I0520 17:31:30.627374 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0520 17:31:30.627492 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0520 17:31:30.627574 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0520 17:31:30.631820 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0520 17:31:30.632239 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0520 17:31:30.632350 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0520 17:31:30.632372 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0520 17:31:30.635249 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0520 17:31:30.655554 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0520 17:31:30.659747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0520 17:31:30.664421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0520 17:31:30.667703 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0520 17:31:30.671118 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0520 17:31:30.671145 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0520 17:31:30.671195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0520 17:31:30.673679 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0520 17:31:30.676411 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0520 17:31:30.680547 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0520 17:31:30.680625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0520 17:31:30.680705 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0520 17:31:30.685737 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0520 17:31:30.686032 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0520 17:31:30.689209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0520 17:31:30.691753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0520 17:31:30.694303 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0520 17:31:30.696802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0520 17:31:30.699363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0520 17:31:30.701899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0520 17:31:30.703970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0520 17:31:30.705926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0520 17:31:30.711934 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0520 17:31:30.713949 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0520 17:31:30.714378 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0520 17:31:30.717587 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.717672 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.718197 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.718375 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.718503 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.718803 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.718870 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.718871 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.719379 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:30.803092 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 17:31:46.090505 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-20 17:31:46.090486631 +0000 UTC m=+15.500351546 I0520 17:31:46.916071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:46.916173 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 17:31:46.916163013 +0000 UTC m=+16.326027878 I0520 17:31:46.916168 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 17:31:46.916145532 +0000 UTC m=+16.326010427 E0520 17:31:47.005954 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 17:31:47.006060 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-20 17:31:47.006048478 +0000 UTC m=+16.415913373 E0520 17:31:47.006095 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 17:31:47.011580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:47.011671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:31:47.011700 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 17:31:47.01169446 +0000 UTC m=+16.421559335 E0520 17:31:47.211846 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0520 17:31:47.212024 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:31:47.212101 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:31:47.212197 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0520 17:31:47.466836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4cdlk" condition "Approved" to 2026-05-20 17:31:47.466825228 +0000 UTC m=+16.876690113 I0520 17:31:47.622046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4cdlk" condition "Ready" to 2026-05-20 17:31:47.622035336 +0000 UTC m=+17.031900201 I0520 17:31:47.679200 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:47.679161695 +0000 UTC m=+17.089026590 I0520 17:31:47.712123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:31:52.220742 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:31:52.220721351 +0000 UTC m=+21.630586266 I0520 17:32:21.775430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:32:21.775486 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 17:32:21.775474554 +0000 UTC m=+51.185339449 I0520 17:32:21.775428 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 17:32:21.775410062 +0000 UTC m=+51.185274927 I0520 17:32:21.899448 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-20 17:32:21.899433696 +0000 UTC m=+51.309298591 I0520 17:32:21.905687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:32:21.905819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:32:21.905858 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 17:32:21.905845973 +0000 UTC m=+51.315710878 I0520 17:32:22.984954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qhhfn" condition "Approved" to 2026-05-20 17:32:22.984890695 +0000 UTC m=+52.394755590 I0520 17:32:23.181834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qhhfn" condition "Ready" to 2026-05-20 17:32:23.181819015 +0000 UTC m=+52.591683890 I0520 17:32:23.601240 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:32:23.601209004 +0000 UTC m=+53.011073879 I0520 17:32:23.745600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:32:23.746175 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:32:23.74616518 +0000 UTC m=+53.156030075 I0520 17:32:23.846617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:32:23.849781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:34:32.033211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:34:32.033277 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-20 17:34:32.033269489 +0000 UTC m=+181.443134354 I0520 17:34:32.033230 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-20 17:34:32.033171686 +0000 UTC m=+181.443036581 E0520 17:34:32.047257 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 17:34:32.047333 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-20 17:34:32.047325249 +0000 UTC m=+181.457190124 I0520 17:34:32.047355 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 17:34:32.049792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:34:32.049983 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-20 17:34:32.049974514 +0000 UTC m=+181.459839389 E0520 17:34:32.058574 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0520 17:34:32.058660 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 17:34:32.058684 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0520 17:34:32.058714 