I0427 02:44:59.858622 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 02:44:59.858780 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 02:44:59.858875 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 02:44:59.864693 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 02:44:59.865215 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 02:44:59.865324 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 02:44:59.865325 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 02:44:59.867982 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 02:44:59.884407 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 02:44:59.888225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 02:44:59.890899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 02:44:59.894244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 02:44:59.898179 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 02:44:59.898283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 02:44:59.902373 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 02:44:59.904971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 02:44:59.907464 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 02:44:59.910281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 02:44:59.913099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 02:44:59.915694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 02:44:59.920868 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 02:44:59.920926 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 02:44:59.920951 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 02:44:59.920971 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 02:44:59.921179 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 02:44:59.926467 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 02:44:59.926610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 02:44:59.928329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 02:44:59.930414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 02:44:59.932213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 02:44:59.934034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 02:44:59.935859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 02:44:59.938090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 02:44:59.941654 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:44:59.942169 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:44:59.942258 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:44:59.942508 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:44:59.942823 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:44:59.943207 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:44:59.943853 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:44:59.944611 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:44:59.944916 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:45:00.058545 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:45:17.109486 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 02:45:17.10946804 +0000 UTC m=+17.287473181 I0427 02:45:17.980805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:45:17.980865 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 02:45:17.980858378 +0000 UTC m=+18.158863499 I0427 02:45:17.980874 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 02:45:17.980855748 +0000 UTC m=+18.158860899 E0427 02:45:17.996499 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 02:45:17.996567 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 02:45:17.996559973 +0000 UTC m=+18.174565094 E0427 02:45:17.996589 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 02:45:17.997331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:17.997384 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 02:45:17.997378888 +0000 UTC m=+18.175384009 E0427 02:45:18.012301 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 02:45:18.012417 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 02:45:18.012450 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 02:45:18.012493 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 02:45:18.014901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:18.037679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dg4gs" condition "Approved" to 2026-04-27 02:45:18.037669324 +0000 UTC m=+18.215674445 I0427 02:45:18.047827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dg4gs" condition "Ready" to 2026-04-27 02:45:18.047820014 +0000 UTC m=+18.225825135 I0427 02:45:18.069595 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:18.069586911 +0000 UTC m=+18.247592032 I0427 02:45:18.092754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:18.093043 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:18.093035207 +0000 UTC m=+18.271040348 I0427 02:45:18.111001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:23.012785 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:23.012768714 +0000 UTC m=+23.190773835 I0427 02:45:24.438546 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 02:45:24.438533591 +0000 UTC m=+24.616538712 I0427 02:45:24.438968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:45:24.438985 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 02:45:24.438980824 +0000 UTC m=+24.616985945 I0427 02:45:24.460455 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 02:45:24.460444121 +0000 UTC m=+24.638449222 I0427 02:45:24.463185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:24.463600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:45:24.463625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 02:45:24.463619255 +0000 UTC m=+24.641624376 I0427 02:45:24.889408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:24.903617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8hjvr" condition "Approved" to 2026-04-27 02:45:24.903604261 +0000 UTC m=+25.081609382 I0427 02:45:24.943383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8hjvr" condition "Ready" to 2026-04-27 02:45:24.943367641 +0000 UTC m=+25.121372762 I0427 02:45:24.984449 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:24.98443918 +0000 UTC m=+25.162444301 I0427 02:45:25.012356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:25.018499 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:25.01847568 +0000 UTC m=+25.196480831 I0427 02:45:25.021148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:25.051318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:25.051610 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:25.051603003 +0000 UTC m=+25.229608114 I0427 02:45:29.687871 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-27 02:45:29.687843938 +0000 UTC m=+29.865849059 I0427 02:45:29.689560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:45:29.689661 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-27 02:45:29.689642351 +0000 UTC m=+29.867647472 I0427 02:45:29.725067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:29.725156 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-27 02:45:29.725144485 +0000 UTC m=+29.903149626 I0427 02:45:29.744716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:29.768336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-9kzjm" condition "Approved" to 2026-04-27 02:45:29.768326116 +0000 UTC m=+29.946331237 