I0511 10:51:28.651110 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0511 10:51:28.651243 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0511 10:51:28.651314 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0511 10:51:28.654756 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0511 10:51:28.655151 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0511 10:51:28.655218 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0511 10:51:28.655287 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0511 10:51:28.657860 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0511 10:51:28.673643 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0511 10:51:28.673825 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0511 10:51:28.677136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0511 10:51:28.682721 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0511 10:51:28.685210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0511 10:51:28.687592 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0511 10:51:28.687645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0511 10:51:28.689902 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0511 10:51:28.689926 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0511 10:51:28.689962 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0511 10:51:28.691719 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0511 10:51:28.691777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0511 10:51:28.693579 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0511 10:51:28.697436 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0511 10:51:28.699633 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0511 10:51:28.701284 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0511 10:51:28.703155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0511 10:51:28.705067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0511 10:51:28.706693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0511 10:51:28.708388 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0511 10:51:28.708483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0511 10:51:28.710524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0511 10:51:28.712988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0511 10:51:28.717387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0511 10:51:28.721721 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0511 10:51:28.724449 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.724702 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.724711 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.724839 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.725429 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.725682 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.725849 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.726504 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.746525 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:28.815847 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0511 10:51:41.507773 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-11 10:51:41.507761209 +0000 UTC m=+12.887238985 I0511 10:51:42.266944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:51:42.266996 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-11 10:51:42.266989046 +0000 UTC m=+13.646466822 I0511 10:51:42.267124 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 10:51:42.267111888 +0000 UTC m=+13.646589654 E0511 10:51:42.280978 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0511 10:51:42.281133 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-11 10:51:42.281121731 +0000 UTC m=+13.660599517 E0511 10:51:42.281176 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0511 10:51:42.282871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:51:42.283181 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 10:51:42.283028503 +0000 UTC m=+13.662506289 E0511 10:51:42.303006 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0511 10:51:42.303163 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 10:51:42.303331 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 10:51:42.303393 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0511 10:51:42.309782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:51:42.333736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rd972" condition "Approved" to 2026-05-11 10:51:42.333717517 +0000 UTC m=+13.713195323 I0511 10:51:42.350460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rd972" condition "Ready" to 2026-05-11 10:51:42.35044131 +0000 UTC m=+13.729919126 I0511 10:51:42.376179 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:51:42.376168196 +0000 UTC m=+13.755645982 I0511 10:51:42.393035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:51:42.444833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:51:47.303746 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:51:47.303736053 +0000 UTC m=+18.683213839 I0511 10:52:10.558616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:52:10.558652 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-11 10:52:10.558645558 +0000 UTC m=+41.938123334 I0511 10:52:10.559078 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-11 10:52:10.559053207 +0000 UTC m=+41.938530993 I0511 10:52:10.567557 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-11 10:52:10.567544697 +0000 UTC m=+41.947022513 I0511 10:52:10.595626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:52:10.595732 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-11 10:52:10.595720816 +0000 UTC m=+41.975198632 I0511 10:52:10.914165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:52:10.949107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rqp78" condition "Approved" to 2026-05-11 10:52:10.949093423 +0000 UTC m=+42.328571229 I0511 10:52:10.978171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rqp78" condition "Ready" to 2026-05-11 10:52:10.978159463 +0000 UTC m=+42.357637239 I0511 10:52:11.015516 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:52:11.015499477 +0000 UTC m=+42.394977283 I0511 10:52:11.037601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:52:11.038052 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:52:11.038041431 +0000 UTC m=+42.417519227 I0511 10:52:11.058147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:52:11.058795 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:52:11.058780324 +0000 UTC m=+42.438258130 I0511 10:53:55.955816 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-11 10:53:55.955796442 +0000 UTC m=+147.335274228 I0511 10:53:55.956261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:53:55.956312 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-11 10:53:55.956307574 +0000 UTC m=+147.335785360 E0511 10:53:55.975698 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 10:53:55.975771 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-11 10:53:55.975762924 +0000 UTC m=+147.355240710 I0511 10:53:55.975813 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 10:53:55.979580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:53:55.979685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:53:55.979718 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-11 10:53:55.979711284 +0000 UTC m=+147.359189070 