I0507 02:24:23.328389       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0507 02:24:23.328488       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0507 02:24:23.328568       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0507 02:24:23.333561       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0507 02:24:23.334002       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0507 02:24:23.334050       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0507 02:24:23.334077       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0507 02:24:23.336521       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
E0507 02:24:23.337083       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
I0507 02:24:47.368751       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0507 02:24:47.373553       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0507 02:24:47.376011       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0507 02:24:47.379975       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0507 02:24:47.385591       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0507 02:24:47.385631       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0507 02:24:47.385669       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0507 02:24:47.389296       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0507 02:24:47.392068       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0507 02:24:47.393878       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0507 02:24:47.395507       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0507 02:24:47.397388       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0507 02:24:47.399551       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0507 02:24:47.402764       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0507 02:24:47.404711       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0507 02:24:47.406384       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0507 02:24:47.406466       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0507 02:24:47.408749       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0507 02:24:47.408817       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0507 02:24:47.411860       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0507 02:24:47.415367       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0507 02:24:47.417190       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0507 02:24:47.418756       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0507 02:24:47.418777       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0507 02:24:47.418831       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0507 02:24:47.421639       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.421635       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.424954       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.606935       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.874411       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.874763       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.875531       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.875645       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.883986       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:24:47.884200       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0507 02:25:28.106545       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-07 02:25:28.106530153 +0000 UTC m=+64.809093156
I0507 02:25:28.107116       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:25:28.107155       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-07 02:25:28.107146197 +0000 UTC m=+64.809709230
I0507 02:25:28.137323       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:25:28.137536       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:25:28.137594       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-07 02:25:28.137583615 +0000 UTC m=+64.840146638
I0507 02:25:28.491574       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:25:28.559900       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vt795" condition "Approved" to 2026-05-07 02:25:28.559884269 +0000 UTC m=+65.262447302
I0507 02:25:28.656997       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vt795" condition "Ready" to 2026-05-07 02:25:28.656978721 +0000 UTC m=+65.359541744
I0507 02:25:29.028468       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:25:29.028454392 +0000 UTC m=+65.731017455
I0507 02:25:29.176311       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:25:29.177203       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:25:29.177190744 +0000 UTC m=+65.879753747
I0507 02:25:29.240915       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:25:29.306922       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:30:07.042692       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:30:07.042767       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-07 02:30:07.042759742 +0000 UTC m=+343.745322745
I0507 02:30:07.042791       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-07 02:30:07.042773292 +0000 UTC m=+343.745336315
I0507 02:30:07.058543       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:30:07.058616       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:30:07.058636       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-07 02:30:07.058631197 +0000 UTC m=+343.761194200
I0507 02:30:07.438109       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-z2vwd" condition "Approved" to 2026-05-07 02:30:07.438092563 +0000 UTC m=+344.140655596
I0507 02:30:07.459536       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-z2vwd" condition "Ready" to 2026-05-07 02:30:07.459524871 +0000 UTC m=+344.162087864
I0507 02:30:07.492537       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:30:07.4925213 +0000 UTC m=+344.195084303
I0507 02:30:07.512424       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:30:07.513663       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:30:07.513656093 +0000 UTC m=+344.216219086