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0520 17:34:32.059533 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:34:32.059560 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-20 17:34:32.059553311 +0000 UTC m=+181.469418176 I0520 17:34:32.059633 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-20 17:34:32.059615903 +0000 UTC m=+181.469480778 I0520 17:34:32.075042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:34:32.075124 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-20 17:34:32.0751164 +0000 UTC m=+181.484981265 I0520 17:34:32.139168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:34:32.167947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gj8pw" condition "Approved" to 2026-05-20 17:34:32.167918923 +0000 UTC m=+181.577783788 I0520 17:34:32.201499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gj8pw" condition "Ready" to 2026-05-20 17:34:32.201477697 +0000 UTC m=+181.611342602 I0520 17:34:32.232061 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:34:32.232037166 +0000 UTC m=+181.641902031 I0520 17:34:32.252552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:34:32.252930 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:34:32.252921975 +0000 UTC m=+181.662786850 I0520 17:34:32.271913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:34:32.276669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:34:32.301332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-t7tq8" condition "Approved" to 2026-05-20 17:34:32.301319436 +0000 UTC m=+181.711184311 I0520 17:34:32.321702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-t7tq8" condition "Ready" to 2026-05-20 17:34:32.321685248 +0000 UTC m=+181.731550123 I0520 17:34:37.059162 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:34:37.059147307 +0000 UTC m=+186.469012202 I0520 17:34:37.075004 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-t7tq8" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:34:37.074964684 +0000 UTC m=+186.484829559 I0520 17:34:37.104999 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:34:37.104985145 +0000 UTC m=+186.514850020 I0520 17:34:37.121175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:34:37.121716 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:34:37.121705041 +0000 UTC m=+186.531569936 I0520 17:34:37.139205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:37:23.907290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:37:23.907372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-05-20 17:37:23.907325896 +0000 UTC m=+353.317190781 I0520 17:37:23.908063 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-05-20 17:37:23.908051729 +0000 UTC m=+353.317916594 I0520 17:37:23.927111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:37:23.927184 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-05-20 17:37:23.927177073 +0000 UTC m=+353.337041938 I0520 17:37:24.081058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:37:24.115605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-w9mcg" condition "Approved" to 2026-05-20 17:37:24.115587061 +0000 UTC m=+353.525451956 I0520 17:37:24.136817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-w9mcg" condition "Ready" to 2026-05-20 17:37:24.136802772 +0000 UTC m=+353.546667667 I0520 17:37:24.165271 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:37:24.165261146 +0000 UTC m=+353.575126021 I0520 17:37:24.190638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:37:24.191227 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:37:24.191218839 +0000 UTC m=+353.601083714 I0520 17:37:24.206102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:37:24.206402 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:37:24.206393906 +0000 UTC m=+353.616258781 I0520 17:38:38.470709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:38:38.470794 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 17:38:38.470755268 +0000 UTC m=+427.880620143 I0520 17:38:38.470798 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 17:38:38.470755328 +0000 UTC m=+427.880620193 I0520 17:38:38.484943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:38:38.485016 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:38:38.485036 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 17:38:38.485029246 +0000 UTC m=+427.894894111 E0520 17:38:38.485069 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 17:38:38.485145 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-20 17:38:38.485135839 +0000 UTC m=+427.895000724 E0520 17:38:38.485176 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:38:38.498841 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0520 17:38:38.498933 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:38:38.498966 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 17:38:38.499064 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0520 17:38:38.524708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:38:38.527660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wq2pw" condition "Approved" to 2026-05-20 17:38:38.527641064 +0000 UTC m=+427.937505959 I0520 17:38:38.540569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wq2pw" condition "Ready" to 2026-05-20 17:38:38.540558278 +0000 UTC m=+427.950423143 I0520 17:38:38.562310 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:38:38.562296236 +0000 UTC m=+427.972161121 I0520 17:38:38.577701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:38:38.577985 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:38:38.57797598 +0000 UTC m=+427.987840855 I0520 17:38:38.600167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:38:38.601672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:38:38.601923 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:38:38.601915618 +0000 UTC m=+428.011780493 I0520 17:38:38.603175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:38:43.500017 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:38:43.500002591 +0000 UTC m=+432.909867496 I0520 17:39:25.120876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:39:25.120930 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 17:39:25.120922105 +0000 UTC m=+474.530786990 I0520 17:39:25.120955 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 17:39:25.120935426 +0000 UTC m=+474.530800321 I0520 17:39:25.130712 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 17:39:25.130688978 +0000 UTC m=+474.540553853 I0520 17:39:25.130790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:39:25.130836 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 17:39:25.130824653 +0000 UTC m=+474.540689548 I0520 17:39:25.142283 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 17:39:25.142269039 +0000 UTC m=+474.552133904 I0520 17:39:25.142823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:39:25.146327 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 17:39:25.146318069 +0000 UTC m=+474.556182934 I0520 17:39:25.147699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:25.147780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:39:25.148988 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 17:39:25.148980024 +0000 UTC m=+474.558844939 I0520 17:39:25.158595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:25.158679 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 17:39:25.158670084 +0000 UTC m=+474.568534969 I0520 