I0427 02:45:29.797027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-9kzjm" condition "Ready" to 2026-04-27 02:45:29.797006367 +0000 UTC m=+29.975011518 I0427 02:45:29.821552 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:29.821536495 +0000 UTC m=+29.999541616 I0427 02:45:29.841315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:29.841623 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:29.841610751 +0000 UTC m=+30.019615892 I0427 02:45:29.850854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:29.861636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:30.425010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:45:30.425046 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-27 02:45:30.425037703 +0000 UTC m=+30.603042824 I0427 02:45:30.425398 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-27 02:45:30.425375663 +0000 UTC m=+30.603380784 I0427 02:45:30.446053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:30.446160 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-27 02:45:30.44615237 +0000 UTC m=+30.624157481 I0427 02:45:30.464387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:30.500340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-jzmhp" condition "Approved" to 2026-04-27 02:45:30.500325148 +0000 UTC m=+30.678330269 I0427 02:45:30.548227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-jzmhp" condition "Ready" to 2026-04-27 02:45:30.548210778 +0000 UTC m=+30.726215929 I0427 02:45:30.573756 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:30.573729406 +0000 UTC m=+30.751734547 I0427 02:45:30.710270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:30.710882 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:30.710869505 +0000 UTC m=+30.888874626 I0427 02:45:30.713874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:30.726481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:30.726742 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:45:30.726734716 +0000 UTC m=+30.904739837 I0427 02:45:30.727730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:45:31.272112 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-27 02:45:31.272092088 +0000 UTC m=+31.450097229 I0427 02:45:32.062530 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-27 02:45:32.062514413 +0000 UTC m=+32.240519554 I0427 02:48:46.428564 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-27 02:48:46.42854611 +0000 UTC m=+226.606551231 I0427 02:48:46.430096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:48:46.430136 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-27 02:48:46.430131172 +0000 UTC m=+226.608136293 E0427 02:48:46.446463 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:48:46.446825 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-27 02:48:46.446813652 +0000 UTC m=+226.624818783 I0427 02:48:46.446870 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:48:46.448955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:48:46.449120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:48:46.449231 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-27 02:48:46.449222636 +0000 UTC m=+226.627227767 E0427 02:48:46.458519 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0427 02:48:46.458630 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:48:46.458661 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 02:48:46.458701 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0427 02:48:46.465436 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-27 02:48:46.465427814 +0000 UTC m=+226.643432935 I0427 02:48:46.465534 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:48:46.465574 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-27 02:48:46.465565917 +0000 UTC m=+226.643571048 I0427 02:48:46.487618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:48:46.487730 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-27 02:48:46.487719872 +0000 UTC m=+226.665725023 I0427 02:48:46.557365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g76jl" condition "Approved" to 2026-04-27 02:48:46.557351429 +0000 UTC m=+226.735356550 I0427 02:48:46.582791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g76jl" condition "Ready" to 2026-04-27 02:48:46.582775909 +0000 UTC m=+226.760781030 I0427 02:48:46.611240 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:48:46.61122869 +0000 UTC m=+226.789233801 I0427 02:48:46.634649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:48:46.635189 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:48:46.635178892 +0000 UTC m=+226.813184043 I0427 02:48:46.651489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:48:46.666041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:48:46.769458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:48:46.806055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-fpvk7" condition "Approved" to 2026-04-27 02:48:46.80604386 +0000 UTC m=+226.984048971 I0427 02:48:46.822909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-fpvk7" condition "Ready" to 2026-04-27 02:48:46.822838123 +0000 UTC m=+227.000843274 I0427 02:48:51.460097 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:48:51.460070393 +0000 UTC m=+231.638075544 I0427 02:48:51.870551 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-fpvk7" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:48:51.870526491 +0000 UTC m=+232.048544002 I0427 02:48:52.902661 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:48:52.90263832 +0000 UTC m=+233.080643461 I0427 02:48:53.053440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:48:53.054055 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:48:53.054042765 +0000 UTC m=+233.232047906 I0427 02:48:53.530466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:48:53.534435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:53:28.615536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:53:28.615615 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-04-27 02:53:28.615604849 +0000 UTC m=+508.793610000 I0427 02:53:28.615822 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready" to 2026-04-27 02:53:28.615810214 +0000 UTC m=+508.793815325 I0427 02:53:28.632112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:53:28.632177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-4.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:53:28.632191 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Issuing" to 2026-04-27 02:53:28.632185172 +0000 UTC m=+508.810190293 I0427 02:53:28.804568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:53:28.812445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-6pvx9" condition "Approved" to 2026-04-27 02:53:28.812433186 +0000 UTC m=+508.990438307 I0427 02:53:28.830010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-4.nip.io-tls-6pvx9" condition "Ready" to 2026-04-27 02:53:28.829995286 +0000 UTC m=+509.008000437 I0427 02:53:28.854822 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:53:28.854809964 +0000 UTC m=+509.032815085 I0427 02:53:28.879239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:53:28.879680 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:53:28.879671603 +0000 UTC m=+509.057676724 I0427 02:53:28.895801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-4.