I0507 02:30:07.537495       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:30:07.537811       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:30:07.537801882 +0000 UTC m=+344.240364885
I0507 02:38:05.647416       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-07 02:38:05.647400723 +0000 UTC m=+822.349963726
I0507 02:38:05.647727       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:38:05.647849       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-07 02:38:05.647839693 +0000 UTC m=+822.350402706
I0507 02:38:05.664974       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:38:05.665227       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-07 02:38:05.665215163 +0000 UTC m=+822.367778196
I0507 02:38:05.881732       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:38:05.914750       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-n492p" condition "Approved" to 2026-05-07 02:38:05.914740029 +0000 UTC m=+822.617303022
I0507 02:38:05.944260       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-n492p" condition "Ready" to 2026-05-07 02:38:05.944248032 +0000 UTC m=+822.646811035
I0507 02:38:05.976718       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:38:05.976699661 +0000 UTC m=+822.679262684
I0507 02:38:05.998902       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:39:52.128648       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-07 02:39:52.128627685 +0000 UTC m=+928.831190688
I0507 02:39:52.128855       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:39:52.128975       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-07 02:39:52.128961963 +0000 UTC m=+928.831524996
I0507 02:39:52.182158       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:39:52.182253       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:39:52.182281       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-07 02:39:52.18227175 +0000 UTC m=+928.884834773
I0507 02:39:52.542713       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-5lbrb" condition "Approved" to 2026-05-07 02:39:52.542674663 +0000 UTC m=+929.245237696
I0507 02:39:52.631082       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-5lbrb" condition "Ready" to 2026-05-07 02:39:52.631071196 +0000 UTC m=+929.333634199
I0507 02:39:52.723324       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:39:52.723278614 +0000 UTC m=+929.425841637
I0507 02:39:52.777532       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:39:52.778177       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:39:52.778163805 +0000 UTC m=+929.480726828
I0507 02:39:52.981141       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:01.491585       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-07 02:41:01.491571113 +0000 UTC m=+998.194134146
I0507 02:41:01.492111       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:41:01.492144       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-07 02:41:01.492137256 +0000 UTC m=+998.194700289
I0507 02:41:01.507983       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:01.508033       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:41:01.508045       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-07 02:41:01.508040653 +0000 UTC m=+998.210603656
I0507 02:41:01.554956       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:01.560441       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-ft6vz" condition "Approved" to 2026-05-07 02:41:01.560429987 +0000 UTC m=+998.262992990
I0507 02:41:01.577967       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-ft6vz" condition "Ready" to 2026-05-07 02:41:01.57790396 +0000 UTC m=+998.280466963
I0507 02:41:01.603570       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:41:01.603547725 +0000 UTC m=+998.306110728
I0507 02:41:01.624590       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:01.703369       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:02.141530       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:41:02.141577       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-07 02:41:02.141557452 +0000 UTC m=+998.844120445
I0507 02:41:02.141593       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-07 02:41:02.141579923 +0000 UTC m=+998.844142946
I0507 02:41:02.181987       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:02.182069       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-07 02:41:02.18206251 +0000 UTC m=+998.884625513
I0507 02:41:02.203056       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:02.203210       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-07 02:41:02.203198935 +0000 UTC m=+998.905761938
I0507 02:41:02.208147       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-8jrg6" condition "Approved" to 2026-05-07 02:41:02.208133945 +0000 UTC m=+998.910696948
I0507 02:41:02.221104       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-07 02:41:02.221090256 +0000 UTC m=+998.923653289
I0507 02:41:02.226916       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-8jrg6" condition "Ready" to 2026-05-07 02:41:02.226903536 +0000 UTC m=+998.929466569
I0507 02:41:02.243372       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:02.291652       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:41:02.291637348 +0000 UTC m=+998.994200341
I0507 02:41:02.326006       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:02.326265       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:41:02.326257415 +0000 UTC m=+999.028820408
I0507 02:41:02.340982       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:02.341473       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:41:02.341461306 +0000 UTC m=+999.044024329
I0507 02:41:02.832749       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-07 02:41:02.832728125 +0000 UTC m=+999.535291138
I0507 02:41:03.445805       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-07 02:41:03.445782106 +0000 UTC m=+1000.148345129
