I0520 13:01:48.777191 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0520 13:01:48.777275 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0520 13:01:48.777333 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0520 13:01:48.779817 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0520 13:01:48.780103 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0520 13:01:48.780168 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0520 13:01:48.780184 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0520 13:01:48.781978 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0520 13:01:49.126566 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0520 13:01:49.126791 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0520 13:01:49.130164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0520 13:01:49.136381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0520 13:01:49.139929 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0520 13:01:49.139996 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0520 13:01:49.142390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0520 13:01:49.144729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0520 13:01:49.147324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0520 13:01:49.149660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0520 13:01:49.152342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0520 13:01:49.156791 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0520 13:01:49.156839 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0520 13:01:49.156870 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0520 13:01:49.160957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0520 13:01:49.164365 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0520 13:01:49.166850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0520 13:01:49.169256 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0520 13:01:49.169372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0520 13:01:49.172216 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0520 13:01:49.174606 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0520 13:01:49.176492 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0520 13:01:49.176596 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0520 13:01:49.179508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0520 13:01:49.190028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0520 13:01:49.193585 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.193612 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.193956 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.194139 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.277337 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.476008 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.476069 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.476220 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.476390 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:01:49.477108 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 13:02:14.148853 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-20 13:02:14.148839312 +0000 UTC m=+25.414543566 I0520 13:02:14.898609 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 13:02:14.898589517 +0000 UTC m=+26.164293801 I0520 13:02:14.898677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:02:14.898748 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 13:02:14.89873577 +0000 UTC m=+26.164440054 I0520 13:02:14.921258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:02:14.921490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:02:14.921583 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 13:02:14.92157122 +0000 UTC m=+26.187275504 E0520 13:02:14.932190 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 13:02:14.932310 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-20 13:02:14.932298839 +0000 UTC m=+26.198003123 E0520 13:02:14.932345 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 13:02:14.984688 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0520 13:02:14.985520 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 13:02:14.985570 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 13:02:14.985632 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0520 13:02:15.009661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:02:15.019812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l6l4r" condition "Approved" to 2026-05-20 13:02:15.01979668 +0000 UTC m=+26.285500964 I0520 13:02:15.101448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l6l4r" condition "Ready" to 2026-05-20 13:02:15.10143632 +0000 UTC m=+26.367140574 I0520 13:02:15.146897 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:02:15.146875453 +0000 UTC m=+26.412579737 I0520 13:02:15.173862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:02:15.174516 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:02:15.174501389 +0000 UTC m=+26.440205673 I0520 13:02:15.212460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:02:19.986188 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:02:19.986175746 +0000 UTC m=+31.251880020 I0520 13:02:53.802581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:02:53.802639 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 13:02:53.802626221 +0000 UTC m=+65.068330505 I0520 13:02:53.802721 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 13:02:53.802706273 +0000 UTC m=+65.068410527 I0520 13:02:53.832291 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-20 13:02:53.83226948 +0000 UTC m=+65.097973754 I0520 13:02:53.839231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:02:53.839332 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 13:02:53.83932037 +0000 UTC m=+65.105024654 I0520 13:02:54.114342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:02:54.242805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ldp7b" condition "Approved" to 2026-05-20 13:02:54.242794851 +0000 UTC m=+65.508499095 I0520 13:02:54.345270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ldp7b" condition "Ready" to 2026-05-20 13:02:54.345252605 +0000 UTC m=+65.610956879 I0520 13:02:54.433045 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:02:54.433030517 +0000 UTC m=+65.698734771 I0520 13:02:54.481104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:02:54.481562 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:02:54.481551763 +0000 UTC m=+65.747256017 I0520 13:02:54.594770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:02:54.595273 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:02:54.59526102 +0000 UTC m=+65.860965304 I0520 13:02:54.597857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:08:40.726397 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-183.nip.io-tls" condition "Ready" to 2026-05-20 13:08:40.726345456 +0000 UTC m=+411.992049730 I0520 13:08:40.727128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-183.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:08:40.727191 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-183.nip.io-tls" condition "Issuing" to 2026-05-20 13:08:40.727181635 +0000 UTC m=+411.992885919 I0520 13:08:40.820056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-183.