17:39:25.173472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:25.173601 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 17:39:25.173590282 +0000 UTC m=+474.583455167 I0520 17:39:25.374425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:25.382273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dp2v2" condition "Approved" to 2026-05-20 17:39:25.382259567 +0000 UTC m=+474.792124472 I0520 17:39:25.401708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dp2v2" condition "Ready" to 2026-05-20 17:39:25.401693129 +0000 UTC m=+474.811558034 I0520 17:39:25.448253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:25.448978 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:39:25.448962993 +0000 UTC m=+474.858827888 I0520 17:39:25.463047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:25.477203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:25.478337 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:39:25.478330894 +0000 UTC m=+474.888195759 I0520 17:39:25.494456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9xnnd" condition "Approved" to 2026-05-20 17:39:25.49444436 +0000 UTC m=+474.904309245 I0520 17:39:25.506420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zn5r4" condition "Approved" to 2026-05-20 17:39:25.506404503 +0000 UTC m=+474.916269378 I0520 17:39:25.506532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:25.511490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9xnnd" condition "Ready" to 2026-05-20 17:39:25.511479426 +0000 UTC m=+474.921344291 I0520 17:39:25.572780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zn5r4" condition "Ready" to 2026-05-20 17:39:25.572736788 +0000 UTC m=+474.982601673 I0520 17:39:26.165288 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:39:26.165266537 +0000 UTC m=+475.575131442 I0520 17:39:26.259270 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:39:26.259251038 +0000 UTC m=+475.669115933 I0520 17:39:26.366495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:26.367140 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:39:26.367129943 +0000 UTC m=+475.776994848 I0520 17:39:26.526605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:26.527098 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:39:26.527085507 +0000 UTC m=+475.936950412 I0520 17:39:26.813656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:26.964246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:27.062918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:27.069480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:35.000128 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" condition "Ready" to 2026-05-20 17:39:35.000090655 +0000 UTC m=+484.409955540 I0520 17:39:35.000254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:39:35.000318 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" condition "Issuing" to 2026-05-20 17:39:35.000303622 +0000 UTC m=+484.410168547 I0520 17:39:35.017385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:35.017511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:39:35.017554 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" condition "Issuing" to 2026-05-20 17:39:35.017540434 +0000 UTC m=+484.427405339 I0520 17:39:35.698892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hwhcx-nm8tg" condition "Approved" to 2026-05-20 17:39:35.698880219 +0000 UTC m=+485.108745094 I0520 17:39:35.704077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:39:35.861913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hwhcx-nm8tg" condition "Ready" to 2026-05-20 17:39:35.861900141 +0000 UTC m=+485.271765016 I0520 17:39:36.188547 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:39:36.188522114 +0000 UTC m=+485.598387009 I0520 17:39:36.413088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hwhcx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:40:04.065752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 17:40:04.06573553 +0000 UTC m=+513.475600405 I0520 17:40:04.066337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:40:04.066369 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 17:40:04.06636359 +0000 UTC m=+513.476228465 I0520 17:40:04.087393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:40:04.087487 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 17:40:04.087449824 +0000 UTC m=+513.497314689 I0520 17:40:04.250203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:40:04.323961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pcvxq" condition "Approved" to 2026-05-20 17:40:04.323947895 +0000 UTC m=+513.733812770 I0520 17:40:04.347584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pcvxq" condition "Ready" to 2026-05-20 17:40:04.347571321 +0000 UTC m=+513.757436196 I0520 17:40:04.378888 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:40:04.378853211 +0000 UTC m=+513.788718086 I0520 17:40:04.403033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:40:04.403463 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:40:04.403454868 +0000 UTC m=+513.813319743 I0520 17:40:04.418939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:40:04.419320 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:40:04.419311674 +0000 UTC m=+513.829176579 I0520 17:43:25.912394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:43:25.912484 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 17:43:25.912474634 +0000 UTC m=+715.322339539 I0520 17:43:25.912391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 17:43:25.91234332 +0000 UTC m=+715.322208235 I0520 17:43:25.929971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:43:25.930022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:43:25.930034 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 17:43:25.930029963 +0000 UTC m=+715.339894838 I0520 17:43:26.122155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-swxsd" condition "Approved" to 2026-05-20 17:43:26.122136764 +0000 UTC m=+715.532001659 I0520 17:43:26.142941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-swxsd" condition "Ready" to 2026-05-20 17:43:26.142929585 +0000 UTC m=+715.552794460 I0520 17:43:26.168735 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:43:26.168720536 +0000 UTC m=+715.578585411 I0520 17:43:26.195583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:45:53.132146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:45:53.132218 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-20 17:45:53.1321755 +0000 UTC m=+862.542040365 I0520 17:45:53.132354 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-20 17:45:53.132344706 +0000 UTC m=+862.542209571 I0520 17:45:53.162349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:45:53.162448 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-20 17:45:53.162439085 +0000 UTC m=+862.572303950 I0520 17:45:53.236812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:45:53.269931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-txpwt" condition "Approved" to 2026-05-20 17:45:53.269915786 +0000 UTC m=+862.679780681 I0520 17:45:53.294730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-txpwt" condition "Ready" to 2026-05-20 17:45:53.294718154 +0000 UTC m=+862.704583029 I0520 17:45:53.327905 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:45:53.327890286 +0000 UTC m=+862.737755181 I0520 17:45:53.353706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:45:53.354705 