I0507 02:41:49.188718       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-07 02:41:49.188703121 +0000 UTC m=+1045.891266114
I0507 02:41:49.189229       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:41:49.190141       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-07 02:41:49.190134874 +0000 UTC m=+1045.892697877
I0507 02:41:49.213612       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:49.213775       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:41:49.213833       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-07 02:41:49.213826075 +0000 UTC m=+1045.916389078
I0507 02:41:50.285985       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-hg2lc" condition "Approved" to 2026-05-07 02:41:50.285969584 +0000 UTC m=+1046.988532597
I0507 02:41:50.304729       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-hg2lc" condition "Ready" to 2026-05-07 02:41:50.304716004 +0000 UTC m=+1047.007278997
I0507 02:41:50.340619       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:41:50.340603859 +0000 UTC m=+1047.043166852
I0507 02:41:50.363787       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:41:50.364557       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:41:50.364550107 +0000 UTC m=+1047.067113130
I0507 02:41:50.385271       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:11.700233       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:45:11.700299       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-07 02:45:11.70029185 +0000 UTC m=+1248.402854853
I0507 02:45:11.700901       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-07 02:45:11.700881503 +0000 UTC m=+1248.403444536
I0507 02:45:11.718499       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:11.718613       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-07 02:45:11.718601271 +0000 UTC m=+1248.421164294
I0507 02:45:11.910711       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:11.940322       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-lrwl8" condition "Approved" to 2026-05-07 02:45:11.940303144 +0000 UTC m=+1248.642866147
I0507 02:45:11.963782       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-lrwl8" condition "Ready" to 2026-05-07 02:45:11.963755949 +0000 UTC m=+1248.666318942
I0507 02:45:11.996161       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:45:11.996146696 +0000 UTC m=+1248.698709699
I0507 02:45:12.021614       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:12.022434       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:12.022837       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:45:12.022829184 +0000 UTC m=+1248.725392187
I0507 02:45:12.043289       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:12.043716       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:45:12.043705853 +0000 UTC m=+1248.746268856
I0507 02:45:13.193465       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-07 02:45:13.193452302 +0000 UTC m=+1249.896015305
I0507 02:45:13.193710       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:45:13.194281       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-07 02:45:13.19426916 +0000 UTC m=+1249.896832193
I0507 02:45:13.210963       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:13.211084       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-07 02:45:13.211074647 +0000 UTC m=+1249.913637650
I0507 02:45:13.313006       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:13.347678       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-8tlhx" condition "Approved" to 2026-05-07 02:45:13.347661521 +0000 UTC m=+1250.050224524
I0507 02:45:13.368246       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-8tlhx" condition "Ready" to 2026-05-07 02:45:13.368234253 +0000 UTC m=+1250.070797266
I0507 02:45:13.400514       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:45:13.400496566 +0000 UTC m=+1250.103059589
I0507 02:45:13.424693       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:45:13.424991       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:45:13.424983575 +0000 UTC m=+1250.127546568
I0507 02:45:13.447962       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:48:46.332821       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:48:46.332953       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-07 02:48:46.3329462 +0000 UTC m=+1463.035509203
I0507 02:48:46.333389       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-07 02:48:46.333311068 +0000 UTC m=+1463.035874101
I0507 02:48:46.359254       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:48:46.359403       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-07 02:48:46.359391992 +0000 UTC m=+1463.061955015
I0507 02:48:46.528910       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:48:46.566312       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-mhxlw" condition "Approved" to 2026-05-07 02:48:46.566301029 +0000 UTC m=+1463.268864032
I0507 02:48:46.589215       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-mhxlw" condition "Ready" to 2026-05-07 02:48:46.589204982 +0000 UTC m=+1463.291767965
I0507 02:48:46.693249       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:48:46.693238699 +0000 UTC m=+1463.395801702
I0507 02:48:46.758386       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:48:47.010661       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:49:48.344441       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6hhs6-api" condition "Ready" to 2026-05-07 02:49:48.34442595 +0000 UTC m=+1525.046988953
I0507 02:49:48.344482       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-6hhs6-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:49:48.344503       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-6hhs6-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:49:48.344542       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6hhs6-vnc" condition "Issuing" to 2026-05-07 02:49:48.344534373 +0000 UTC m=+1525.047097386
I0507 02:49:48.344476       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6hhs6-vnc" condition "Ready" to 2026-05-07 02:49:48.344458971 +0000 UTC m=+1525.047021974