E0511 10:53:55.987158 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0511 10:53:55.987618 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 10:53:55.987664 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0511 10:53:55.987708 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0511 10:53:55.993067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:53:55.993114 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-11 10:53:55.993104728 +0000 UTC m=+147.372582534 I0511 10:53:55.993157 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-11 10:53:55.993131149 +0000 UTC m=+147.372608945 I0511 10:53:56.010299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:53:56.010408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:53:56.010436 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-11 10:53:56.010426741 +0000 UTC m=+147.389904537 I0511 10:53:56.169994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-8fn9j" condition "Approved" to 2026-05-11 10:53:56.169979836 +0000 UTC m=+147.549457642 I0511 10:53:56.188562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-8fn9j" condition "Ready" to 2026-05-11 10:53:56.188551116 +0000 UTC m=+147.568028902 I0511 10:53:56.239109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-69vpg" condition "Approved" to 2026-05-11 10:53:56.239086451 +0000 UTC m=+147.618564237 I0511 10:53:56.267401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-69vpg" condition "Ready" to 2026-05-11 10:53:56.267383392 +0000 UTC m=+147.646861198 I0511 10:53:56.302279 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:53:56.302254812 +0000 UTC m=+147.681732618 I0511 10:53:56.329173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:53:56.329596 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:53:56.329583392 +0000 UTC m=+147.709061208 I0511 10:53:56.338196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:53:56.347807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:54:00.987778 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:54:00.987765975 +0000 UTC m=+152.367243751 I0511 10:54:01.006506 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-8fn9j" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:54:01.006486029 +0000 UTC m=+152.385963815 I0511 10:54:01.042207 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:54:01.042185348 +0000 UTC m=+152.421663134 I0511 10:54:01.063390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:54:01.110470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:56:44.854713 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-05-11 10:56:44.854697245 +0000 UTC m=+316.234175031 I0511 10:56:44.854736 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:56:44.854901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-05-11 10:56:44.854886149 +0000 UTC m=+316.234363965 I0511 10:56:44.878051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:56:44.878126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:56:44.878286 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-05-11 10:56:44.878136548 +0000 UTC m=+316.257614314 I0511 10:56:45.356933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-v92fv" condition "Approved" to 2026-05-11 10:56:45.356919639 +0000 UTC m=+316.736397435 I0511 10:56:45.391922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-v92fv" condition "Ready" to 2026-05-11 10:56:45.391907086 +0000 UTC m=+316.771384862 I0511 10:56:45.439861 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:56:45.439844018 +0000 UTC m=+316.819321794 I0511 10:56:45.470214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:56:45.470778 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:56:45.470768852 +0000 UTC m=+316.850246658 I0511 10:56:45.496343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:56:45.496944 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:56:45.496929187 +0000 UTC m=+316.876407003 I0511 10:58:00.803144 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-11 10:58:00.803131066 +0000 UTC m=+392.182608852 I0511 10:58:00.803289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:58:00.803351 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-11 10:58:00.803342031 +0000 UTC m=+392.182819817 I0511 10:58:01.058402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:01.058542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:58:01.058569 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-11 10:58:01.058559854 +0000 UTC m=+392.438037660 E0511 10:58:01.374869 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0511 10:58:01.374953 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-11 10:58:01.374942936 +0000 UTC m=+392.754420722 E0511 10:58:01.375047 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 10:58:01.977007 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0511 10:58:01.977111 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 10:58:01.977141 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0511 10:58:01.977178 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0511 10:58:02.391360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gkbxn" condition "Approved" to 2026-05-11 10:58:02.391339524 +0000 UTC m=+393.770817330 I0511 10:58:02.406323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gkbxn" condition "Ready" to 2026-05-11 10:58:02.406311644 +0000 UTC m=+393.785789440 I0511 10:58:02.430267 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:58:02.430235748 +0000 UTC m=+393.809713534 I0511 10:58:02.452027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:06.977413 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:58:06.977403344 +0000 UTC m=+398.356881120 I0511 10:58:54.023968 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-11 10:58:54.023954273 +0000 UTC m=+445.403432059 I0511 10:58:54.024653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:58:54.024695 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-11 10:58:54.02468719 +0000 UTC m=+445.404164976 I0511 10:58:54.024854 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-11 10:58:54.024847403 +0000 UTC m=+445.404325199 I0511 10:58:54.025175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:58:54.025200 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-11 10:58:54.025195241 +0000 UTC m=+445.404673037 I0511 10:58:54.033698 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:58:54.033736 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-11 10:58:54.033729366 +0000 UTC m=+445.413207142 I0511 10:58:54.035948 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-11 10:58:54.035937025 +0000 UTC m=+445.415414831 I0511 10:58:54.215470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:54.215555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:58:54.215581 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-11 10:58:54.215574997 +0000 UTC m=+445.595052783 I0511 10:58:54.224158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:54.224249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:58:54.224275 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-11 10:58:54.224269436 +0000 UTC m=+445.603747222 I0511 10:58:54.225393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:54.225474 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:58:54.225496 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-11 10:58:54.225490823 +0000 UTC m=+445.604968599 I0511 10:58:54.930966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:54.931680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nkb4r" condition "Approved" to 2026-05-11 10:58:54.931668312 +0000 UTC m=+446.311146118 I0511 10:58:55.276053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9k9jp" condition "Approved" to 2026-05-11 10:58:55.276042068 +0000 UTC m=+446.655519854 I0511 10:58:55.277071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nkb4r" condition "Ready" to 2026-05-11 10:58:55.277062971 +0000 UTC m=+446.656540747 I0511 10:58:55.494822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.557504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dhmnz" condition "Approved" to 2026-05-11 10:58:55.557489274 +0000 UTC m=+446.936967080 I0511 10:58:55.558608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9k9jp" condition "Ready" to 2026-05-11 10:58:55.55859679 +0000 UTC m=+446.938074576 I0511 10:58:55.560758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.835461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dhmnz" condition "Ready" to 2026-05-11 10:58:55.835443372 +0000 UTC m=+447.214921148 I0511 10:58:55.844003 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:58:55.843995996 +0000 UTC m=+447.223473782 I0511 10:58:55.854842 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:58:55.854834232 +0000 UTC m=+447.234312018 I0511 10:58:55.872501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.873124 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:58:55.873114497 +0000 UTC m=+447.252592293 I0511 10:58:55.878550 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:58:55.87853456 +0000 UTC m=+447.258012336 I0511 10:58:55.886262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.886589 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:58:55.886582044 +0000 UTC m=+447.266059820 I0511 10:58:55.905859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.906883 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:58:55.906874805 +0000 UTC m=+447.286352581 I0511 10:58:55.908143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.917298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.941262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.959394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:58:55.959853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:59:16.198286 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" condition "Ready" to 2026-05-11 10:59:16.198264683 +0000 UTC m=+467.577742499 I0511 10:59:16.198775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:59:16.198878 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" condition "Issuing" to 2026-05-11 10:59:16.198862296 +0000 UTC m=+467.578340112 I0511 10:59:16.284616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:59:16.284730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 10:59:16.284856 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" condition "Issuing" to 2026-05-11 10:59:16.284832721 +0000 UTC m=+467.664310497 I0511 10:59:17.451703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lnbdp-sdvgq" condition "Approved" to 2026-05-11 10:59:17.45168523 +0000 UTC m=+468.831163016 I0511 10:59:17.516913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lnbdp-sdvgq" condition "Ready" to 2026-05-11 10:59:17.516901382 +0000 UTC m=+468.896379178 I0511 10:59:17.820583 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 10:59:17.8205716 +0000 UTC m=+469.200049386 I0511 10:59:17.846950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 10:59:17.914572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lnbdp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:00:14.238079 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-11 11:00:14.238047586 +0000 UTC m=+525.617525402 I0511 11:00:14.238329 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:00:14.238396 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-11 11:00:14.238383914 +0000 UTC m=+525.617861690 I0511 11:00:14.446640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:00:14.446854 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-11 11:00:14.446806004 +0000 UTC m=+525.826283810 I0511 11:00:14.838219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:00:14.877227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pzqpm" condition "Approved" to 2026-05-11 11:00:14.877213353 +0000 UTC m=+526.256691139 I0511 11:00:14.898468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pzqpm" condition "Ready" to 2026-05-11 11:00:14.898455616 +0000 UTC m=+526.277933402 I0511 11:00:14.933383 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:00:14.93336745 +0000 UTC m=+526.312845236 I0511 11:00:14.956523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:00:14.957170 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:00:14.957161962 +0000 UTC m=+526.336639748 I0511 11:00:14.980907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:03:35.929455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:03:35.929589 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-11 11:03:35.929574242 +0000 UTC m=+727.309052058 I0511 11:03:35.929589 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-11 11:03:35.929557991 +0000 UTC m=+727.309035817 I0511 11:03:35.950248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:03:35.950432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:03:35.950482 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-11 11:03:35.950473116 +0000 UTC m=+727.329950892 I0511 11:03:36.163800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-srp6q" condition "Approved" to 2026-05-11 11:03:36.163772895 +0000 UTC m=+727.543250691 I0511 11:03:36.185092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-srp6q" condition "Ready" to 2026-05-11 11:03:36.185076367 +0000 UTC m=+727.564554153 I0511 11:03:36.215896 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:03:36.215881476 +0000 UTC m=+727.595359252 I0511 11:03:36.239795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:03:36.240188 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:03:36.240179717 +0000 UTC m=+727.619657503 I0511 11:03:36.256665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:03:36.257035 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:03:36.257025649 +0000 UTC m=+727.636503435 I0511 11:06:17.361595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:06:17.361657 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-11 11:06:17.361651347 +0000 UTC m=+888.741129143 I0511 11:06:17.361657 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-11 11:06:17.361646357 +0000 UTC m=+888.741124143 I0511 11:06:17.380710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:06:17.380989 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-11 11:06:17.380974674 +0000 UTC m=+888.760452470 I0511 11:06:17.477216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:06:17.503934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4k8hm" condition "Approved" to 2026-05-11 11:06:17.503919036 +0000 UTC m=+888.883396802 I0511 11:06:17.525264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4k8hm" condition "Ready" to 2026-05-11 11:06:17.525250919 +0000 UTC m=+888.904728695 I0511 11:06:17.555294 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:06:17.555278168 +0000 UTC m=+888.934755964 I0511 11:06:17.576733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:06:17.577317 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:06:17.577301996 +0000 UTC m=+888.956779782 I0511 11:06:17.605611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:06:17.605726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:06:17.606077 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:06:17.606064538 +0000 UTC m=+888.985542334 I0511 11:07:48.971762 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-11 11:07:48.971734504 +0000 UTC m=+980.351212270 I0511 11:07:48.971889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:07:48.971918 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-11 11:07:48.971912958 +0000 UTC m=+980.351390734 I0511 11:07:48.994916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:07:48.995053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:07:48.995103 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-11 11:07:48.995097741 +0000 UTC m=+980.374575517 I0511 11:07:49.541272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7xtvk" condition "Approved" to 2026-05-11 11:07:49.541257326 +0000 UTC m=+980.920735112 I0511 11:07:49.559649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7xtvk" condition "Ready" to 2026-05-11 11:07:49.559632509 +0000 UTC m=+980.939110305 I0511 11:07:49.603654 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:07:49.603640723 +0000 UTC m=+980.983118499 I0511 11:07:49.643357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:11:27.428361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:11:27.428441 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-11 11:11:27.428431667 +0000 UTC m=+1198.807909473 I0511 11:11:27.428369 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-11 11:11:27.428353075 +0000 UTC m=+1198.807830861 I0511 11:11:27.451714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:11:27.452012 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-11 11:11:27.452004034 +0000 UTC m=+1198.831481820 I0511 11:11:27.582205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:11:27.614399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-v5vv5" condition "Approved" to 2026-05-11 11:11:27.614383599 +0000 UTC m=+1198.993861405 I0511 11:11:27.636602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-v5vv5" condition "Ready" to 2026-05-11 11:11:27.636592415 +0000 UTC m=+1199.016070191 I0511 11:11:27.664396 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:11:27.664385204 +0000 UTC m=+1199.043862990 I0511 11:11:27.686381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:11:27.736885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:19:19.886263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:19:19.886339 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-11 11:19:19.88632885 +0000 UTC m=+1671.265806656 I0511 11:19:19.886261 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-11 11:19:19.886238938 +0000 UTC m=+1671.265716744 I0511 11:19:19.907030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:19:19.907108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:19:19.907135 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-11 11:19:19.907125447 +0000 UTC m=+1671.286603273 I0511 11:19:20.103800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:19:20.123908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-chgp6" condition "Approved" to 2026-05-11 11:19:20.12389289 +0000 UTC m=+1671.503370706 I0511 11:19:20.146777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-chgp6" condition "Ready" to 2026-05-11 11:19:20.146763675 +0000 UTC m=+1671.526241481 I0511 11:19:20.175856 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:19:20.175842079 +0000 UTC m=+1671.555319865 I0511 11:19:20.205546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:20:47.199818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:20:47.200034 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-11 11:20:47.200019439 +0000 UTC m=+1758.579497245 I0511 11:20:47.200234 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-11 11:20:47.200215363 +0000 UTC m=+1758.579693169 I0511 11:20:47.230882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:20:47.231003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:20:47.231271 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-11 11:20:47.23125705 +0000 UTC m=+1758.610734866 I0511 11:20:47.570137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:20:47.576289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cv79t" condition "Approved" to 2026-05-11 11:20:47.576245812 +0000 UTC m=+1758.955723578 I0511 11:20:47.600196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cv79t" condition "Ready" to 2026-05-11 11:20:47.60017823 +0000 UTC m=+1758.979656006 I0511 11:20:47.630601 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:20:47.630582832 +0000 UTC m=+1759.010060618 I0511 11:20:47.657282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:20:47.700686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:21:52.135626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:21:52.135720 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-11 11:21:52.135707644 +0000 UTC m=+1823.515185450 I0511 11:21:52.135829 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-11 11:21:52.135799596 +0000 UTC m=+1823.515277412 I0511 11:21:52.152455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:21:52.152540 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-11 11:21:52.152531082 +0000 UTC m=+1823.532008868 I0511 11:21:52.179044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:21:52.210766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-qtnvz" condition "Approved" to 2026-05-11 11:21:52.210746559 +0000 UTC m=+1823.590224345 I0511 11:21:52.246060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-qtnvz" condition "Ready" to 2026-05-11 11:21:52.246039743 +0000 UTC m=+1823.625517529 I0511 11:21:52.283636 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:21:52.283605097 +0000 UTC m=+1823.663082883 I0511 11:21:52.319479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:21:52.807672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:21:52.807717 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-11 11:21:52.807706343 +0000 UTC m=+1824.187184119 I0511 11:21:52.808168 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-11 11:21:52.808153533 +0000 UTC m=+1824.187631309 I0511 11:21:52.828435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:21:52.828574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:21:52.828615 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-11 11:21:52.828602062 +0000 UTC m=+1824.208079878 I0511 11:21:52.878270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-mbn4z" condition "Approved" to 2026-05-11 11:21:52.878251568 +0000 UTC m=+1824.257729354 I0511 11:21:52.892514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-mbn4z" condition "Ready" to 2026-05-11 11:21:52.892503738 +0000 UTC m=+1824.271981524 I0511 11:21:52.921962 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:21:52.921944969 +0000 UTC m=+1824.301422755 I0511 11:21:52.939276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:21:52.939529 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:21:52.939520665 +0000 UTC m=+1824.318998451 I0511 11:21:52.958197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:21:52.959973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:21:53.500156 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-11 11:21:53.500147651 +0000 UTC m=+1824.879625427 I0511 11:21:54.148389 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-11 11:21:54.148364645 +0000 UTC m=+1825.527842431 I0511 11:22:38.683443 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-11 11:22:38.683427123 +0000 UTC m=+1870.062904909 I0511 11:22:38.684310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:22:38.684359 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-11 11:22:38.684351173 +0000 UTC m=+1870.063828939 I0511 11:22:38.718806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:22:38.718880 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-11 11:22:38.718874079 +0000 UTC m=+1870.098351855 I0511 11:22:40.959236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:22:41.001949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-nxwv9" condition "Approved" to 2026-05-11 11:22:41.001927716 +0000 UTC m=+1872.381405532 I0511 11:22:41.023495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-nxwv9" condition "Ready" to 2026-05-11 11:22:41.023483861 +0000 UTC m=+1872.402961647 I0511 11:22:41.057673 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:22:41.057661198 +0000 UTC m=+1872.437138984 I0511 11:22:41.081244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:22:41.081930 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:22:41.081923434 +0000 UTC m=+1872.461401220 I0511 11:22:41.092062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:22:41.104931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:25:38.222065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:25:38.222116 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-11 11:25:38.222105978 +0000 UTC m=+2049.601583794 I0511 11:25:38.222813 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-11 11:25:38.222799834 +0000 UTC m=+2049.602277660 I0511 11:25:38.248940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:25:38.249037 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-11 11:25:38.249026583 +0000 UTC m=+2049.628504409 I0511 11:25:38.391737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:25:38.419658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-z9fwp" condition "Approved" to 2026-05-11 11:25:38.419642157 +0000 UTC m=+2049.799119943 I0511 11:25:38.438589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-z9fwp" condition "Ready" to 2026-05-11 11:25:38.438575323 +0000 UTC m=+2049.818053119 I0511 11:25:38.463359 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:25:38.463344068 +0000 UTC m=+2049.842821854 I0511 11:25:38.489514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:25:39.880547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:25:39.880578 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-11 11:25:39.880570614 +0000 UTC m=+2051.260048390 I0511 11:25:39.881006 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-11 11:25:39.881000614 +0000 UTC m=+2051.260478400 I0511 11:25:39.895228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:25:39.895298 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-11 11:25:39.895293636 +0000 UTC m=+2051.274771402 I0511 11:25:40.369880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:25:40.415436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-n9tkh" condition "Approved" to 2026-05-11 11:25:40.415418353 +0000 UTC m=+2051.794896169 I0511 11:25:40.435949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-n9tkh" condition "Ready" to 2026-05-11 11:25:40.435932894 +0000 UTC m=+2051.815410700 I0511 11:25:40.470261 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:25:40.470239425 +0000 UTC m=+2051.849717211 I0511 11:25:40.496803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:28:51.193232 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-11 11:28:51.193191395 +0000 UTC m=+2242.572669171 I0511 11:28:51.193862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:28:51.194109 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-11 11:28:51.193970792 +0000 UTC m=+2242.573448608 I0511 11:28:51.212211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:28:51.212293 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-11 11:28:51.212286624 +0000 UTC m=+2242.591764410 I0511 11:28:51.356632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:28:51.386652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-fwj2b" condition "Approved" to 2026-05-11 11:28:51.386624302 +0000 UTC m=+2242.766102108 I0511 11:28:51.406714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-fwj2b" condition "Ready" to 2026-05-11 11:28:51.406705273 +0000 UTC m=+2242.786183069 I0511 11:28:51.462818 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:28:51.462805233 +0000 UTC m=+2242.842283039 I0511 11:28:51.486348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:28:51.486879 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:28:51.486872385 +0000 UTC m=+2242.866350171 I0511 11:28:51.509042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:28:51.509314 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:28:51.509306559 +0000 UTC m=+2242.888784345 I0511 11:28:51.509738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:29:17.573723 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hr62b-vnc" condition "Ready" to 2026-05-11 11:29:17.573697138 +0000 UTC m=+2268.953174924 I0511 11:29:17.574237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-hr62b-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:29:17.574258 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hr62b-vnc" condition "Issuing" to 2026-05-11 11:29:17.57425459 +0000 UTC m=+2268.953732366 I0511 11:29:17.575422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-hr62b-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:29:17.575442 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hr62b-api" condition "Issuing" to 2026-05-11 11:29:17.575438426 +0000 UTC m=+2268.954916202 I0511 11:29:17.575879 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hr62b-api" condition "Ready" to 2026-05-11 11:29:17.575874307 +0000 UTC m=+2268.955352083 I0511 11:29:17.602816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-hr62b-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hr62b-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:29:17.602897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-hr62b-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:29:17.602915 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hr62b-vnc" condition "Issuing" to 2026-05-11 11:29:17.602907224 +0000 UTC m=+2268.982385010 I0511 11:29:17.605877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-hr62b-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hr62b-api\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:29:17.605995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-hr62b-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:29:17.606031 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hr62b-api" condition "Issuing" to 2026-05-11 11:29:17.606020833 +0000 UTC m=+2268.985498619 I0511 11:29:17.858471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hr62b-vnc-7flc5" condition "Approved" to 2026-05-11 11:29:17.858460026 +0000 UTC m=+2269.237937802 I0511 11:29:17.886041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hr62b-vnc-7flc5" condition "Ready" to 2026-05-11 11:29:17.886028835 +0000 UTC m=+2269.265506611 I0511 11:29:17.917812 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hr62b-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:29:17.917774239 +0000 UTC m=+2269.297252055 I0511 11:29:17.939829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-hr62b-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hr62b-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:29:17.940311 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hr62b-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:29:17.940301346 +0000 UTC m=+2269.319779132 I0511 11:29:17.959458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-hr62b-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hr62b-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:29:18.002900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-hr62b-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hr62b-api\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:29:18.007877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hr62b-api-69tjv" condition "Approved" to 2026-05-11 11:29:18.007860514 +0000 UTC m=+2269.387338300 I0511 11:29:18.031106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hr62b-api-69tjv" condition "Ready" to 2026-05-11 11:29:18.031090435 +0000 UTC m=+2269.410568251 I0511 11:29:18.069792 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hr62b-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:29:18.069777685 +0000 UTC m=+2269.449255461 I0511 11:29:18.089850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-hr62b-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hr62b-api\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:32:59.471121 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-11 11:32:59.471074657 +0000 UTC m=+2490.850552443 I0511 11:32:59.471218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:32:59.471236 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-11 11:32:59.471230561 +0000 UTC m=+2490.850708337 I0511 11:32:59.500242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:32:59.500352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:32:59.500378 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-11 11:32:59.500370465 +0000 UTC m=+2490.879848251 I0511 11:32:59.933417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-6b8ml" condition "Approved" to 2026-05-11 11:32:59.933401316 +0000 UTC m=+2491.312879132 I0511 11:32:59.955165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-6b8ml" condition "Ready" to 2026-05-11 11:32:59.955152755 +0000 UTC m=+2491.334630541 I0511 11:32:59.983088 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:32:59.983072043 +0000 UTC m=+2491.362549829 I0511 11:33:00.009271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:33:00.009842 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:33:00.009834013 +0000 UTC m=+2491.389311799 I0511 11:33:00.036394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:33:00.036697 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:33:00.036689707 +0000 UTC m=+2491.416167483 I0511 11:33:00.955328 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-11 11:33:00.955300149 +0000 UTC m=+2492.334777935 I0511 11:33:00.955602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:33:00.955647 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-11 11:33:00.955637047 +0000 UTC m=+2492.335114853 I0511 11:33:00.971386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:33:00.971494 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-11 11:33:00.971486643 +0000 UTC m=+2492.350964429 I0511 11:33:01.182281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:33:01.222902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-ds7pr" condition "Approved" to 2026-05-11 11:33:01.222879861 +0000 UTC m=+2492.602357647 I0511 11:33:01.240362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-ds7pr" condition "Ready" to 2026-05-11 11:33:01.240346575 +0000 UTC m=+2492.619824361 I0511 11:33:01.285917 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:33:01.285899168 +0000 UTC m=+2492.665376974 I0511 11:33:01.306124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:33:01.306615 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:33:01.306604473 +0000 UTC m=+2492.686082279 I0511 11:33:01.329883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:41.423039 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-11 11:35:41.423027376 +0000 UTC m=+2652.802505142 I0511 11:35:41.423048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:35:41.423137 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-11 11:35:41.423126288 +0000 UTC m=+2652.802604094 E0511 11:35:41.438736 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 11:35:41.438850 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-11 11:35:41.43883827 +0000 UTC m=+2652.818316076 I0511 11:35:41.438881 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 11:35:41.447264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:41.447398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:35:41.447429 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-11 11:35:41.447420433 +0000 UTC m=+2652.826898249 E0511 11:35:41.453487 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0511 11:35:41.453636 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 11:35:41.453684 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0511 11:35:41.453736 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0511 11:35:41.511812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-rr9jd" condition "Approved" to 2026-05-11 11:35:41.51179921 +0000 UTC m=+2652.891276986 I0511 11:35:41.512735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:41.541253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-rr9jd" condition "Ready" to 2026-05-11 11:35:41.541240891 +0000 UTC m=+2652.920718677 I0511 11:35:41.581794 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:41.581780702 +0000 UTC m=+2652.961258488 I0511 11:35:41.617680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:41.617978 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:41.617973056 +0000 UTC m=+2652.997450832 I0511 11:35:41.672648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:42.190930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:35:42.190963 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-11 11:35:42.190954801 +0000 UTC m=+2653.570432577 I0511 11:35:42.191035 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-11 11:35:42.191027053 +0000 UTC m=+2653.570504829 E0511 11:35:42.216432 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 11:35:42.216476 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-11 11:35:42.216469364 +0000 UTC m=+2653.595947140 I0511 11:35:42.216516 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 11:35:42.222893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:42.223114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:35:42.223162 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-11 11:35:42.223149464 +0000 UTC m=+2653.602627280 E0511 11:35:42.248487 