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-4.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:53:28.896200 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-4.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:53:28.896190404 +0000 UTC m=+509.074195535 I0427 02:55:39.604224 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 02:55:39.604209078 +0000 UTC m=+639.782214199 I0427 02:55:39.604391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:55:39.605164 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 02:55:39.605145694 +0000 UTC m=+639.783150835 I0427 02:55:39.621369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:55:39.621473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:55:39.621503 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 02:55:39.621494562 +0000 UTC m=+639.799499713 I0427 02:55:39.823276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8gwpf" condition "Approved" to 2026-04-27 02:55:39.823264648 +0000 UTC m=+640.001269769 I0427 02:55:39.840751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8gwpf" condition "Ready" to 2026-04-27 02:55:39.840734788 +0000 UTC m=+640.018739929 I0427 02:55:39.866311 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:55:39.866292289 +0000 UTC m=+640.044297430 I0427 02:55:39.885497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:55:39.885930 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:55:39.885919967 +0000 UTC m=+640.063925118 I0427 02:55:39.894892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:55:39.906297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:23.339155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:56:23.339228 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 02:56:23.339206328 +0000 UTC m=+683.517211489 I0427 02:56:23.339262 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 02:56:23.33924897 +0000 UTC m=+683.517254091 I0427 02:56:23.358143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:23.358221 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 02:56:23.358214722 +0000 UTC m=+683.536219823 I0427 02:56:23.575342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:23.620710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7nsd8" condition "Approved" to 2026-04-27 02:56:23.620673282 +0000 UTC m=+683.798678403 I0427 02:56:23.644361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7nsd8" condition "Ready" to 2026-04-27 02:56:23.644344494 +0000 UTC m=+683.822349635 I0427 02:56:23.677339 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:56:23.677321002 +0000 UTC m=+683.855326123 I0427 02:56:23.700163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:23.701153 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:56:23.701140578 +0000 UTC m=+683.879145699 I0427 02:56:23.722998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:23.724410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:51.729148 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-27 02:56:51.729134019 +0000 UTC m=+711.907139140 I0427 02:56:51.729660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:56:51.729700 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-27 02:56:51.729695644 +0000 UTC m=+711.907700765 I0427 02:56:51.747583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:51.747648 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-27 02:56:51.747642938 +0000 UTC m=+711.925648059 I0427 02:56:51.902242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:51.939660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gcjx4" condition "Approved" to 2026-04-27 02:56:51.939634037 +0000 UTC m=+712.117639188 I0427 02:56:51.957067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gcjx4" condition "Ready" to 2026-04-27 02:56:51.957051737 +0000 UTC m=+712.135056858 I0427 02:56:51.992266 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:56:51.992247856 +0000 UTC m=+712.170252987 I0427 02:56:52.013005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:52.013647 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:56:52.013635866 +0000 UTC m=+712.191641017 I0427 02:56:52.044143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:56.009760 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 02:56:56.009729195 +0000 UTC m=+716.187734896 I0427 02:56:56.009775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:56:56.009998 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 02:56:56.009982482 +0000 UTC m=+716.187987593 E0427 02:56:56.022337 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 02:56:56.022383 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 02:56:56.022371134 +0000 UTC m=+716.200376255 E0427 02:56:56.022430 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 02:56:56.024348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:56.024438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:56:56.024460 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 02:56:56.024453341 +0000 UTC m=+716.202458452 E0427 02:56:56.033256 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 02:56:56.033336 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 02:56:56.033357 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 02:56:56.033384 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 02:56:56.060179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q8jtz" condition "Approved" to 2026-04-27 02:56:56.060163816 +0000 UTC m=+716.238168937 I0427 02:56:56.070299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q8jtz" condition "Ready" to 2026-04-27 02:56:56.070290985 +0000 UTC m=+716.248296106 I0427 02:56:56.091588 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:56:56.091572462 +0000 UTC m=+716.269577583 I0427 02:56:56.111821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:56.112127 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:56:56.112116728 +0000 UTC m=+716.290121849 I0427 02:56:56.133042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:01.035177 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:01.035166972 +0000 UTC m=+721.213172103 I0427 02:57:38.852558 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-27 02:57:38.8525406 +0000 UTC m=+759.030545721 I0427 02:57:38.853561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:57:38.853583 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-27 02:57:38.853578959 +0000 UTC m=+759.031584080 I0427 02:57:38.900720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:38.900851 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-27 02:57:38.900841872 +0000 UTC m=+759.078846973 I0427 02:57:39.257342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:39.289721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mps7c" condition "Approved" to 2026-04-27 02:57:39.289705755 +0000 UTC m=+759.467710876 I0427 02:57:39.350628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mps7c" condition "Ready" to 2026-04-27 02:57:39.350618554 +0000 UTC m=+759.528623655 I0427 02:57:39.400149 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:39.400125049 +0000 UTC m=+759.578130190 I0427 02:57:39.430473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:39.430756 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:39.430750443 +0000 UTC m=+759.608755554 I0427 