I0507 02:49:48.344519       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6hhs6-api" condition "Issuing" to 2026-05-07 02:49:48.344510272 +0000 UTC m=+1525.047073275
I0507 02:49:48.365467       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-6hhs6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6hhs6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:49:48.365637       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6hhs6-api" condition "Ready" to 2026-05-07 02:49:48.365626255 +0000 UTC m=+1525.068189278
I0507 02:49:48.366268       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-6hhs6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6hhs6-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:49:48.366346       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-6hhs6-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:49:48.366373       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-6hhs6-vnc" condition "Issuing" to 2026-05-07 02:49:48.366367892 +0000 UTC m=+1525.068930905
I0507 02:49:48.503482       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-6hhs6-vnc-z6cpk" condition "Approved" to 2026-05-07 02:49:48.503462458 +0000 UTC m=+1525.206025461
I0507 02:49:48.523139       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-6hhs6-vnc-z6cpk" condition "Ready" to 2026-05-07 02:49:48.523126878 +0000 UTC m=+1525.225689881
I0507 02:49:48.553212       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-6hhs6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:49:48.553194361 +0000 UTC m=+1525.255757374
I0507 02:49:48.573746       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-6hhs6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6hhs6-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:49:48.626745       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-6hhs6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6hhs6-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:49:48.973222       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-6hhs6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6hhs6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:49:49.005832       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-6hhs6-api-vmrrc" condition "Approved" to 2026-05-07 02:49:49.005818335 +0000 UTC m=+1525.708381328
I0507 02:49:49.019972       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-6hhs6-api-vmrrc" condition "Ready" to 2026-05-07 02:49:49.019958201 +0000 UTC m=+1525.722521204
I0507 02:49:49.055135       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-6hhs6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:49:49.055121428 +0000 UTC m=+1525.757684421
I0507 02:49:49.072887       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-6hhs6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6hhs6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:49:49.073305       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-6hhs6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:49:49.073293654 +0000 UTC m=+1525.775856687
I0507 02:49:49.106048       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-6hhs6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-6hhs6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:54:05.167967       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:54:05.168048       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-07 02:54:05.168038878 +0000 UTC m=+1781.870601911
I0507 02:54:05.168610       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-07 02:54:05.16859444 +0000 UTC m=+1781.871157463
I0507 02:54:05.201759       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:54:05.201911       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-07 02:54:05.201899535 +0000 UTC m=+1781.904462568
I0507 02:54:05.531440       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:54:05.567580       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-vksn9" condition "Approved" to 2026-05-07 02:54:05.567567015 +0000 UTC m=+1782.270130038
I0507 02:54:05.591964       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-vksn9" condition "Ready" to 2026-05-07 02:54:05.591954619 +0000 UTC m=+1782.294517622
I0507 02:54:05.641016       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:54:05.640998557 +0000 UTC m=+1782.343561540
I0507 02:54:05.675049       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:54:05.675529       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:54:05.675509369 +0000 UTC m=+1782.378072372
I0507 02:54:05.701251       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:54:05.701552       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:54:05.701545012 +0000 UTC m=+1782.404108025
I0507 02:54:06.834473       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-07 02:54:06.834449882 +0000 UTC m=+1783.537012925
I0507 02:54:06.834515       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:54:06.834592       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-07 02:54:06.834582575 +0000 UTC m=+1783.537145608
I0507 02:54:06.850970       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:54:06.851197       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-07 02:54:06.851171416 +0000 UTC m=+1783.553734449
I0507 02:54:06.961637       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:54:06.993323       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-4xp9z" condition "Approved" to 2026-05-07 02:54:06.993305626 +0000 UTC m=+1783.695868659
I0507 02:54:07.012689       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-4xp9z" condition "Ready" to 2026-05-07 02:54:07.012672769 +0000 UTC m=+1783.715235772
I0507 02:54:07.045750       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:54:07.045739578 +0000 UTC m=+1783.748302581
I0507 02:54:07.068930       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:42.092644       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:57:42.092703       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-07 02:57:42.092695747 +0000 UTC m=+1998.795258750