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-183.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:08:40.820133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-183.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:08:40.820153 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-183.nip.io-tls" condition "Issuing" to 2026-05-20 13:08:40.820144314 +0000 UTC m=+412.085848588 I0520 13:08:41.260768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-183.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-183.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:08:41.272549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-183.nip.io-tls-6rvkg" condition "Approved" to 2026-05-20 13:08:41.272532008 +0000 UTC m=+412.538236262 I0520 13:08:41.299506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-183.nip.io-tls-6rvkg" condition "Ready" to 2026-05-20 13:08:41.299490923 +0000 UTC m=+412.565195197 I0520 13:08:41.334760 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-183.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:08:41.334746307 +0000 UTC m=+412.600450561 I0520 13:08:41.357306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-183.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-183.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:08:41.357962 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-183.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:08:41.357929595 +0000 UTC m=+412.623633879 I0520 13:08:41.377416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-183.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-183.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:08:41.377818 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-183.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:08:41.377805258 +0000 UTC m=+412.643509542 I0520 13:09:49.801930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:09:49.801971 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 13:09:49.801962563 +0000 UTC m=+481.067666817 I0520 13:09:49.802064 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 13:09:49.802039145 +0000 UTC m=+481.067743419 E0520 13:09:49.879667 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 13:09:49.879747 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-20 13:09:49.879734705 +0000 UTC m=+481.145438989 E0520 13:09:49.879817 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 13:09:49.885206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:09:49.885304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:09:49.885330 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 13:09:49.885322932 +0000 UTC m=+481.151027186 E0520 13:09:50.141694 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0520 13:09:50.141847 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 13:09:50.141935 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 13:09:50.142017 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0520 13:09:50.870300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:09:50.871784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-x6c9k" condition "Approved" to 2026-05-20 13:09:50.871769415 +0000 UTC m=+482.137473689 I0520 13:09:50.889627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-x6c9k" condition "Ready" to 2026-05-20 13:09:50.889613792 +0000 UTC m=+482.155318036 I0520 13:09:50.910500 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:09:50.910486006 +0000 UTC m=+482.176190280 I0520 13:09:50.927977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:09:50.928342 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:09:50.928332683 +0000 UTC m=+482.194036927 I0520 13:09:50.943750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:09:50.946817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:09:50.947270 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:09:50.947256504 +0000 UTC m=+482.212960778 I0520 13:09:55.144737 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:09:55.144119344 +0000 UTC m=+486.409823618 I0520 13:10:38.433597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:10:38.433633 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 13:10:38.433625597 +0000 UTC m=+529.699329851 I0520 13:10:38.434092 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 13:10:38.434072647 +0000 UTC m=+529.699776901 I0520 13:10:38.440118 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 13:10:38.440097505 +0000 UTC m=+529.705801779 I0520 13:10:38.440754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:10:38.440799 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 13:10:38.44078871 +0000 UTC m=+529.706492964 I0520 13:10:38.440895 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 13:10:38.440891193 +0000 UTC m=+529.706595457 I0520 13:10:38.440769 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:10:38.441096 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 13:10:38.441078597 +0000 UTC m=+529.706782841 I0520 13:10:38.457735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:38.457817 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 13:10:38.457807198 +0000 UTC m=+529.723511442 I0520 13:10:38.491572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:38.491695 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 13:10:38.491684321 +0000 UTC m=+529.757388585 I0520 13:10:38.491907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:38.492033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:10:38.492071 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 13:10:38.492063159 +0000 UTC m=+529.757767413 I0520 13:10:38.709379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:38.725536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:38.766232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:38.779587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-px2wk" condition "Approved" to 2026-05-20 13:10:38.779567446 +0000 UTC m=+530.045271730 I0520 13:10:38.786607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-77kkx" condition "Approved" to 2026-05-20 13:10:38.786589285 +0000 UTC m=+530.052293549 I0520 13:10:38.787540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-chls2" condition "Approved" to 2026-05-20 13:10:38.787524827 +0000 UTC m=+530.053229081 I0520 13:10:38.819351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-77kkx" condition "Ready" to 2026-05-20 13:10:38.819336772 +0000 UTC m=+530.085041026 I0520 13:10:38.819331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-px2wk" condition "Ready" to 2026-05-20 13:10:38.819313922 +0000 UTC m=+530.085018166 I0520 13:10:38.819595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-chls2" condition "Ready" to 2026-05-20 13:10:38.819578448 +0000 UTC m=+530.085282712 I0520 13:10:38.982216 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:10:38.982192456 +0000 UTC m=+530.247896740 I0520 13:10:39.034628 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:10:39.034604531 +0000 UTC m=+530.300308785 I0520 13:10:39.195784 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:10:39.195769765 +0000 UTC m=+530.461474009 I0520 13:10:39.276711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:39.277108 