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0511 11:35:42.250065 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0511 11:35:42.250111 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0511 11:35:42.250179 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0511 11:35:42.318151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:42.318511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-9xvbs" condition "Approved" to 2026-05-11 11:35:42.318495367 +0000 UTC m=+2653.697973183 I0511 11:35:42.387972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-9xvbs" condition "Ready" to 2026-05-11 11:35:42.387963418 +0000 UTC m=+2653.767441184 I0511 11:35:42.425742 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:42.425725677 +0000 UTC m=+2653.805203463 I0511 11:35:42.444386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:42.444769 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:42.444760364 +0000 UTC m=+2653.824238140 I0511 11:35:42.465641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:42.940942 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-11 11:35:42.940927704 +0000 UTC m=+2654.320405480 I0511 11:35:42.941279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:35:42.941323 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-11 11:35:42.941313383 +0000 UTC m=+2654.320791169 I0511 11:35:42.971972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:42.972050 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:35:42.972071 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-11 11:35:42.972062924 +0000 UTC m=+2654.351540700 I0511 11:35:43.024114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:43.033139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-kj22w" condition "Approved" to 2026-05-11 11:35:43.033125035 +0000 UTC m=+2654.412602831 I0511 11:35:43.050196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-kj22w" condition "Ready" to 2026-05-11 11:35:43.050184409 +0000 UTC m=+2654.429662195 I0511 11:35:46.454635 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:46.45462337 +0000 UTC m=+2657.834101156 I0511 11:35:46.468215 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-kj22w" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:46.468201115 +0000 UTC m=+2657.847678921 I0511 11:35:46.495107 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:46.495089439 +0000 UTC m=+2657.874567245 I0511 11:35:46.520912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:46.521226 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:46.521216016 +0000 UTC m=+2657.900693802 I0511 11:35:46.530811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:46.541054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:35:47.249015 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:35:47.249000139 +0000 UTC m=+2658.628477925 I0511 11:38:20.530136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:38:20.530165 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-11 11:38:20.530149993 +0000 UTC m=+2811.909627779 I0511 11:38:20.530195 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-11 11:38:20.530183743 +0000 UTC m=+2811.909661559 I0511 11:38:20.546967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:38:20.547152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:38:20.547244 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-11 11:38:20.547238327 +0000 UTC m=+2811.926716113 I0511 11:38:20.753621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:38:20.765203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-t4r62" condition "Approved" to 2026-05-11 11:38:20.765183508 +0000 UTC m=+2812.144661324 I0511 11:38:20.783774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-t4r62" condition "Ready" to 2026-05-11 11:38:20.783766185 +0000 UTC m=+2812.163243961 I0511 11:38:20.823943 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:38:20.823925709 +0000 UTC m=+2812.203403505 I0511 11:38:20.848536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:38:20.849304 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:38:20.849295579 +0000 UTC m=+2812.228773355 I0511 11:38:20.877857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:38:20.878167 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:38:20.878159658 +0000 UTC m=+2812.257637434 I0511 11:38:20.878526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:08.507601 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-11 11:39:08.507582733 +0000 UTC m=+2859.887060539 I0511 11:39:08.566592 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-11 11:39:08.56657263 +0000 UTC m=+2859.946050446 I0511 11:39:08.566603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:39:08.566773 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-11 11:39:08.566767344 +0000 UTC m=+2859.946245130 I0511 11:39:08.601814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:08.601912 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-11 11:39:08.601900924 +0000 UTC m=+2859.981378740 E0511 11:39:08.638296 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0511 11:39:08.794755 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-11 11:39:08.794736191 +0000 UTC m=+2860.174213977 E0511 11:39:08.812039 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0511 11:39:08.819823 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-11 11:39:08.819795544 +0000 UTC m=+2860.199273360 I0511 11:39:08.819895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:39:08.819929 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-11 11:39:08.819919307 +0000 UTC m=+2860.199397123 I0511 11:39:08.834297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:08.834435 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-11 11:39:08.834426583 +0000 UTC m=+2860.213904369 I0511 11:39:09.046622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:09.320053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-pwnqk" condition "Approved" to 2026-05-11 11:39:09.320040372 +0000 UTC m=+2860.699518148 I0511 11:39:09.442025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-pwnqk" condition "Ready" to 2026-05-11 11:39:09.442016985 +0000 UTC m=+2860.821494761 I0511 11:39:09.611759 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:39:09.611743641 +0000 UTC m=+2860.991221427 I0511 11:39:09.722136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:10.798796 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-11 11:39:10.798740503 +0000 UTC m=+2862.178218289 I0511 11:39:10.838771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:39:10.838818 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-11 11:39:10.838810174 +0000 UTC m=+2862.218287960 I0511 11:39:10.839293 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-11 11:39:10.839252794 +0000 UTC m=+2862.218730610 I0511 11:39:10.865711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:10.865822 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-11 11:39:10.865811001 +0000 UTC m=+2862.245288787 I0511 11:39:11.100674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:11.156719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-92w67" condition "Approved" to 2026-05-11 11:39:11.156701322 +0000 UTC m=+2862.536179118 I0511 11:39:11.186130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-92w67" condition "Ready" to 2026-05-11 11:39:11.186107183 +0000 UTC