02:57:39.454583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:43.968833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:57:43.968858 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 02:57:43.968852923 +0000 UTC m=+764.146858034 I0427 02:57:43.969072 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:57:43.969086 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 02:57:43.969083779 +0000 UTC m=+764.147088890 I0427 02:57:43.969545 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 02:57:43.969529032 +0000 UTC m=+764.147534143 I0427 02:57:43.973630 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 02:57:43.973617544 +0000 UTC m=+764.151622685 I0427 02:57:43.978354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:57:43.978416 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 02:57:43.978388956 +0000 UTC m=+764.156394067 I0427 02:57:43.979022 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 02:57:43.979016443 +0000 UTC m=+764.157021554 I0427 02:57:44.026455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:44.026532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:57:44.026575 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 02:57:44.026567244 +0000 UTC m=+764.204572355 I0427 02:57:44.026608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:44.026708 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 02:57:44.026688108 +0000 UTC m=+764.204693219 I0427 02:57:44.046381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:44.046694 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 02:57:44.046631638 +0000 UTC m=+764.224636759 I0427 02:57:44.216202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:44.217665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:44.269909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pnvms" condition "Approved" to 2026-04-27 02:57:44.269881673 +0000 UTC m=+764.447886794 I0427 02:57:44.281950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9fsw6" condition "Approved" to 2026-04-27 02:57:44.281941106 +0000 UTC m=+764.459946227 I0427 02:57:44.389104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9fsw6" condition "Ready" to 2026-04-27 02:57:44.3890879 +0000 UTC m=+764.567093021 I0427 02:57:44.393206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pnvms" condition "Ready" to 2026-04-27 02:57:44.393192664 +0000 UTC m=+764.571197795 I0427 02:57:44.411901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:44.417017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pts2k" condition "Approved" to 2026-04-27 02:57:44.41700454 +0000 UTC m=+764.595009651 I0427 02:57:44.444795 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:44.444786396 +0000 UTC m=+764.622791507 I0427 02:57:44.445608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pts2k" condition "Ready" to 2026-04-27 02:57:44.445585178 +0000 UTC m=+764.623590289 I0427 02:57:44.498483 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:44.498470256 +0000 UTC m=+764.676475367 I0427 02:57:44.614600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:44.617652 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:44.617641402 +0000 UTC m=+764.795646513 I0427 02:57:44.809571 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" condition "Ready" to 2026-04-27 02:57:44.809549354 +0000 UTC m=+764.987554465 I0427 02:57:44.809787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:57:44.809810 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" condition "Issuing" to 2026-04-27 02:57:44.809807291 +0000 UTC m=+764.987812402 I0427 02:57:44.848212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:44.848616 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:44.848608341 +0000 UTC m=+765.026613462 I0427 02:57:45.063070 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:45.063056553 +0000 UTC m=+765.241061664 I0427 02:57:45.203793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-78s9b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:45.203871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:57:45.203887 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" condition "Issuing" to 2026-04-27 02:57:45.203882546 +0000 UTC m=+765.381887657 I0427 02:57:45.351512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:45.501768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:45.601551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:46.205678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:46.265017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-78s9b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:46.300890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-78s9b-q5lgv" condition "Approved" to 2026-04-27 02:57:46.300881924 +0000 UTC m=+766.478887035 I0427 02:57:46.462861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-78s9b-q5lgv" condition "Ready" to 2026-04-27 02:57:46.46285372 +0000 UTC m=+766.640858821 I0427 02:57:46.957138 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:46.957120858 +0000 UTC m=+767.135125979 I0427 02:57:47.050511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-78s9b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:47.347572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78s9b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-78s9b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:53.847795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:57:53.847823 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 02:57:53.847816715 +0000 UTC m=+774.025821816 I0427 02:57:53.848198 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 02:57:53.848193066 +0000 UTC m=+774.026198177 I0427 02:57:53.868831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:53.868910 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 02:57:53.868903067 +0000 UTC m=+774.046908188 I0427 02:57:54.133044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:57:54.171395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-spsm5" condition "Approved" to 2026-04-27 02:57:54.171379297 +0000 UTC m=+774.349384418 I0427 02:57:54.195509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-spsm5" condition "Ready" to 2026-04-27 02:57:54.195497202 +0000 UTC m=+774.373502313 I0427 02:57:54.236248 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:57:54.236236796 +0000 UTC m=+774.414241907 I0427 02:57:54.260048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:58:29.573958 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-27 02:58:29.573942423 +0000 UTC m=+809.751947534 I0427 02:58:29.574241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:58:29.574260 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-27 02:58:29.574257122 +0000 UTC m=+809.752262233 I0427 02:58:29.589756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:58:29.589832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:58:29.589859 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-27 02:58:29.589851292 +0000 UTC m=+809.767856413 I0427 02:58:29.810371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qsl5q" condition "Approved" to 2026-04-27 02:58:29.81033745 +0000 UTC m=+809.988342571 I0427 02:58:29.826989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qsl5q" condition "Ready" to 2026-04-27 02:58:29.826977619 +0000 UTC m=+810.004982740 I0427 02:58:29.856319 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:58:29.856300619 +0000 UTC m=+810.034305740 I0427 02:58:29.883490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:58:29.883953 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:58:29.883945412 +0000 UTC m=+810.061950523 I0427 02:58:29.886694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:58:29.899412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:58:29.899746 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:58:29.899737148 +0000 UTC m=+810.077742269 I0427 02:58:53.046863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:58:53.046920 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-27 02:58:53.046911733 +0000 UTC m=+833.224916854 I0427 02:58:53.046878 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-27 02:58:53.046862402 +0000 UTC m=+833.224867523 I0427 02:58:53.063373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:58:53.063482 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-27 02:58:53.06347001 +0000 UTC m=+833.241475161 I0427 02:58:53.168393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:58:53.199901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w9vp6" condition "Approved" to 2026-04-27 02:58:53.199889627 +0000 UTC m=+833.377894748 I0427 02:58:53.225398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w9vp6" condition "Ready" to 2026-04-27 02:58:53.225384421 +0000 UTC m=+833.403389542 I0427 02:58:53.263590 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:58:53.263576335 +0000 UTC m=+833.441581456 I0427 02:58:53.305703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:42.461662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:42.461704 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-27 02:59:42.461690974 +0000 UTC m=+882.639696085 I0427 02:59:42.462199 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-27 02:59:42.462195408 +0000 UTC m=+882.640200509 I0427 02:59:42.491472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:42.491555 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-27 02:59:42.491548588 +0000 UTC m=+882.669553689 I0427 02:59:44.650663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:44.702783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-4thm6" condition "Approved" to 2026-04-27 02:59:44.702766117 +0000 UTC m=+884.880771238 I0427 02:59:44.726053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-4thm6" condition "Ready" to 2026-04-27 02:59:44.726042319 +0000 UTC m=+884.904047440 I0427 02:59:44.768331 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:44.768318335 +0000 UTC m=+884.946323446 I0427 02:59:44.790478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:44.856963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:50.313840 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-27 02:59:50.313825634 +0000 UTC m=+890.491830755 I0427 02:59:50.335622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:50.335652 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-27 02:59:50.335646146 +0000 UTC m=+890.513651267 I0427 02:59:50.335653 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-27 02:59:50.335639716 +0000 UTC m=+890.513644867 I0427 02:59:50.353106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:50.353170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:50.353187 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-27 02:59:50.35318134 +0000 UTC m=+890.531186471 E0427 02:59:50.379166 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0427 02:59:50.438334 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-27 02:59:50.438310099 +0000 UTC m=+890.616315260 I0427 02:59:50.471700 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-27 02:59:50.4716828 +0000 UTC m=+890.649687931 I0427 02:59:50.473067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:50.473154 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-27 02:59:50.47314249 +0000 UTC m=+890.651147631 I0427 02:59:50.500290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:50.500362 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:50.500377 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-27 02:59:50.500372702 +0000 UTC m=+890.678377813 E0427 02:59:50.656308 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0427 02:59:51.036976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-b6bpk" condition "Approved" to 2026-04-27 02:59:51.036961539 +0000 UTC m=+891.214966650 I0427 02:59:51.059058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-b6bpk" condition "Ready" to 2026-04-27 02:59:51.059046699 +0000 UTC m=+891.237051820 I0427 02:59:51.095287 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:51.095272228 +0000 UTC m=+891.273277349 I0427 02:59:51.123266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:51.185136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:51.258757 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-27 02:59:51.258742209 +0000 UTC m=+891.436747320 I0427 02:59:51.284418 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-27 02:59:51.284402987 +0000 UTC m=+891.462408108 I0427 02:59:51.284700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:51.284751 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-27 02:59:51.284742487 +0000 UTC m=+891.462747608 I0427 02:59:51.302414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:51.302481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:51.302516 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-27 02:59:51.302490717 +0000 UTC m=+891.480495818 I0427 02:59:51.767371 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-27 02:59:51.767350615 +0000 UTC m=+891.945355756 I0427 02:59:51.783452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:51.787336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-297bk" condition "Approved" to 2026-04-27 02:59:51.787326756 +0000 UTC m=+891.965331867 I0427 02:59:51.788385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:51.788409 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-27 02:59:51.788402186 +0000 UTC m=+891.966407297 I0427 02:59:51.788772 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-27 02:59:51.788768136 +0000 UTC m=+891.966773247 I0427 02:59:51.813614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-297bk" condition "Ready" to 2026-04-27 02:59:51.813602031 +0000 UTC m=+891.991607162 I0427 02:59:51.815074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:51.815126 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-27 02:59:51.815117553 +0000 UTC m=+891.993122674 I0427 02:59:51.854383 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:51.854367906 +0000 UTC m=+892.032373027 I0427 02:59:51.873132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:51.873887 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:51.873872204 +0000 UTC m=+892.051877315 I0427 02:59:51.899878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:52.331632 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-27 02:59:52.331618036 +0000 UTC m=+892.509623147 I0427 02:59:52.362931 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-27 02:59:52.36291756 +0000 UTC m=+892.540922661 I0427 02:59:52.363043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:52.363068 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-27 02:59:52.363063374 +0000 UTC m=+892.541068505 I0427 