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:45:53.354699375 +0000 UTC m=+862.764564240 I0520 17:45:53.360456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:45:53.374295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:45:53.374596 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:45:53.374586072 +0000 UTC m=+862.784450947 I0520 17:47:03.680357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:47:03.680528 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-20 17:47:03.680433354 +0000 UTC m=+933.090298259 I0520 17:47:03.681215 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-20 17:47:03.681204699 +0000 UTC m=+933.091069604 I0520 17:47:03.696826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:47:03.696926 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-20 17:47:03.696918191 +0000 UTC m=+933.106783056 I0520 17:47:04.110715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:47:04.148275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dnpgw" condition "Approved" to 2026-05-20 17:47:04.148252635 +0000 UTC m=+933.558117550 I0520 17:47:04.161988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dnpgw" condition "Ready" to 2026-05-20 17:47:04.161972083 +0000 UTC m=+933.571836968 I0520 17:47:04.197132 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:47:04.197114585 +0000 UTC m=+933.606979440 I0520 17:47:04.225267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:47:04.225636 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:47:04.225628915 +0000 UTC m=+933.635493780 I0520 17:47:04.236578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:47:04.261403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:47:04.261759 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:47:04.261752408 +0000 UTC m=+933.671617273 I0520 17:50:08.401744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:50:08.401864 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-20 17:50:08.401851671 +0000 UTC m=+1117.811716566 I0520 17:50:08.401764 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-20 17:50:08.401715457 +0000 UTC m=+1117.811580362 I0520 17:50:08.418288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:50:08.418354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:50:08.418367 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-20 17:50:08.418362938 +0000 UTC m=+1117.828227813 I0520 17:50:08.556462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:50:08.563514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-d2x4p" condition "Approved" to 2026-05-20 17:50:08.563498654 +0000 UTC m=+1117.973363539 I0520 17:50:08.581237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-d2x4p" condition "Ready" to 2026-05-20 17:50:08.581225869 +0000 UTC m=+1117.991090744 I0520 17:50:08.611383 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:50:08.61137127 +0000 UTC m=+1118.021236145 I0520 17:50:08.631475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:56:21.585524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:56:21.585610 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-20 17:56:21.585585378 +0000 UTC m=+1490.995450273 I0520 17:56:21.585817 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-20 17:56:21.585793424 +0000 UTC m=+1490.995658319 I0520 17:56:21.608780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:56:21.609032 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-20 17:56:21.609021184 +0000 UTC m=+1491.018886069 I0520 17:56:21.785927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:56:21.817868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-wxv6j" condition "Approved" to 2026-05-20 17:56:21.817850853 +0000 UTC m=+1491.227715728 I0520 17:56:21.839449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-wxv6j" condition "Ready" to 2026-05-20 17:56:21.839438561 +0000 UTC m=+1491.249303436 I0520 17:56:21.871536 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:56:21.871519962 +0000 UTC m=+1491.281384857 I0520 17:56:21.893871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:56:21.894219 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:56:21.894212725 +0000 UTC m=+1491.304077590 I0520 17:56:21.918923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:56:21.920279 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:56:21.920269984 +0000 UTC m=+1491.330134859 I0520 17:57:52.717516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:57:52.717549 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-20 17:57:52.717542856 +0000 UTC m=+1582.127407721 I0520 17:57:52.717630 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-20 17:57:52.717614659 +0000 UTC m=+1582.127479534 I0520 17:57:52.777283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:57:52.777393 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-20 17:57:52.777384952 +0000 UTC m=+1582.187249817 I0520 17:57:52.966703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:57:52.994797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cpmrl" condition "Approved" to 2026-05-20 17:57:52.994778974 +0000 UTC m=+1582.404643849 I0520 17:57:53.012926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cpmrl" condition "Ready" to 2026-05-20 17:57:53.01288312 +0000 UTC m=+1582.422747995 I0520 17:57:53.048278 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:57:53.048233276 +0000 UTC m=+1582.458098141 I0520 17:57:53.072390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:57:53.139463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:51.943415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:58:51.943457 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 17:58:51.943416641 +0000 UTC m=+1641.353281556 I0520 17:58:51.943491 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-20 17:58:51.943483803 +0000 UTC m=+1641.353348708 I0520 17:58:51.963382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:51.963489 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 17:58:51.963478809 +0000 UTC m=+1641.373343714 I0520 17:58:51.988765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:52.013420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-mz62f" condition "Approved" to 2026-05-20 17:58:52.013408158 +0000 UTC m=+1641.423273033 I0520 17:58:52.037173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-mz62f" condition "Ready" to 2026-05-20 17:58:52.037162774 +0000 UTC m=+1641.447027649 I0520 17:58:52.063726 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:58:52.063710258 +0000 UTC m=+1641.473575143 I0520 17:58:52.078840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:52.079132 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:58:52.079125649 +0000 UTC m=+1641.488990514 I0520 17:58:52.099055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:52.545331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:58:52.545623 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-20 17:58:52.545612712 +0000 UTC m=+1641.955477597 I0520 17:58:52.545652 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-20 17:58:52.545630903 +0000 UTC m=+1641.955495798 I0520 17:58:52.568628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:52.568711 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-20 17:58:52.568701827 +0000 UTC m=+1641.978566702 I0520 