I0507 02:57:42.093796       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-07 02:57:42.093771862 +0000 UTC m=+1998.796334945
E0507 02:57:42.136857       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0507 02:57:42.136957       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-07 02:57:42.136944303 +0000 UTC m=+1998.839507336
I0507 02:57:42.136991       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0507 02:57:42.141393       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:42.141545       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-07 02:57:42.141532176 +0000 UTC m=+1998.844095209
E0507 02:57:42.164108       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
E0507 02:57:42.164222       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0507 02:57:42.164256       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0507 02:57:42.164297       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
I0507 02:57:42.171976       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:42.201301       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-qzm26" condition "Approved" to 2026-05-07 02:57:42.201289488 +0000 UTC m=+1998.903852491
I0507 02:57:42.244478       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-qzm26" condition "Ready" to 2026-05-07 02:57:42.24446607 +0000 UTC m=+1998.947029073
I0507 02:57:42.289427       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:57:42.289414661 +0000 UTC m=+1998.991977654
I0507 02:57:42.332668       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:42.332964       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:57:42.332958142 +0000 UTC m=+1999.035521125
I0507 02:57:42.369579       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:42.800270       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:57:42.800367       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-07 02:57:42.800357639 +0000 UTC m=+1999.502920632
I0507 02:57:42.800469       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-07 02:57:42.800453491 +0000 UTC m=+1999.503016494
E0507 02:57:42.847501       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0507 02:57:42.847652       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-07 02:57:42.847623043 +0000 UTC m=+1999.550186086
I0507 02:57:42.847976       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0507 02:57:42.851066       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:42.851364       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-07 02:57:42.851348765 +0000 UTC m=+1999.553911798
E0507 02:57:42.871944       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
E0507 02:57:42.872331       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0507 02:57:42.872593       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0507 02:57:42.872763       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
I0507 02:57:42.912934       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:42.960984       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-fkkfg" condition "Approved" to 2026-05-07 02:57:42.960934068 +0000 UTC m=+1999.663497051
I0507 02:57:42.979594       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-fkkfg" condition "Ready" to 2026-05-07 02:57:42.979580224 +0000 UTC m=+1999.682143237
I0507 02:57:43.011180       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:57:43.011163327 +0000 UTC m=+1999.713726330
I0507 02:57:43.044798       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:43.111573       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:43.540338       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-07 02:57:43.540322791 +0000 UTC m=+2000.242885794
I0507 02:57:43.540432       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:57:43.540477       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-07 02:57:43.540465254 +0000 UTC m=+2000.243028287
I0507 02:57:43.573780       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:43.573959       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 02:57:43.573991       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-07 02:57:43.573981521 +0000 UTC m=+2000.276544554
I0507 02:57:43.642538       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:43.655132       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-n67lq" condition "Approved" to 2026-05-07 02:57:43.655112579 +0000 UTC m=+2000.357675612
I0507 02:57:43.688705       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-n67lq" condition "Ready" to 2026-05-07 02:57:43.688690867 +0000 UTC m=+2000.391253890
I0507 02:57:47.170841       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:57:47.170832114 +0000 UTC m=+2003.873395107
I0507 02:57:47.220028       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-n67lq" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:57:47.22001191 +0000 UTC m=+2003.922574913
I0507 02:57:47.358827       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:57:47.358811943 +0000 UTC m=+2004.061374936
I0507 02:57:47.416826       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:47.417312       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:57:47.417297917 +0000 UTC m=+2004.119860920
I0507 02:57:47.437244       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:47.438375       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 02:57:47.873060       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 02:57:47.873045494 +0000 UTC m=+2004.575608527
I0507 03:00:39.959580       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:00:39.959627       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-07 03:00:39.959618849 +0000 UTC m=+2176.662181862
I0507 03:00:39.959696       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-07 03:00:39.959688361 +0000 UTC m=+2176.662251364
I0507 03:00:39.985410       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:00:39.985637       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:00:39.985716       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-07 03:00:39.98570648 +0000 UTC m=+2176.688269473