02:59:52.386706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:52.386770 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-27 02:59:52.386764868 +0000 UTC m=+892.564769969 I0427 02:59:52.482432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:52.539633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rzz2b" condition "Approved" to 2026-04-27 02:59:52.539621916 +0000 UTC m=+892.717627037 I0427 02:59:52.582261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rzz2b" condition "Ready" to 2026-04-27 02:59:52.582248162 +0000 UTC m=+892.760253283 I0427 02:59:52.622310 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:52.622299977 +0000 UTC m=+892.800305078 I0427 02:59:52.650120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:52.650407 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:52.650402683 +0000 UTC m=+892.828407794 I0427 02:59:52.678105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:52.678489 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:52.678481038 +0000 UTC m=+892.856486159 I0427 02:59:52.703932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:53.160836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:53.195376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-jvrlp" condition "Approved" to 2026-04-27 02:59:53.195356761 +0000 UTC m=+893.373361902 I0427 02:59:53.268415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-jvrlp" condition "Ready" to 2026-04-27 02:59:53.268400087 +0000 UTC m=+893.446405228 I0427 02:59:53.610349 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:53.610337852 +0000 UTC m=+893.788342963 I0427 02:59:53.713440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:07.462499 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-27 03:00:07.462467253 +0000 UTC m=+907.640472374 I0427 03:00:07.462530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:00:07.462570 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-27 03:00:07.462561726 +0000 UTC m=+907.640566847 I0427 03:00:07.479172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:07.479958 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-27 03:00:07.479949536 +0000 UTC m=+907.657954657 I0427 03:00:07.608929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:07.647126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-gjlq7" condition "Approved" to 2026-04-27 03:00:07.647110709 +0000 UTC m=+907.825115820 I0427 03:00:07.672525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-gjlq7" condition "Ready" to 2026-04-27 03:00:07.672504649 +0000 UTC m=+907.850509770 I0427 03:00:07.707114 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:07.707099684 +0000 UTC m=+907.885104805 I0427 03:00:07.728843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:07.793940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:08.899279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:00:08.899317 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-27 03:00:08.899309213 +0000 UTC m=+909.077314334 I0427 03:00:08.899340 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-27 03:00:08.899321894 +0000 UTC m=+909.077327025 I0427 03:00:08.913690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:08.913852 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-27 03:00:08.913773074 +0000 UTC m=+909.091778195 I0427 03:00:09.169830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:09.200080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-zw7wc" condition "Approved" to 2026-04-27 03:00:09.20006967 +0000 UTC m=+909.378074791 I0427 03:00:09.222703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-zw7wc" condition "Ready" to 2026-04-27 03:00:09.222689296 +0000 UTC m=+909.400694417 I0427 03:00:09.253608 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:09.253592582 +0000 UTC m=+909.431597693 I0427 03:00:09.269229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:09.269642 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:09.269632985 +0000 UTC m=+909.447638136 I0427 03:00:09.295170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:19.844451 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-27 03:01:19.844433625 +0000 UTC m=+980.022438746 I0427 03:01:19.845320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:19.845354 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-27 03:01:19.84534757 +0000 UTC m=+980.023352691 I0427 03:01:19.872879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:19.872948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:19.872965 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-27 03:01:19.872957506 +0000 UTC m=+980.050962617 I0427 03:01:20.030223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-x5xlk" condition "Approved" to 2026-04-27 03:01:20.030173803 +0000 UTC m=+980.208178944 I0427 03:01:20.049902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-x5xlk" condition "Ready" to 2026-04-27 03:01:20.049890803 +0000 UTC m=+980.227895934 I0427 03:01:20.085102 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:20.085085737 +0000 UTC m=+980.263090868 I0427 03:01:20.107887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:20.108172 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:20.10816516 +0000 UTC m=+980.286170261 I0427 03:01:20.117496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:20.126886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:20.128021 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:20.128014033 +0000 UTC m=+980.306019144 I0427 03:01:20.131304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:24.150735 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-27 03:02:24.150715325 +0000 UTC m=+1044.328720476 I0427 03:02:24.151038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:02:24.151114 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-27 03:02:24.151103545 +0000 UTC m=+1044.329108666 I0427 03:02:24.168556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:24.168714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:02:24.168752 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-27 03:02:24.168741258 +0000 UTC m=+1044.346746399 I0427 03:02:24.447403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-wnxqs" condition "Approved" to 2026-04-27 03:02:24.447391132 +0000 UTC m=+1044.625396253 I0427 03:02:24.469468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-wnxqs" condition "Ready" to 2026-04-27 03:02:24.469455106 +0000 UTC m=+1044.647460227 I0427 03:02:24.496517 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:02:24.496503008 +0000 UTC m=+1044.674508129 I0427 03:02:24.521867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:24.522238 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:02:24.522231482 +0000 UTC m=+1044.700236603 I0427 03:02:24.547613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:24.547950 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:02:24.547941537 +0000 UTC m=+1044.725946658 I0427 03:02:25.588052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:02:25.588054 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-27 03:02:25.58802652 +0000 UTC m=+1045.766031671 I0427 03:02:25.588096 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-27 03:02:25.588088042 +0000 UTC m=+1045.766093153 I0427 03:02:25.604656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:25.604846 