17:58:52.586756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:52.602616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:52.638770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-jvk9c" condition "Approved" to 2026-05-20 17:58:52.638753466 +0000 UTC m=+1642.048618341 I0520 17:58:52.653272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-jvk9c" condition "Ready" to 2026-05-20 17:58:52.653261278 +0000 UTC m=+1642.063126153 I0520 17:58:52.677161 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:58:52.676889699 +0000 UTC m=+1642.086754574 I0520 17:58:52.699775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:52.758810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:58:53.274881 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-20 17:58:53.274866738 +0000 UTC m=+1642.684731633 I0520 17:58:53.923877 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-20 17:58:53.923866689 +0000 UTC m=+1643.333731554 I0520 17:59:39.556198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 17:59:39.556430 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-20 17:59:39.556422719 +0000 UTC m=+1688.966287594 I0520 17:59:39.556502 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-20 17:59:39.556488941 +0000 UTC m=+1688.966353796 I0520 17:59:39.575104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:59:39.575200 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-20 17:59:39.575194267 +0000 UTC m=+1688.985059132 I0520 17:59:41.608109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 17:59:41.655449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-b6t8x" condition "Approved" to 2026-05-20 17:59:41.655434342 +0000 UTC m=+1691.065299207 I0520 17:59:41.678288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-b6t8x" condition "Ready" to 2026-05-20 17:59:41.678276519 +0000 UTC m=+1691.088141394 I0520 17:59:41.709191 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 17:59:41.709178612 +0000 UTC m=+1691.119043487 I0520 17:59:41.736187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:02:17.293658 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-20 18:02:17.293541637 +0000 UTC m=+1846.703406492 I0520 18:02:17.293665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:02:17.293818 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-20 18:02:17.293809096 +0000 UTC m=+1846.703673971 I0520 18:02:17.311228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:02:17.311304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:02:17.311336 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-20 18:02:17.311324043 +0000 UTC m=+1846.721188948 I0520 18:02:17.483935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-zkwb4" condition "Approved" to 2026-05-20 18:02:17.483922968 +0000 UTC m=+1846.893787833 I0520 18:02:17.506488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-zkwb4" condition "Ready" to 2026-05-20 18:02:17.506477295 +0000 UTC m=+1846.916342160 I0520 18:02:17.540086 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:02:17.540067405 +0000 UTC m=+1846.949932310 I0520 18:02:17.562712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:02:18.883138 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-20 18:02:18.883123808 +0000 UTC m=+1848.292988683 I0520 18:02:18.883818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:02:18.883913 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-20 18:02:18.883901643 +0000 UTC m=+1848.293766538 I0520 18:02:18.898593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:02:18.898686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:02:18.898845 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-20 18:02:18.898835528 +0000 UTC m=+1848.308700433 I0520 18:02:19.081464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-fwkqs" condition "Approved" to 2026-05-20 18:02:19.081443501 +0000 UTC m=+1848.491308406 I0520 18:02:19.099089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-fwkqs" condition "Ready" to 2026-05-20 18:02:19.099079432 +0000 UTC m=+1848.508944297 I0520 18:02:19.138857 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:02:19.138837548 +0000 UTC m=+1848.548702443 I0520 18:02:19.161183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:02:19.161512 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:02:19.161504529 +0000 UTC m=+1848.571369405 I0520 18:02:19.183088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:05:26.157419 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:05:26.157511 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-20 18:05:26.157471451 +0000 UTC m=+2035.567336356 I0520 18:05:26.158355 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-20 18:05:26.158347509 +0000 UTC m=+2035.568212384 I0520 18:05:26.174224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:05:26.174315 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-20 18:05:26.174307657 +0000 UTC m=+2035.584172532 I0520 18:05:26.455528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:05:26.490702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9tq84" condition "Approved" to 2026-05-20 18:05:26.490686629 +0000 UTC m=+2035.900551494 I0520 18:05:26.510674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9tq84" condition "Ready" to 2026-05-20 18:05:26.510664005 +0000 UTC m=+2035.920528870 I0520 18:05:26.538329 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:05:26.538316815 +0000 UTC m=+2035.948181690 I0520 18:05:26.563088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:05:26.563496 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:05:26.563488747 +0000 UTC m=+2035.973353622 I0520 18:05:26.584263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:06:27.743723 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vmzx5-vnc" condition "Ready" to 2026-05-20 18:06:27.743675453 +0000 UTC m=+2097.153540348 I0520 18:06:27.744601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vmzx5-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:06:27.744653 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vmzx5-vnc" condition "Issuing" to 2026-05-20 18:06:27.744643354 +0000 UTC m=+2097.154508229 I0520 18:06:27.744766 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vmzx5-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:06:27.744801 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vmzx5-api" condition "Issuing" to 2026-05-20 18:06:27.744793199 +0000 UTC m=+2097.154658094 I0520 18:06:27.745130 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vmzx5-api" condition "Ready" to 2026-05-20 18:06:27.745123509 +0000 UTC m=+2097.154988384 I0520 18:06:27.759884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vmzx5-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vmzx5-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:06:27.759966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vmzx5-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:06:27.760002 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vmzx5-vnc" condition "Issuing" to 2026-05-20 18:06:27.759995163 +0000 UTC m=+2097.169860068 I0520 18:06:27.772288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vmzx5-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vmzx5-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:06:27.772378 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vmzx5-api" condition "Ready" to 2026-05-20 18:06:27.772369097 +0000 UTC m=+2097.182233992 I0520 