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:10:39.2770999 +0000 UTC m=+530.542804154 I0520 13:10:39.408755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:39.409393 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:10:39.409383077 +0000 UTC m=+530.675087361 I0520 13:10:39.531322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:39.531691 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:10:39.531684085 +0000 UTC m=+530.797388329 I0520 13:10:40.039906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:40.146517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:40.177626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:40.279204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:40.279599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:54.299695 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" condition "Ready" to 2026-05-20 13:10:54.299670597 +0000 UTC m=+545.565374871 I0520 13:10:54.299966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:10:54.300059 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" condition "Issuing" to 2026-05-20 13:10:54.300042975 +0000 UTC m=+545.565747289 I0520 13:10:55.132798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:55.133005 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" condition "Ready" to 2026-05-20 13:10:55.132993508 +0000 UTC m=+546.398697782 I0520 13:10:56.192341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:56.341436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nf7g7-dhgps" condition "Approved" to 2026-05-20 13:10:56.341422855 +0000 UTC m=+547.607127119 I0520 13:10:56.376197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nf7g7-dhgps" condition "Ready" to 2026-05-20 13:10:56.376184357 +0000 UTC m=+547.641888611 I0520 13:10:56.798200 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:10:56.7981818 +0000 UTC m=+548.063886094 I0520 13:10:57.097387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:10:57.460362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf7g7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:12:05.697142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:12:05.697181 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 13:12:05.697171736 +0000 UTC m=+616.962876000 I0520 13:12:05.697196 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 13:12:05.697174956 +0000 UTC m=+616.962879230 I0520 13:12:05.717302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:12:05.717382 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 13:12:05.717373015 +0000 UTC m=+616.983077269 I0520 13:12:05.869727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:12:05.931410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4xwrp" condition "Approved" to 2026-05-20 13:12:05.931364962 +0000 UTC m=+617.197069216 I0520 13:12:05.951529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4xwrp" condition "Ready" to 2026-05-20 13:12:05.95151525 +0000 UTC m=+617.217219504 I0520 13:12:05.983323 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:12:05.983299792 +0000 UTC m=+617.249004056 I0520 13:12:06.009141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:15:38.486047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:15:38.486434 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 13:15:38.486079227 +0000 UTC m=+829.751783511 I0520 13:15:38.486442 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 13:15:38.485896623 +0000 UTC m=+829.751600877 I0520 13:15:38.517019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:15:38.517199 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 13:15:38.517191237 +0000 UTC m=+829.782895501 I0520 13:15:38.758656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:15:38.791318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6jwmd" condition "Approved" to 2026-05-20 13:15:38.791304613 +0000 UTC m=+830.057008887 I0520 13:15:38.813088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6jwmd" condition "Ready" to 2026-05-20 13:15:38.81307915 +0000 UTC m=+830.078783394 I0520 13:15:38.843766 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:15:38.84374687 +0000 UTC m=+830.109451144 I0520 13:15:38.865070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:15:38.865504 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:15:38.865495407 +0000 UTC m=+830.131199661 I0520 13:15:38.893705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:18:07.568000 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-20 13:18:07.567932488 +0000 UTC m=+978.833636782 I0520 13:18:07.568444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:18:07.568499 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-20 13:18:07.56849256 +0000 UTC m=+978.834196814 I0520 13:18:07.689400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:18:07.689531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:18:07.689559 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-20 13:18:07.689550856 +0000 UTC m=+978.955255130 I0520 13:18:09.944338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6wbm5" condition "Approved" to 2026-05-20 13:18:09.94432387 +0000 UTC m=+981.210028144 I0520 13:18:10.107699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6wbm5" condition "Ready" to 2026-05-20 13:18:10.107688039 +0000 UTC m=+981.373392293 I0520 13:18:10.638862 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:18:10.638846682 +0000 UTC m=+981.904550936 I0520 13:18:10.854911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:18:11.082044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:19:41.645319 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-20 13:19:41.645286799 +0000 UTC m=+1072.910991073 I0520 13:19:41.645490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:19:41.645551 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-20 13:19:41.645544925 +0000 UTC m=+1072.911249189 I0520 13:19:41.750206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:19:41.750340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:19:41.750386 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-20 13:19:41.750372042 +0000 UTC m=+1073.016076326 I0520 13:19:42.173231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8d28w" condition "Approved" to 2026-05-20 13:19:42.173208749 +0000 UTC m=+1073.438913033 I0520 13:19:42.230469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8d28w" condition "Ready" to 2026-05-20 13:19:42.230450362 +0000 UTC m=+1073.496154646 I0520 13:19:42.328484 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:19:42.328469343 +0000 UTC m=+1073.594173597 I0520 13:19:42.377135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:19:42.377601 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:19:42.377594432 +0000 UTC m=+1073.643298686 I0520 13:19:42.417291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:23:16.020622 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-20 13:23:16.020586424 +0000 UTC m=+1287.286290708 I0520 13:23:16.021561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:23:16.021638 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-20 13:23:16.021630069 +0000 UTC m=+1287.287334343 I0520 