTC m=+2511.240402845 I0427 02:15:16.540414 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:16.540397332 +0000 UTC m=+2511.276183366 I0427 02:15:16.568192 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:16.569067 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:16.569057407 +0000 UTC m=+2511.304843441 I0427 02:15:16.592719 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:17.093952 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-27 02:15:17.093935078 +0000 UTC m=+2511.829721092 I0427 02:15:17.122060 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:15:17.122061 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-27 02:15:17.122042426 +0000 UTC m=+2511.857828450 I0427 02:15:17.122099 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-27 02:15:17.122091137 +0000 UTC m=+2511.857877201 I0427 02:15:17.141422 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:17.141489 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:15:17.141507 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-27 02:15:17.14150252 +0000 UTC m=+2511.877288554 I0427 02:15:17.394524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-xkv2v" condition "Approved" to 2026-04-27 02:15:17.394503422 +0000 UTC m=+2512.130289456 I0427 02:15:17.423271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-xkv2v" condition "Ready" to 2026-04-27 02:15:17.423258661 +0000 UTC m=+2512.159044695 I0427 02:15:17.519801 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:17.51978686 +0000 UTC m=+2512.255572874 I0427 02:15:17.564509 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:17.564947 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:17.564939106 +0000 UTC m=+2512.300725130 I0427 02:15:17.584932 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:17.599956 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:17.600463 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:17.600452068 +0000 UTC m=+2512.336238102 I0427 02:15:17.602636 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-27 02:15:17.602628157 +0000 UTC m=+2512.338414181 I0427 02:15:17.629903 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:15:17.629938 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-27 02:15:17.629925519 +0000 UTC m=+2512.365711543 I0427 02:15:17.630262 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-27 02:15:17.63025777 +0000 UTC m=+2512.366043794 I0427 02:15:17.652198 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:17.652253 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-27 02:15:17.652247064 +0000 UTC m=+2512.388033098 I0427 02:15:17.805006 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:17.837542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-sphtr" condition "Approved" to 2026-04-27 02:15:17.837517797 +0000 UTC m=+2512.573303851 I0427 02:15:17.863237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-sphtr" condition "Ready" to 2026-04-27 02:15:17.863220109 +0000 UTC m=+2512.599006143 I0427 02:15:17.905440 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:17.905420922 +0000 UTC m=+2512.641206956 I0427 02:15:17.936653 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:17.937253 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:17.937243037 +0000 UTC m=+2512.673029071 I0427 02:15:18.139832 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-27 02:15:18.139810876 +0000 UTC m=+2512.875596900 I0427 02:15:18.140244 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:18.169925 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-27 02:15:18.169887536 +0000 UTC m=+2512.905673590 I0427 02:15:18.170076 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:15:18.170112 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-27 02:15:18.170104343 +0000 UTC m=+2512.905890407 I0427 02:15:18.336243 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:18.336346 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:15:18.336374 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-27 02:15:18.336365375 +0000 UTC m=+2513.072151429 I0427 02:15:18.695590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-7xcql" condition "Approved" to 2026-04-27 02:15:18.695550151 +0000 UTC m=+2513.431336185 I0427 02:15:18.745982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-7xcql" condition "Ready" to 2026-04-27 02:15:18.745967464 +0000 UTC m=+2513.481753488 I0427 02:15:19.188315 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:19.188294527 +0000 UTC m=+2513.924080561 I0427 02:15:19.334420 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:15:19.335175 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:15:19.335161136 +0000 UTC m=+2514.070947190 I0427 02:15:19.540657 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:18:35.916748 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-27 02:18:35.916684994 +0000 UTC m=+2710.652471048 I0427 02:18:35.917180 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:18:35.917413 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-27 02:18:35.917274242 +0000 UTC m=+2710.653060286 I0427 02:18:35.938365 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:18:35.938434 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:18:35.938454 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-27 02:18:35.938446841 +0000 UTC m=+2710.674232875 I0427 02:18:36.198582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-x8fv9" condition "Approved" to 2026-04-27 02:18:36.198567288 +0000 UTC m=+2710.934353322 I0427 02:18:36.229297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-x8fv9" condition "Ready" to 2026-04-27 02:18:36.229277968 +0000 UTC m=+2710.965064032 I0427 02:18:36.265509 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:18:36.265495553 +0000 UTC m=+2711.001281577 I0427 02:18:36.306113 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:18:39.140251 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-27 02:18:39.140233963 +0000 UTC m=+2713.876019977 I0427 02:18:39.140481 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:18:39.140527 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-27 02:18:39.140518422 +0000 UTC m=+2713.876304446 I0427 02:18:39.158804 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:18:39.158970 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:18:39.159001 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-27 02:18:39.158990465 +0000 UTC m=+2713.894776519 I0427 02:18:39.682185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-tsf9m" condition "Approved" to 2026-04-27 02:18:39.682167402 +0000 UTC m=+2714.417953426 I0427 02:18:39.703392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-tsf9m" condition "Ready" to 2026-04-27 02:18:39.703381082 +0000 UTC m=+2714.439167106 I0427 02:18:39.736997 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:18:39.736978863 +0000 UTC m=+2714.472764887 I0427 02:18:39.765202 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"