I0507 03:00:40.556689       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:00:40.565501       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-mk8r6" condition "Approved" to 2026-05-07 03:00:40.565483641 +0000 UTC m=+2177.268046644
I0507 03:00:40.597161       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-mk8r6" condition "Ready" to 2026-05-07 03:00:40.597144188 +0000 UTC m=+2177.299707221
I0507 03:00:40.631201       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:00:40.631187786 +0000 UTC m=+2177.333750779
I0507 03:00:40.654776       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:00:40.656395       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:00:40.656385218 +0000 UTC m=+2177.358948221
I0507 03:00:40.681617       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:00:40.681953       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:00:40.681941927 +0000 UTC m=+2177.384504930
I0507 03:00:40.682293       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:28.655409       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-07 03:01:28.655388298 +0000 UTC m=+2225.357951331
I0507 03:01:28.680216       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-07 03:01:28.680201371 +0000 UTC m=+2225.382764384
I0507 03:01:28.680608       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:01:28.680634       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-07 03:01:28.68062854 +0000 UTC m=+2225.383191553
I0507 03:01:28.709291       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:28.709390       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:01:28.709409       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-07 03:01:28.709402841 +0000 UTC m=+2225.411965834
E0507 03:01:28.729606       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers"
I0507 03:01:28.797660       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-07 03:01:28.797625988 +0000 UTC m=+2225.500189021
I0507 03:01:28.821948       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:01:28.821983       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-07 03:01:28.82196135 +0000 UTC m=+2225.524524383
I0507 03:01:28.822007       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-07 03:01:28.82199517 +0000 UTC m=+2225.524558173
I0507 03:01:28.847563       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:28.847919       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-07 03:01:28.847884868 +0000 UTC m=+2225.550447951
E0507 03:01:28.886398       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert"
I0507 03:01:29.066872       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:29.172233       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-zqlw7" condition "Approved" to 2026-05-07 03:01:29.172222506 +0000 UTC m=+2225.874785499
I0507 03:01:29.205613       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-zqlw7" condition "Ready" to 2026-05-07 03:01:29.20560161 +0000 UTC m=+2225.908164613
I0507 03:01:29.246884       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:01:29.24687406 +0000 UTC m=+2225.949437063
I0507 03:01:29.270219       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:29.270548       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:01:29.270540697 +0000 UTC m=+2225.973103700
I0507 03:01:29.304138       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:29.711996       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-07 03:01:29.711980086 +0000 UTC m=+2226.414543089
I0507 03:01:29.738628       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:01:29.738669       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-07 03:01:29.738661301 +0000 UTC m=+2226.441224294
I0507 03:01:29.738680       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-07 03:01:29.738671091 +0000 UTC m=+2226.441234094
I0507 03:01:29.761067       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:29.761156       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-07 03:01:29.761149232 +0000 UTC m=+2226.463712235
I0507 03:01:30.066194       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:30.403516       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-ps5xh" condition "Approved" to 2026-05-07 03:01:30.403498278 +0000 UTC m=+2227.106061301
I0507 03:01:30.498317       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-ps5xh" condition "Ready" to 2026-05-07 03:01:30.498298481 +0000 UTC m=+2227.200861514
I0507 03:01:31.138159       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:01:31.138139961 +0000 UTC m=+2227.840702994
I0507 03:01:31.231262       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:32.978868       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-07 03:01:32.978850614 +0000 UTC m=+2229.681413617
I0507 03:01:33.106161       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-07 03:01:33.106142872 +0000 UTC m=+2229.808705875
I0507 03:01:33.106198       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:01:33.106242       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-07 03:01:33.106233324 +0000 UTC m=+2229.808796327
I0507 03:01:33.677077       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:33.677159       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-07 03:01:33.677151897 +0000 UTC m=+2230.379714900
I0507 03:01:34.005687       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:34.052807       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-wn2nr" condition "Approved" to 2026-05-07 03:01:34.05279298 +0000 UTC m=+2230.755355973
I0507 03:01:34.078417       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-wn2nr" condition "Ready" to 2026-05-07 03:01:34.078403051 +0000 UTC m=+2230.780966054
I0507 03:01:34.174683       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:01:34.174667516 +0000 UTC m=+2230.877230519
I0507 03:01:34.225715       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:34.226112       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:01:34.226103521 +0000 UTC m=+2230.928666524