13:23:16.037869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:23:16.037955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:23:16.037974 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-20 13:23:16.037967419 +0000 UTC m=+1287.303671673 I0520 13:23:16.301041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-l2xpc" condition "Approved" to 2026-05-20 13:23:16.301023665 +0000 UTC m=+1287.566727949 I0520 13:23:16.327552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-l2xpc" condition "Ready" to 2026-05-20 13:23:16.327540547 +0000 UTC m=+1287.593244801 I0520 13:23:16.377298 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:23:16.377278233 +0000 UTC m=+1287.642982507 I0520 13:23:16.413323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:23:16.413768 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:23:16.4137611 +0000 UTC m=+1287.679465354 I0520 13:23:16.456411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:23:16.456893 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:23:16.456881826 +0000 UTC m=+1287.722586080 I0520 13:31:11.276407 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-20 13:31:11.276378966 +0000 UTC m=+1762.542083250 I0520 13:31:11.276653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:31:11.276716 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-20 13:31:11.276707344 +0000 UTC m=+1762.542411618 I0520 13:31:11.341211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:31:11.341365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:31:11.341409 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-20 13:31:11.341397332 +0000 UTC m=+1762.607101626 I0520 13:31:11.574480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rpzfk" condition "Approved" to 2026-05-20 13:31:11.574470337 +0000 UTC m=+1762.840174581 I0520 13:31:11.604690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rpzfk" condition "Ready" to 2026-05-20 13:31:11.604675949 +0000 UTC m=+1762.870380233 I0520 13:31:11.685081 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:31:11.68505435 +0000 UTC m=+1762.950758634 I0520 13:31:11.929578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:31:11.929983 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:31:11.929973773 +0000 UTC m=+1763.195678047 I0520 13:31:12.124962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:31:12.128821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:32:41.361236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:32:41.361276 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-20 13:32:41.361266679 +0000 UTC m=+1852.626970933 I0520 13:32:41.361584 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-20 13:32:41.361578236 +0000 UTC m=+1852.627282490 I0520 13:32:41.387084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:32:41.387185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:32:41.387212 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-20 13:32:41.387197084 +0000 UTC m=+1852.652901338 I0520 13:32:41.541279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:32:41.548300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nxsrc" condition "Approved" to 2026-05-20 13:32:41.548288406 +0000 UTC m=+1852.813992640 I0520 13:32:41.569522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nxsrc" condition "Ready" to 2026-05-20 13:32:41.569502874 +0000 UTC m=+1852.835207128 I0520 13:32:41.608459 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:32:41.608439702 +0000 UTC m=+1852.874143956 I0520 13:32:41.631367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:32:41.631781 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:32:41.631770648 +0000 UTC m=+1852.897474892 I0520 13:32:41.649871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:32:41.650133 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:32:41.650125352 +0000 UTC m=+1852.915829606 I0520 13:33:51.525982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:33:51.526011 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-20 13:33:51.526005148 +0000 UTC m=+1922.791709392 I0520 13:33:51.526384 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 13:33:51.526362617 +0000 UTC m=+1922.792066891 I0520 13:33:51.542334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:33:51.542379 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 13:33:51.542374997 +0000 UTC m=+1922.808079231 I0520 13:33:51.562296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:33:51.562394 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 13:33:51.562384388 +0000 UTC m=+1922.828088672 I0520 13:33:51.573903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-9srk4" condition "Approved" to 2026-05-20 13:33:51.573892869 +0000 UTC m=+1922.839597113 I0520 13:33:51.597790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-9srk4" condition "Ready" to 2026-05-20 13:33:51.597774467 +0000 UTC m=+1922.863478721 I0520 13:33:51.623965 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:33:51.623943346 +0000 UTC m=+1922.889647590 I0520 13:33:51.691479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:33:51.761032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:33:52.208729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:33:52.208974 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-20 13:33:52.208964037 +0000 UTC m=+1923.474668291 I0520 13:33:52.208826 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-20 13:33:52.208812224 +0000 UTC m=+1923.474516468 I0520 13:33:52.223431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:33:52.223501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:33:52.223531 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-20 13:33:52.223526036 +0000 UTC m=+1923.489230290 I0520 13:33:52.271784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-ws4x6" condition "Approved" to 2026-05-20 13:33:52.271767494 +0000 UTC m=+1923.537471748 I0520 13:33:52.290286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-ws4x6" condition "Ready" to 2026-05-20 13:33:52.29027443 +0000 UTC m=+1923.555978684 I0520 13:33:52.322662 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:33:52.322645471 +0000 UTC m=+1923.588349755 I0520 13:33:52.343818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:33:52.920776 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-20 13:33:52.920763137 +0000 UTC m=+1924.186467411 I0520 13:33:53.555480 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-20 13:33:53.555459108 +0000 UTC m=+1924.821163392 I0520 13:34:46.127845 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-20 13:34:46.127827618 +0000 UTC m=+1977.393531902 I0520 13:34:46.128404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:34:46.128441 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-20 13:34:46.128434082 +0000 UTC m=+1977.394138366 I0520 13:34:46.186806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:34:46.186898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:34:46.186922 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-20 13:34:46.18691588 +0000 UTC m=+1977.452620134 I0520 13:34:47.764465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:34:47.765590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8lvjh" condition "Approved" to 