m=+2862.565584959 I0511 11:39:11.237280 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:39:11.237267944 +0000 UTC m=+2862.616745730 I0511 11:39:11.268455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:11.356914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:11.394163 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-11 11:39:11.394129631 +0000 UTC m=+2862.773607417 I0511 11:39:11.418753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:39:11.418803 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-11 11:39:11.418793025 +0000 UTC m=+2862.798270821 I0511 11:39:11.418800 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-11 11:39:11.418781195 +0000 UTC m=+2862.798259001 I0511 11:39:11.437508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:11.437559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:39:11.437576 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-11 11:39:11.437569817 +0000 UTC m=+2862.817047603 I0511 11:39:11.658042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-fkfl8" condition "Approved" to 2026-05-11 11:39:11.658028435 +0000 UTC m=+2863.037506221 I0511 11:39:11.661903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:11.676788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-fkfl8" condition "Ready" to 2026-05-11 11:39:11.676777807 +0000 UTC m=+2863.056255593 I0511 11:39:11.718183 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:39:11.718167997 +0000 UTC m=+2863.097645783 I0511 11:39:11.755599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:12.047480 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-11 11:39:12.047464532 +0000 UTC m=+2863.426942318 I0511 11:39:12.098700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:39:12.098762 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-11 11:39:12.098747415 +0000 UTC m=+2863.478225231 I0511 11:39:12.098904 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-11 11:39:12.098883878 +0000 UTC m=+2863.478361694 I0511 11:39:12.147776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:39:12.147849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:39:12.147870 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-11 11:39:12.14786423 +0000 UTC m=+2863.527342016 I0511 11:39:12.327046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-7jtwp" condition "Approved" to 2026-05-11 11:39:12.327027869 +0000 UTC m=+2863.706505685 I0511 11:39:12.393512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-7jtwp" condition "Ready" to 2026-05-11 11:39:12.393500553 +0000 UTC m=+2863.772978339 I0511 11:39:12.442419 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:39:12.442406423 +0000 UTC m=+2863.821884209 I0511 11:39:12.473429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:41.898330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:42:41.898361 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-11 11:42:41.898354643 +0000 UTC m=+3073.277832419 I0511 11:42:41.898785 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-11 11:42:41.898779692 +0000 UTC m=+3073.278257468 I0511 11:42:41.943594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:41.943916 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-11 11:42:41.943904546 +0000 UTC m=+3073.323382362 I0511 11:42:42.100706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:42.152552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-4d8s2" condition "Approved" to 2026-05-11 11:42:42.152541868 +0000 UTC m=+3073.532019644 I0511 11:42:42.175728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-4d8s2" condition "Ready" to 2026-05-11 11:42:42.175713549 +0000 UTC m=+3073.555191355 I0511 11:42:42.215058 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:42:42.215045943 +0000 UTC m=+3073.594523729 I0511 11:42:42.252826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:42.253100 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:42:42.253094999 +0000 UTC m=+3073.632572765 I0511 11:42:42.271150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:42.271194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:42.271509 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:42:42.271500593 +0000 UTC m=+3073.650978379 I0511 11:42:44.466263 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-11 11:42:44.466249445 +0000 UTC m=+3075.845727231 I0511 11:42:44.466805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:42:44.466859 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-11 11:42:44.466848518 +0000 UTC m=+3075.846326324 I0511 11:42:44.496190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:44.496272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0511 11:42:44.496292 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-11 11:42:44.496284279 +0000 UTC m=+3075.875762065 I0511 11:42:45.201224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-mcjph" condition "Approved" to 2026-05-11 11:42:45.201212181 +0000 UTC m=+3076.580689967 I0511 11:42:45.236870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-mcjph" condition "Ready" to 2026-05-11 11:42:45.236858923 +0000 UTC m=+3076.616336699 I0511 11:42:45.555513 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:42:45.555499677 +0000 UTC m=+3076.934977463 I0511 11:42:45.767153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:45.767764 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 11:42:45.76775405 +0000 UTC m=+3077.147231856 I0511 11:42:45.795757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0511 11:42:45.799115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0511 11:44:53.087208 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0511 11:45:09.725854 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0511 11:45:09.725924 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0511 11:45:43.731337 1 leaderelection.go:308] Failed to release lock: Timeout: request did not complete within requested timeout - context deadline exceeded I0511 11:45:43.732559 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0511 11:45:43.732586 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0511 11:45:43.732644 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0511 11:45:43.732665 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0511 11:45:43.732681 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0511 11:45:43.732696 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0511 11:45:43.732712 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0511 11:45:43.732736 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0511 11:45:43.732752 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0511 11:45:43.732813 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0511 11:45:43.732838 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0511 11:45:43.732859 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0511 11:45:43.732880 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0511 11:45:43.732568 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0511 11:45:43.732918 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0511 11:45:43.732906 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0511 11:45:43.732938 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0511 11:45:43.732962 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" E0511 11:45:43.733050 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"