18:06:28.020392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vmzx5-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vmzx5-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:06:28.079764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vmzx5-api-stx5f" condition "Approved" to 2026-05-20 18:06:28.079755373 +0000 UTC m=+2097.489620238 I0520 18:06:28.107794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vmzx5-api-stx5f" condition "Ready" to 2026-05-20 18:06:28.107777786 +0000 UTC m=+2097.517642681 I0520 18:06:28.163542 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vmzx5-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:06:28.163529621 +0000 UTC m=+2097.573394496 I0520 18:06:28.182052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vmzx5-vnc-vhnwm" condition "Approved" to 2026-05-20 18:06:28.18203979 +0000 UTC m=+2097.591904655 I0520 18:06:28.191353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vmzx5-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vmzx5-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:06:28.191816 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vmzx5-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:06:28.191807381 +0000 UTC m=+2097.601672256 I0520 18:06:28.199280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vmzx5-vnc-vhnwm" condition "Ready" to 2026-05-20 18:06:28.199270348 +0000 UTC m=+2097.609135223 I0520 18:06:28.214986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vmzx5-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vmzx5-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:06:28.215329 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vmzx5-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:06:28.21532144 +0000 UTC m=+2097.625186315 I0520 18:06:28.215336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vmzx5-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vmzx5-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:06:28.232515 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vmzx5-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:06:28.232506307 +0000 UTC m=+2097.642371182 I0520 18:06:28.257174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-vmzx5-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vmzx5-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:06:28.326841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vmzx5-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vmzx5-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:09.028763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:10:09.028815 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-20 18:10:09.02879712 +0000 UTC m=+2318.438662025 I0520 18:10:09.029114 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-20 18:10:09.02909633 +0000 UTC m=+2318.438961235 I0520 18:10:09.043901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:09.044005 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-20 18:10:09.043996584 +0000 UTC m=+2318.453861459 I0520 18:10:09.175657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:09.207194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-wnjxj" condition "Approved" to 2026-05-20 18:10:09.20717522 +0000 UTC m=+2318.617040125 I0520 18:10:09.225831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-wnjxj" condition "Ready" to 2026-05-20 18:10:09.225820394 +0000 UTC m=+2318.635685269 I0520 18:10:09.255973 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:10:09.255952783 +0000 UTC m=+2318.665817658 I0520 18:10:09.290912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:09.291251 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:10:09.291245077 +0000 UTC m=+2318.701109942 I0520 18:10:09.301493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:09.315525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:10.464076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:10:10.464106 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-20 18:10:10.464099134 +0000 UTC m=+2319.873964009 I0520 18:10:10.464461 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-20 18:10:10.464456295 +0000 UTC m=+2319.874321170 I0520 18:10:10.483689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:10.483806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:10:10.483835 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-20 18:10:10.483828052 +0000 UTC m=+2319.893692927 I0520 18:10:10.681486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:10.689662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-rd5p2" condition "Approved" to 2026-05-20 18:10:10.689646566 +0000 UTC m=+2320.099511441 I0520 18:10:10.713264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-rd5p2" condition "Ready" to 2026-05-20 18:10:10.713250257 +0000 UTC m=+2320.123115142 I0520 18:10:10.744703 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:10:10.744689678 +0000 UTC m=+2320.154554543 I0520 18:10:10.767176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:10:10.767668 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:10:10.76765893 +0000 UTC m=+2320.177523795 I0520 18:10:10.789351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:33.409764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:12:33.409828 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-20 18:12:33.409792924 +0000 UTC m=+2462.819657799 I0520 18:12:33.409833 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-20 18:12:33.409780984 +0000 UTC m=+2462.819645879 E0520 18:12:33.425419 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 18:12:33.425511 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-20 18:12:33.425501263 +0000 UTC m=+2462.835366138 I0520 18:12:33.425538 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 18:12:33.429477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:33.429652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:12:33.429697 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-20 18:12:33.429689887 +0000 UTC m=+2462.839554772 E0520 18:12:33.437192 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0520 18:12:33.437308 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 18:12:33.437351 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0520 18:12:33.437399 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0520 18:12:33.477168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:33.477802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-79l4c" condition "Approved" to 2026-05-20 18:12:33.477786387 +0000 UTC m=+2462.887651282 I0520 18:12:33.494247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-79l4c" condition "Ready" to 2026-05-20 18:12:33.49423581 +0000 UTC m=+2462.904100675 I0520 18:12:33.521672 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:12:33.521657682 +0000 UTC m=+2462.931522557 I0520 18:12:33.546370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:33.546619 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:12:33.546613116 +0000 UTC m=+2462.956477991 I0520 18:12:33.566708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:34.069305 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-20 18:12:34.0692823 +0000 UTC m=+2463.479147235 I0520 18:12:34.069490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:12:34.069531 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-20 18:12:34.069522967 +0000 UTC m=+2463.479387862 I0520 18:12:34.085747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:34.085851 