2026-05-20 13:34:47.765579995 +0000 UTC m=+1979.031284239 I0520 13:34:47.833414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8lvjh" condition "Ready" to 2026-05-20 13:34:47.833403554 +0000 UTC m=+1979.099107798 I0520 13:34:47.964443 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:34:47.964419678 +0000 UTC m=+1979.230123932 I0520 13:34:48.091399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:34:48.092880 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:34:48.092867915 +0000 UTC m=+1979.358572199 I0520 13:34:48.209600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:37:40.635404 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-20 13:37:40.635386281 +0000 UTC m=+2151.901090565 I0520 13:37:40.635949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:37:40.635970 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-20 13:37:40.635966504 +0000 UTC m=+2151.901670758 I0520 13:37:40.656050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:37:40.656135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:37:40.656156 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-20 13:37:40.656149175 +0000 UTC m=+2151.921853429 I0520 13:37:40.868667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-g2fvm" condition "Approved" to 2026-05-20 13:37:40.868657234 +0000 UTC m=+2152.134361478 I0520 13:37:40.914507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-g2fvm" condition "Ready" to 2026-05-20 13:37:40.914496768 +0000 UTC m=+2152.180201012 I0520 13:37:40.954671 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:37:40.954658053 +0000 UTC m=+2152.220362307 I0520 13:37:40.978339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:37:40.979213 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:37:40.979201952 +0000 UTC m=+2152.244906206 I0520 13:37:40.997454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:37:40.999228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:37:40.999654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:37:41.000139 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:37:41.000126818 +0000 UTC m=+2152.265831072 I0520 13:37:42.240302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:37:42.240364 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-20 13:37:42.240349515 +0000 UTC m=+2153.506053829 I0520 13:37:42.240366 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-20 13:37:42.240354945 +0000 UTC m=+2153.506059269 I0520 13:37:42.258328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:37:42.258404 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-20 13:37:42.258397195 +0000 UTC m=+2153.524101469 I0520 13:37:42.388007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:37:42.418776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-bhvlb" condition "Approved" to 2026-05-20 13:37:42.418760078 +0000 UTC m=+2153.684464332 I0520 13:37:42.441690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-bhvlb" condition "Ready" to 2026-05-20 13:37:42.44168018 +0000 UTC m=+2153.707384424 I0520 13:37:42.470374 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:37:42.470357353 +0000 UTC m=+2153.736061607 I0520 13:37:42.496818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:41:13.035539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:41:13.035608 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-20 13:41:13.035600482 +0000 UTC m=+2364.301304736 I0520 13:41:13.035934 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-20 13:41:13.03591967 +0000 UTC m=+2364.301623924 I0520 13:41:13.085195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:41:13.085377 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-20 13:41:13.085366876 +0000 UTC m=+2364.351071140 I0520 13:41:13.244296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:41:13.342798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-xkdmn" condition "Approved" to 2026-05-20 13:41:13.342785049 +0000 UTC m=+2364.608489293 I0520 13:41:13.377201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-xkdmn" condition "Ready" to 2026-05-20 13:41:13.377183322 +0000 UTC m=+2364.642887576 I0520 13:41:13.458132 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:41:13.458114175 +0000 UTC m=+2364.723818409 I0520 13:41:13.604876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:41:13.605303 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:41:13.605296328 +0000 UTC m=+2364.871000572 I0520 13:41:13.648232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:42:08.467665 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7h7qz-vnc" condition "Ready" to 2026-05-20 13:42:08.46764877 +0000 UTC m=+2419.733353014 I0520 13:42:08.468405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7h7qz-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:42:08.468435 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7h7qz-vnc" condition "Issuing" to 2026-05-20 13:42:08.468426117 +0000 UTC m=+2419.734130361 I0520 13:42:08.468939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7h7qz-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:42:08.468948 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7h7qz-api" condition "Issuing" to 2026-05-20 13:42:08.468945739 +0000 UTC m=+2419.734649983 I0520 13:42:08.469143 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7h7qz-api" condition "Ready" to 2026-05-20 13:42:08.469139563 +0000 UTC m=+2419.734843807 I0520 13:42:08.493924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7h7qz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7h7qz-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:42:08.494145 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7h7qz-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:42:08.494253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7h7qz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7h7qz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:42:08.494199 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7h7qz-api" condition "Issuing" to 2026-05-20 13:42:08.494191402 +0000 UTC m=+2419.759895666 I0520 13:42:08.494718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7h7qz-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:42:08.494789 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7h7qz-vnc" condition "Issuing" to 2026-05-20 13:42:08.494782756 +0000 UTC m=+2419.760487010 I0520 13:42:08.762116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7h7qz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7h7qz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:42:08.771731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7h7qz-vnc-pm6zn" condition "Approved" to 2026-05-20 13:42:08.771706526 +0000 UTC m=+2420.037410800 I0520 13:42:08.796966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7h7qz-vnc-pm6zn" condition "Ready" to 2026-05-20 13:42:08.796948629 +0000 UTC m=+2420.062652893 I0520 13:42:08.828459 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7h7qz-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:42:08.828436054 +0000 UTC m=+2420.094140328 I0520 13:42:08.848693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7h7qz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7h7qz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:42:08.849324 