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-27 03:02:25.604836 +0000 UTC m=+1045.782841121 I0427 03:02:25.994982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:26.033744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-jk4gc" condition "Approved" to 2026-04-27 03:02:26.03372936 +0000 UTC m=+1046.211734481 I0427 03:02:26.058290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-jk4gc" condition "Ready" to 2026-04-27 03:02:26.058272592 +0000 UTC m=+1046.236277743 I0427 03:02:26.089652 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:02:26.089637081 +0000 UTC m=+1046.267642192 I0427 03:02:26.118844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:26.119741 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:02:26.119722836 +0000 UTC m=+1046.297727977 I0427 03:02:26.126692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:26.141007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:16.327427 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-27 03:03:16.327414872 +0000 UTC m=+1096.505419993 I0427 03:03:16.327450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:16.327470 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-27 03:03:16.327466153 +0000 UTC m=+1096.505471274 I0427 03:03:16.351080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:16.351177 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-27 03:03:16.351169042 +0000 UTC m=+1096.529174153 I0427 03:03:16.536110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:16.580046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bxq85" condition "Approved" to 2026-04-27 03:03:16.580029542 +0000 UTC m=+1096.758034663 I0427 03:03:16.612583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bxq85" condition "Ready" to 2026-04-27 03:03:16.612570503 +0000 UTC m=+1096.790575614 I0427 03:03:16.650269 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:16.650253516 +0000 UTC m=+1096.828258637 I0427 03:03:16.673312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:18.829068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:18.829119 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-27 03:03:18.829108904 +0000 UTC m=+1099.007114045 I0427 03:03:18.830172 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-27 03:03:18.830165833 +0000 UTC m=+1099.008170954 I0427 03:03:18.855574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:18.856078 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-27 03:03:18.856062443 +0000 UTC m=+1099.034067574 I0427 03:03:19.021749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:19.052202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-6vvnn" condition "Approved" to 2026-04-27 03:03:19.052182935 +0000 UTC m=+1099.230188086 I0427 03:03:19.078517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-6vvnn" condition "Ready" to 2026-04-27 03:03:19.078501067 +0000 UTC m=+1099.256506208 I0427 03:03:19.105178 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:19.105167227 +0000 UTC m=+1099.283172348 I0427 03:03:19.130205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:19.131274 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:19.131264242 +0000 UTC m=+1099.309269363 I0427 03:03:19.152883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:19.155387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:05:49.448709 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-27 03:05:49.448687826 +0000 UTC m=+1249.626692987 I0427 03:05:49.449185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:05:49.449335 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-27 03:05:49.449321444 +0000 UTC m=+1249.627326605 I0427 03:05:49.466590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:05:49.466755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:05:49.466809 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-27 03:05:49.46679841 +0000 UTC m=+1249.644803531 I0427 03:05:49.740166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-tlfwr" condition "Approved" to 2026-04-27 03:05:49.740149851 +0000 UTC m=+1249.918154992 I0427 03:05:49.762335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-tlfwr" condition "Ready" to 2026-04-27 03:05:49.762323856 +0000 UTC m=+1249.940328997 I0427 03:05:49.802615 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:05:49.802598534 +0000 UTC m=+1249.980603655 I0427 03:05:49.822573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:05:49.822883 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:05:49.822878466 +0000 UTC m=+1250.000883567 I0427 03:05:49.840006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:05:49.840340 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:05:49.840332622 +0000 UTC m=+1250.018337733 I0427 03:06:31.391754 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mc9gw-api" condition "Ready" to 2026-04-27 03:06:31.391720998 +0000 UTC m=+1291.569726129 I0427 03:06:31.392289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-mc9gw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:06:31.392317 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mc9gw-api" condition "Issuing" to 2026-04-27 03:06:31.392312534 +0000 UTC m=+1291.570317655 I0427 03:06:31.392907 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mc9gw-vnc" condition "Ready" to 2026-04-27 03:06:31.39290288 +0000 UTC m=+1291.570908001 I0427 03:06:31.393137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-mc9gw-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:06:31.393158 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mc9gw-vnc" condition "Issuing" to 2026-04-27 03:06:31.393153557 +0000 UTC m=+1291.571158678 I0427 03:06:31.417132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-mc9gw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mc9gw-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:31.417193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-mc9gw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:06:31.417208 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mc9gw-api" condition "Issuing" to 2026-04-27 03:06:31.417202993 +0000 UTC m=+1291.595208114 I0427 03:06:31.422761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-mc9gw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mc9gw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:31.422885 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mc9gw-vnc" condition "Ready" to 2026-04-27 03:06:31.422875408 +0000 UTC m=+1291.600880539 I0427 03:06:31.561964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mc9gw-api-9q7f7" condition "Approved" to 2026-04-27 03:06:31.561949468 +0000 UTC m=+1291.739954589 I0427 03:06:31.565249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-mc9gw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mc9gw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:31.584165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mc9gw-api-9q7f7" condition "Ready" to 2026-04-27 03:06:31.584154964 +0000 UTC m=+1291.762160075 I0427 03:06:31.596609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mc9gw-vnc-gcqjs" condition "Approved" to 2026-04-27 03:06:31.596588623 +0000 UTC m=+1291.774593734 I0427 03:06:31.615909 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mc9gw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:06:31.615887719 +0000 UTC m=+1291.793892830 I0427 03:06:31.623638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mc9gw-vnc-gcqjs" condition "Ready" to 2026-04-27 03:06:31.62363127 +0000 UTC m=+1291.801636371 I0427 03:06:31.634273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-mc9gw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mc9gw-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:31.634750 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mc9gw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:06:31.634736822 +0000 UTC m=+1291.812741943 I0427 03:06:31.650737 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mc9gw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:06:31.650723608 +0000 UTC m=+1291.828728729 I0427 03:06:31.652025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-mc9gw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mc9gw-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:31.657479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-mc9gw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mc9gw-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:31.670020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-mc9gw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mc9gw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:31.670451 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mc9gw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:06:31.670443106 +0000 UTC m=+1291.848448227 I0427 03:06:31.689271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-mc9gw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mc9gw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:31.689874 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mc9gw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:06:31.689863595 +0000 UTC m=+1291.867868716 I0427 03:07:39.450755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:07:39.450793 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-27 03:07:39.450784848 +0000 UTC m=+1359.628789969 I0427 03:07:39.451319 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-27 03:07:39.451314202 +0000 UTC m=+1359.629319323 E0427 03:07:39.469022 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:07:39.469071 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-27 03:07:39.469066456 +0000 UTC m=+1359.647071577 I0427 03:07:39.469088 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:07:39.471694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:39.471744 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-27 03:07:39.471739319 +0000 UTC m=+1359.649744440 E0427 03:07:39.479895 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0427 03:07:39.480012 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:07:39.480053 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 03:07:39.480078 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0427 03:07:39.491814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:39.491864 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-27 03:07:39.491859537 +0000 UTC m=+1359.669864658 I0427 03:07:39.495340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-86d4k" condition "Approved" to 2026-04-27 03:07:39.495335322 +0000 UTC m=+1359.673340423 I0427 03:07:39.514502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-86d4k" condition "Ready" to 2026-04-27 03:07:39.514494704 +0000 UTC m=+1359.692499825 I0427 03:07:39.541381 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:39.541365286 +0000 UTC m=+1359.719370437 I0427 03:07:39.585088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:39.585527 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:39.58552256 +0000 UTC m=+1359.763527661 I0427 03:07:39.642663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:40.267554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:07:40.267742 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-27 03:07:40.267729346 +0000 UTC m=+1360.445734497 I0427 03:07:40.267802 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-27 03:07:40.267771787 +0000 UTC m=+1360.445776928 E0427 03:07:40.287814 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:07:40.287874 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-27 03:07:40.287861965 +0000 UTC m=+1360.465867066 I0427 03:07:40.287943 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:07:40.292840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:40.292936 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-27 03:07:40.292929163 +0000 UTC m=+1360.470934264 E0427 03:07:40.305970 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0427 03:07:40.306134 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:07:40.306156 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 03:07:40.306184 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0427 03:07:40.318930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:40.352435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-48tj5" condition "Approved" to 2026-04-27 03:07:40.352411905 +0000 UTC m=+1360.530417056 I0427 03:07:40.372417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-48tj5" condition "Ready" to 2026-04-27 03:07:40.372405799 +0000 UTC m=+1360.550410910 I0427 03:07:40.399924 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:40.399902829 +0000 UTC m=+1360.577907940 I0427 03:07:40.435599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:40.435948 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:40.435938201 +0000 UTC m=+1360.613943322 I0427 03:07:40.454540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:40.454792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:40.455076 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:40.455068493 +0000 UTC m=+1360.633073594 I0427 03:07:41.112631 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-27 03:07:41.112618237 +0000 UTC m=+1361.290623358 I0427 03:07:41.112921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:07:41.113005 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-27 03:07:41.112965726 +0000 UTC m=+1361.290970867 I0427 03:07:41.135508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:41.135571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:07:41.135614 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-27 03:07:41.135608773 +0000 UTC m=+1361.313613894 I0427 03:07:41.182862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:41.193886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-ssd7f" condition "Approved" to 2026-04-27 03:07:41.193870522 +0000 UTC m=+1361.371875623 I0427 03:07:41.221435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-ssd7f" condition "Ready" to 2026-04-27 03:07:41.221410122 +0000 UTC m=+1361.399415253 I0427 03:07:44.481075 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:44.481060842 +0000 UTC m=+1364.659065963 I0427 03:07:44.496261 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-ssd7f" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:44.496243067 +0000 UTC m=+1364.674248208 I0427 03:07:44.523206 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:44.523170475 +0000 UTC m=+1364.701175626 I0427 03:07:44.552632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:45.306790 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:45.306775202 +0000 UTC m=+1365.484780353