I0507 03:01:34.265450       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:34.880944       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-07 03:01:34.880927096 +0000 UTC m=+2231.583490099
I0507 03:01:34.913990       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-07 03:01:34.913969323 +0000 UTC m=+2231.616532346
I0507 03:01:34.915057       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:01:34.915150       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-07 03:01:34.915112878 +0000 UTC m=+2231.617675881
I0507 03:01:34.937568       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:34.937669       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:01:34.937700       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-07 03:01:34.937693161 +0000 UTC m=+2231.640256164
I0507 03:01:35.225722       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-b75c7" condition "Approved" to 2026-05-07 03:01:35.22570868 +0000 UTC m=+2231.928271673
I0507 03:01:35.262855       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:35.308384       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-b75c7" condition "Ready" to 2026-05-07 03:01:35.308372683 +0000 UTC m=+2232.010935676
I0507 03:01:35.388359       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:01:35.388345015 +0000 UTC m=+2232.090908008
I0507 03:01:35.419401       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:01:35.419688       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:01:35.419682343 +0000 UTC m=+2232.122245356
I0507 03:01:35.461825       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:07:58.365690       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-07 03:07:58.365680332 +0000 UTC m=+2615.068243325
I0507 03:07:58.366175       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:07:58.366193       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-07 03:07:58.366190103 +0000 UTC m=+2615.068753096
I0507 03:07:58.822581       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:07:58.822707       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:07:58.822734       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-07 03:07:58.822727709 +0000 UTC m=+2615.525290702
I0507 03:08:02.158899       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-qkmsr" condition "Approved" to 2026-05-07 03:08:02.158880721 +0000 UTC m=+2618.861443704
I0507 03:08:03.095933       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-qkmsr" condition "Ready" to 2026-05-07 03:08:03.095920777 +0000 UTC m=+2619.798483790
I0507 03:08:06.419502       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:08:06.419480488 +0000 UTC m=+2623.122043481
I0507 03:08:07.357217       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:08:07.357245       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-07 03:08:07.35723933 +0000 UTC m=+2624.059802323
I0507 03:08:07.357370       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-07 03:08:07.357355003 +0000 UTC m=+2624.059918006
I0507 03:08:07.361114       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:08:07.972245       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:08:07.972507       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0507 03:08:07.972538       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-07 03:08:07.97253073 +0000 UTC m=+2624.675093733
I0507 03:08:10.748687       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:08:10.748768       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-74sc6" condition "Approved" to 2026-05-07 03:08:10.748756749 +0000 UTC m=+2627.451319752
I0507 03:08:10.820679       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-74sc6" condition "Ready" to 2026-05-07 03:08:10.820665365 +0000 UTC m=+2627.523228368
I0507 03:08:11.023068       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-07 03:08:11.023053684 +0000 UTC m=+2627.725616697
I0507 03:08:11.324009       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0507 03:08:11.502145       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
E0507 03:09:10.967661       1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out
E0507 03:09:33.389211       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded
I0507 03:09:33.389289       1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition
E0507 03:09:35.076282       1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again
I0507 03:09:35.076954       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca"
I0507 03:09:35.076977       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager"
I0507 03:09:35.076991       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi"
I0507 03:09:35.077004       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned"
I0507 03:09:35.077018       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics"
I0507 03:09:35.077031       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager"
I0507 03:09:35.077044       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers"
I0507 03:09:35.077058       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme"
I0507 03:09:35.077073       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger"
I0507 03:09:35.077087       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager"
I0507 03:09:35.077100       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness"
I0507 03:09:35.077113       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges"
I0507 03:09:35.077127       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers"
I0507 03:09:35.077139       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing"
I0507 03:09:35.077153       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver"
I0507 03:09:35.077166       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim"
I0507 03:09:35.077180       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault"
I0507 03:09:35.077198       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders"
E0507 03:09:35.079092       1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"