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7h7qz-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:42:08.849313449 +0000 UTC m=+2420.115017693 I0520 13:42:08.876892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7h7qz-api-vcg45" condition "Approved" to 2026-05-20 13:42:08.876878165 +0000 UTC m=+2420.142582409 I0520 13:42:08.877560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7h7qz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7h7qz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:42:08.877634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7h7qz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7h7qz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:42:08.877909 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7h7qz-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:42:08.877903328 +0000 UTC m=+2420.143607572 I0520 13:42:08.901825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7h7qz-api-vcg45" condition "Ready" to 2026-05-20 13:42:08.901802992 +0000 UTC m=+2420.167507246 I0520 13:42:08.943076 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7h7qz-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:42:08.943056288 +0000 UTC m=+2420.208760562 I0520 13:42:08.963789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7h7qz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7h7qz-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:42:08.964456 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7h7qz-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:42:08.964432654 +0000 UTC m=+2420.230136928 I0520 13:42:08.990121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7h7qz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7h7qz-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:44:23.488822 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-20 13:44:23.488754882 +0000 UTC m=+2554.754459136 I0520 13:44:23.489369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:44:23.489533 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-20 13:44:23.489517239 +0000 UTC m=+2554.755221573 I0520 13:44:23.511837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:44:23.512002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:44:23.512040 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-20 13:44:23.51202914 +0000 UTC m=+2554.777733424 I0520 13:44:23.785047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:44:23.798009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-bcr8k" condition "Approved" to 2026-05-20 13:44:23.797979086 +0000 UTC m=+2555.063683340 I0520 13:44:23.824533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-bcr8k" condition "Ready" to 2026-05-20 13:44:23.824517909 +0000 UTC m=+2555.090222163 I0520 13:44:23.863304 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:44:23.86328151 +0000 UTC m=+2555.128985754 I0520 13:44:23.889629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:44:23.948422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:48:07.827487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:48:07.827485 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-20 13:48:07.827465066 +0000 UTC m=+2779.093169340 I0520 13:48:07.827584 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-20 13:48:07.827571639 +0000 UTC m=+2779.093275913 I0520 13:48:07.850080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:48:07.850295 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-20 13:48:07.850275305 +0000 UTC m=+2779.115979689 I0520 13:48:08.073534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:48:08.105513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-jjgqn" condition "Approved" to 2026-05-20 13:48:08.105488997 +0000 UTC m=+2779.371193311 I0520 13:48:08.136393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-jjgqn" condition "Ready" to 2026-05-20 13:48:08.136350039 +0000 UTC m=+2779.402054323 I0520 13:48:08.167280 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:48:08.167227611 +0000 UTC m=+2779.432931935 I0520 13:48:08.192734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:48:09.578008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:48:09.578082 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-20 13:48:09.578076821 +0000 UTC m=+2780.843781055 I0520 13:48:09.578999 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-20 13:48:09.578976562 +0000 UTC m=+2780.844680866 I0520 13:48:09.598612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:48:09.598753 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-20 13:48:09.598741111 +0000 UTC m=+2780.864445395 I0520 13:48:09.918731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:48:09.953633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-4c4b2" condition "Approved" to 2026-05-20 13:48:09.95361871 +0000 UTC m=+2781.219322984 I0520 13:48:09.973045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-4c4b2" condition "Ready" to 2026-05-20 13:48:09.973033341 +0000 UTC m=+2781.238737585 I0520 13:48:10.003545 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:48:10.003532035 +0000 UTC m=+2781.269236279 I0520 13:48:10.032144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:48:10.032439 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:48:10.032431583 +0000 UTC m=+2781.298135847 I0520 13:48:10.045265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:48:10.056010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:56.070496 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-20 13:50:56.070409855 +0000 UTC m=+2947.336114139 I0520 13:50:56.070735 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:50:56.070843 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-20 13:50:56.070831044 +0000 UTC m=+2947.336535288 E0520 13:50:56.124329 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 13:50:56.124427 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-20 13:50:56.124416822 +0000 UTC m=+2947.390121106 I0520 13:50:56.124456 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 13:50:56.127719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:56.127877 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-20 13:50:56.127865081 +0000 UTC m=+2947.393569335 E0520 13:50:56.160452 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0520 13:50:56.160662 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 13:50:56.160769 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0520 13:50:56.160826 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0520 13:50:56.164170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:56.164264 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-20 13:50:56.164253487 +0000 UTC m=+2947.429957731 I0520 13:50:56.209206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-swvjd" condition "Approved" to 2026-05-20 13:50:56.209164588 +0000 UTC m=+2947.474868842 I0520 13:50:56.250467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-swvjd" condition "Ready" to 2026-05-20 13:50:56.250450837 +0000 UTC m=+2947.516155121 I0520 13:50:56.364522 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:50:56.364496119 +0000 UTC m=+2947.630200373 I0520 