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-20 18:12:34.085845167 +0000 UTC m=+2463.495710032 E0520 18:12:34.087404 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 18:12:34.087456 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-20 18:12:34.087444378 +0000 UTC m=+2463.497309253 I0520 18:12:34.087528 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0520 18:12:34.101078 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0520 18:12:34.101576 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 18:12:34.101622 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0520 18:12:34.101686 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0520 18:12:34.103866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:34.131758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-92jzr" condition "Approved" to 2026-05-20 18:12:34.131745287 +0000 UTC m=+2463.541610152 I0520 18:12:34.146424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-92jzr" condition "Ready" to 2026-05-20 18:12:34.146409203 +0000 UTC m=+2463.556274098 I0520 18:12:34.186435 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:12:34.186422246 +0000 UTC m=+2463.596287121 I0520 18:12:34.224496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:34.819683 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:12:34.819711 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-20 18:12:34.819705238 +0000 UTC m=+2464.229570103 I0520 18:12:34.819726 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-20 18:12:34.819704828 +0000 UTC m=+2464.229569723 I0520 18:12:34.839702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:34.839802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:12:34.839818 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-20 18:12:34.839810927 +0000 UTC m=+2464.249675792 I0520 18:12:34.889957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-f7cgg" condition "Approved" to 2026-05-20 18:12:34.889942582 +0000 UTC m=+2464.299807457 I0520 18:12:34.907815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-f7cgg" condition "Ready" to 2026-05-20 18:12:34.90780057 +0000 UTC m=+2464.317665445 I0520 18:12:38.438480 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:12:38.438467897 +0000 UTC m=+2467.848332802 I0520 18:12:38.472135 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-f7cgg" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:12:38.472116417 +0000 UTC m=+2467.881981322 I0520 18:12:38.512151 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:12:38.5121334 +0000 UTC m=+2467.921998295 I0520 18:12:38.531683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:12:39.103558 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:12:39.10354269 +0000 UTC m=+2468.513407555 I0520 18:14:56.352676 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-20 18:14:56.352628902 +0000 UTC m=+2605.762493797 I0520 18:14:56.353431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:14:56.353474 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-20 18:14:56.353466198 +0000 UTC m=+2605.763331103 I0520 18:14:56.369515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:14:56.369595 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-20 18:14:56.369587041 +0000 UTC m=+2605.779451916 I0520 18:14:56.545570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:14:56.576684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-qflhv" condition "Approved" to 2026-05-20 18:14:56.576672078 +0000 UTC m=+2605.986536973 I0520 18:14:56.611440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-qflhv" condition "Ready" to 2026-05-20 18:14:56.611429894 +0000 UTC m=+2606.021294769 I0520 18:14:56.651108 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:14:56.651092665 +0000 UTC m=+2606.060957530 I0520 18:14:56.674607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:14:56.675025 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:14:56.675017516 +0000 UTC m=+2606.084882381 I0520 18:14:56.696559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:14:56.696877 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:14:56.696870981 +0000 UTC m=+2606.106735846 I0520 18:15:42.688961 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-20 18:15:42.688948105 +0000 UTC m=+2652.098812970 I0520 18:15:42.710201 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:15:42.710267 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-20 18:15:42.710260723 +0000 UTC m=+2652.120125588 I0520 18:15:42.710279 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-20 18:15:42.710262363 +0000 UTC m=+2652.120127288 I0520 18:15:42.724528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:42.724591 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-20 18:15:42.724583489 +0000 UTC m=+2652.134448364 E0520 18:15:42.752787 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0520 18:15:42.807735 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-20 18:15:42.807716274 +0000 UTC m=+2652.217581179 I0520 18:15:42.829472 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:15:42.829466 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-20 18:15:42.829451395 +0000 UTC m=+2652.239316300 I0520 18:15:42.829529 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-20 18:15:42.829515597 +0000 UTC m=+2652.239380502 I0520 18:15:42.849520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:42.849776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:15:42.849811 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-20 18:15:42.849803132 +0000 UTC m=+2652.259668007 I0520 18:15:43.326761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2b9sj" condition "Approved" to 2026-05-20 18:15:43.326748145 +0000 UTC m=+2652.736613020 I0520 18:15:43.361207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2b9sj" condition "Ready" to 2026-05-20 18:15:43.361191621 +0000 UTC m=+2652.771056496 E0520 18:15:43.363487 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0520 18:15:43.399105 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:15:43.399091767 +0000 UTC m=+2652.808956642 I0520 18:15:43.428408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:43.428855 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:15:43.428843963 +0000 UTC m=+2652.838708868 I0520 18:15:43.450061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:43.635794 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-20 18:15:43.635775567 +0000 UTC m=+2653.045640442 I0520 18:15:43.657752 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-20 18:15:43.657738955 +0000 UTC m=+2653.067603830 I0520 18:15:43.657914 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:15:43.657996 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-20 18:15:43.657986303 +0000 UTC m=+2653.067851208 I0520 18:15:43.678362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:43.678426 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-20 18:15:43.678419233 +0000 UTC m=+2653.088284108 I0520 18:15:44.082944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.114832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-7zczl" condition "Approved" to 2026-05-20 18:15:44.114821307 +0000 UTC m=+2653.524686182 I0520 18:15:44.118155 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-20 18:15:44.118146922 +0000 UTC m=+2653.528011797 I0520 18:15:44.134397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-7zczl" condition "Ready" to 2026-05-20 18:15:44.134383179 +0000 UTC m=+2653.544248074 I0520 18:15:44.139186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:15:44.139220 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-20 18:15:44.139212942 +0000 UTC m=+2653.549077827 I0520 18:15:44.139574 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-20 18:15:44.139555313 +0000 UTC m=+2653.549420198 I0520 18:15:44.161934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.162019 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-20 18:15:44.162009008 +0000 UTC m=+2653.571873903 I0520 18:15:44.177930 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:15:44.177911804 +0000 UTC m=+2653.587776709 I0520 18:15:44.198959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.199212 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:15:44.199207501 +0000 UTC m=+2653.609072366 I0520 18:15:44.210047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.230708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.418101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.462029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-j5fwz" condition "Approved" to 2026-05-20 18:15:44.461998971 +0000 UTC m=+2653.871863846 I0520 18:15:44.488017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-j5fwz" condition "Ready" to 2026-05-20 18:15:44.488005799 +0000 UTC m=+2653.897870674 I0520 18:15:44.545403 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:15:44.545390634 +0000 UTC m=+2653.955255499 I0520 18:15:44.597244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.597660 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:15:44.597649806 +0000 UTC m=+2654.007514711 I0520 18:15:44.626571 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-20 18:15:44.626557656 +0000 UTC m=+2654.036422521 I0520 18:15:44.649392 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-20 18:15:44.649377752 +0000 UTC m=+2654.059242637 I0520 18:15:44.649531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:15:44.649666 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-20 18:15:44.649660151 +0000 UTC m=+2654.059525016 I0520 18:15:44.850818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.942036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:44.942123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:15:44.942155 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-20 18:15:44.942148666 +0000 UTC m=+2654.352013541 I0520 18:15:45.531207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:45.543154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hqvmq" condition "Approved" to 2026-05-20 18:15:45.543141415 +0000 UTC m=+2654.953006300 I0520 18:15:45.564733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hqvmq" condition "Ready" to 2026-05-20 18:15:45.564717411 +0000 UTC m=+2654.974582286 I0520 18:15:45.953010 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:15:45.952998273 +0000 UTC m=+2655.362863138 I0520 18:15:46.042211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:15:46.042558 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:15:46.042550142 +0000 UTC m=+2655.452415017 I0520 18:15:46.241384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:19:11.001935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:19:11.002023 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-20 18:19:11.001980317 +0000 UTC m=+2860.411845202 I0520 18:19:11.002463 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-20 18:19:11.002457732 +0000 UTC m=+2860.412322607 I0520 18:19:11.693139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:19:11.693240 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-20 18:19:11.693232928 +0000 UTC m=+2861.103097793 I0520 18:19:12.292461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:19:12.663573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-dn8jq" condition "Approved" to 2026-05-20 18:19:12.663532436 +0000 UTC m=+2862.073397311 I0520 18:19:12.857061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-dn8jq" condition "Ready" to 2026-05-20 18:19:12.857042222 +0000 UTC m=+2862.266907097 I0520 18:19:13.541956 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:19:13.541937809 +0000 UTC m=+2862.951802694 I0520 18:19:13.674605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:19:14.519616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:19:14.697456 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-20 18:19:14.69744222 +0000 UTC m=+2864.107307085 I0520 18:19:14.697961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:19:14.698003 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-20 18:19:14.697999138 +0000 UTC m=+2864.107864003 I0520 18:19:14.787236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:19:14.787325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 18:19:14.787342 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-20 18:19:14.78733611 +0000 UTC m=+2864.197200975 I0520 18:19:15.586083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-9q57l" condition "Approved" to 2026-05-20 18:19:15.58607522 +0000 UTC m=+2864.995940075 I0520 18:19:15.707487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-9q57l" condition "Ready" to 2026-05-20 18:19:15.707474332 +0000 UTC m=+2865.117339227 I0520 18:19:15.930463 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:19:15.930444865 +0000 UTC m=+2865.340309760 I0520 18:19:16.265094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 18:19:16.266102 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 18:19:16.266090343 +0000 UTC m=+2865.675955238 I0520 18:19:16.649855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0520 18:19:52.694225 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0520 18:20:18.791281 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0520 18:20:18.791333 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0520 18:20:24.917508 1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again I0520 18:20:24.918394 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0520 18:20:24.919333 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0520 18:20:24.919478 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0520 18:20:24.919513 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0520 18:20:24.919530 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0520 18:20:24.919548 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0520 18:20:24.919741 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0520 18:20:24.919772 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0520 18:20:24.919793 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0520 18:20:24.919818 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0520 18:20:24.919836 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0520 18:20:24.919858 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0520 18:20:24.919936 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0520 18:20:24.919962 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0520 18:20:24.919980 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0520 18:20:24.920029 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0520 18:20:24.920047 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0520 18:20:24.918151 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" E0520 18:20:24.920697 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"