13:50:56.432750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:56.433293 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:50:56.433280232 +0000 UTC m=+2947.698984486 I0520 13:50:56.462707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:56.475802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:56.854477 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-20 13:50:56.854456847 +0000 UTC m=+2948.120161101 I0520 13:50:56.854551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:50:56.854619 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-20 13:50:56.85460545 +0000 UTC m=+2948.120309704 E0520 13:50:56.870978 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 13:50:56.871024 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-20 13:50:56.871014083 +0000 UTC m=+2948.136718337 I0520 13:50:56.871076 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 13:50:56.873367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:56.873594 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-20 13:50:56.873576621 +0000 UTC m=+2948.139280895 E0520 13:50:56.882218 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0520 13:50:56.882342 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 13:50:56.882374 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0520 13:50:56.882409 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0520 13:50:56.894303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:56.930428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-gwkx8" condition "Approved" to 2026-05-20 13:50:56.930407293 +0000 UTC m=+2948.196111547 I0520 13:50:56.960878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-gwkx8" condition "Ready" to 2026-05-20 13:50:56.960862425 +0000 UTC m=+2948.226566709 I0520 13:50:57.062597 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:50:57.062569737 +0000 UTC m=+2948.328273981 I0520 13:50:57.102628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:57.651083 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-20 13:50:57.651060623 +0000 UTC m=+2948.916764867 I0520 13:50:57.651255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:50:57.651336 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-20 13:50:57.651318489 +0000 UTC m=+2948.917022773 I0520 13:50:57.671068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:57.671219 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-20 13:50:57.671210051 +0000 UTC m=+2948.936914295 I0520 13:50:57.701269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:50:57.777125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-m4lk5" condition "Approved" to 2026-05-20 13:50:57.777095868 +0000 UTC m=+2949.042800142 I0520 13:50:57.805544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-m4lk5" condition "Ready" to 2026-05-20 13:50:57.805523694 +0000 UTC m=+2949.071227948 I0520 13:51:01.161087 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:51:01.161067118 +0000 UTC m=+2952.426771372 I0520 13:51:01.203787 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-m4lk5" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:51:01.203764288 +0000 UTC m=+2952.469468562 I0520 13:51:01.251721 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:51:01.251700458 +0000 UTC m=+2952.517404712 I0520 13:51:01.289787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:51:01.883453 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:51:01.883439708 +0000 UTC m=+2953.149143992 I0520 13:53:16.916234 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-20 13:53:16.916205073 +0000 UTC m=+3088.181909327 I0520 13:53:16.916293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:53:16.916336 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-20 13:53:16.916327696 +0000 UTC m=+3088.182031950 I0520 13:53:16.933998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:53:16.934103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:53:16.934123 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-20 13:53:16.934115931 +0000 UTC m=+3088.199820185 I0520 13:53:17.081467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:53:17.092412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-rbp7t" condition "Approved" to 2026-05-20 13:53:17.092393858 +0000 UTC m=+3088.358098112 I0520 13:53:17.112612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-rbp7t" condition "Ready" to 2026-05-20 13:53:17.112588837 +0000 UTC m=+3088.378293131 I0520 13:53:17.204517 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:53:17.204500036 +0000 UTC m=+3088.470204280 I0520 13:53:17.248553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:53:17.248952 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:53:17.248945037 +0000 UTC m=+3088.514649291 I0520 13:53:17.319340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:53:17.364641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:07.986898 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-20 13:54:07.986873855 +0000 UTC m=+3139.252578139 I0520 13:54:08.290809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:08.290819 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-20 13:54:08.290792803 +0000 UTC m=+3139.556497077 I0520 13:54:08.290866 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-20 13:54:08.290851864 +0000 UTC m=+3139.556556138 I0520 13:54:08.365113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:08.365236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:08.365262 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-20 13:54:08.365251666 +0000 UTC m=+3139.630955920 E0520 13:54:08.538137 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0520 13:54:08.736235 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-20 13:54:08.736212857 +0000 UTC m=+3140.001917141 I0520 13:54:08.761679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:08.761737 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-20 13:54:08.761721327 +0000 UTC m=+3140.027425601 I0520 13:54:08.761730 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-20 13:54:08.761703867 +0000 UTC m=+3140.027408121 E0520 13:54:08.793434 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0520 13:54:08.804046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:08.804193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:08.804265 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-20 13:54:08.804255465 +0000 UTC m=+3140.069959719 I0520 13:54:09.210447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-wh8cf" condition "Approved" to 2026-05-20 13:54:09.210425507 +0000 UTC m=+3140.476129781 I0520 13:54:09.316412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-wh8cf" condition "Ready" to 2026-05-20 13:54:09.316391215 +0000 UTC m=+3140.582095499 I0520 13:54:09.573417 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:54:09.573398367 +0000 UTC m=+3140.839102641 I0520 13:54:09.606135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:09.607425 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:54:09.60741646 +0000 UTC m=+3140.873120714 I0520 13:54:09.627530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:09.683468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:12.844698 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-20 13:54:12.844669485 +0000 UTC m=+3144.110373769 I0520 13:54:13.048119 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-20 13:54:13.04809415 +0000 UTC m=+3144.313798394 I0520 13:54:13.048171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:13.048679 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-20 13:54:13.048651092 +0000 UTC m=+3144.314355346 I0520 13:54:13.221126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:13.221239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:13.221272 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-20 13:54:13.221261355 +0000 UTC m=+3144.486965629 I0520 13:54:14.161610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-djj29" condition "Approved" to 2026-05-20 13:54:14.16159138 +0000 UTC m=+3145.427295634 I0520 13:54:14.232724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-djj29" condition "Ready" to 2026-05-20 13:54:14.232710496 +0000 UTC m=+3145.498414750 I0520 13:54:14.326097 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-20 13:54:14.326074739 +0000 UTC m=+3145.591778993 I0520 13:54:14.373409 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-20 13:54:14.373389354 +0000 UTC m=+3145.639093598 I0520 13:54:14.373556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:14.373588 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-20 13:54:14.373580679 +0000 UTC m=+3145.639284923 I0520 13:54:14.374032 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:54:14.374027859 +0000 UTC m=+3145.639732103 I0520 13:54:14.446359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:14.446431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:14.446458 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-20 13:54:14.446451905 +0000 UTC m=+3145.712156159 I0520 13:54:14.446710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:14.447094 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:54:14.447087889 +0000 UTC m=+3145.712792133 I0520 13:54:14.558219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:15.269355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-g47v8" condition "Approved" to 2026-05-20 13:54:15.269337069 +0000 UTC m=+3146.535041323 I0520 13:54:15.316284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-g47v8" condition "Ready" to 2026-05-20 13:54:15.316272726 +0000 UTC m=+3146.581976980 I0520 13:54:15.438104 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:54:15.438087555 +0000 UTC m=+3146.703791809 I0520 13:54:15.509771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:15.799213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:17.026291 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-20 13:54:17.026271516 +0000 UTC m=+3148.291975760 I0520 13:54:17.109006 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-20 13:54:17.108989875 +0000 UTC m=+3148.374694129 I0520 13:54:17.109358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:54:17.109375 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-20 13:54:17.109370964 +0000 UTC m=+3148.375075218 I0520 13:54:17.162873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:17.162978 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-20 13:54:17.162969852 +0000 UTC m=+3148.428674096 I0520 13:54:17.408432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:17.613145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-znbt6" condition "Approved" to 2026-05-20 13:54:17.613130865 +0000 UTC m=+3148.878835109 I0520 13:54:17.740199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-znbt6" condition "Ready" to 2026-05-20 13:54:17.740180132 +0000 UTC m=+3149.005884376 I0520 13:54:17.796448 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:54:17.796432132 +0000 UTC m=+3149.062136386 I0520 13:54:17.837705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:54:17.838204 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:54:17.83819408 +0000 UTC m=+3149.103898344 I0520 13:54:17.873553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:57:53.489923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:57:53.490014 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-20 13:57:53.49000277 +0000 UTC m=+3364.755707024 I0520 13:57:53.490587 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-20 13:57:53.490580263 +0000 UTC m=+3364.756284517 I0520 13:57:53.672453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:57:53.672699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:57:53.672734 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-20 13:57:53.67272394 +0000 UTC m=+3364.938428184 I0520 13:57:55.044449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:57:55.045265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-vppsc" condition "Approved" to 2026-05-20 13:57:55.045235912 +0000 UTC m=+3366.310940156 I0520 13:57:55.296150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-vppsc" condition "Ready" to 2026-05-20 13:57:55.296132738 +0000 UTC m=+3366.561837022 I0520 13:57:56.257498 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:57:56.257479847 +0000 UTC m=+3367.523184101 I0520 13:57:56.533165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:57:56.533639 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:57:56.533627119 +0000 UTC m=+3367.799331373 I0520 13:57:56.624000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:57:58.594711 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-20 13:57:58.594691914 +0000 UTC m=+3369.860396148 I0520 13:57:58.594957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:57:58.595016 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-20 13:57:58.595003512 +0000 UTC m=+3369.860707786 I0520 13:57:58.732335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 13:57:58.732491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 13:57:58.733332 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-20 13:57:58.733320399 +0000 UTC m=+3369.999024663 I0520 13:57:59.250347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-jsf25" condition "Approved" to 2026-05-20 13:57:59.250327377 +0000 UTC m=+3370.516031631 I0520 13:57:59.458658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-jsf25" condition "Ready" to 2026-05-20 13:57:59.458637471 +0000 UTC m=+3370.724341725 I0520 13:57:59.595886 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 13:57:59.595860183 +0000 UTC m=+3370.861564467 I0520 13:57:59.764998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0520 13:58:36.330753 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0520 13:59:00.814974 1 leaderelection.go:369] Failed to update lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0520 13:59:00.815061 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0520 13:59:03.842960 1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again I0520 13:59:03.843667 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0520 13:59:03.843769 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0520 13:59:03.843757 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0520 13:59:03.843790 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0520 13:59:03.843813 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0520 13:59:03.843800 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0520 13:59:03.843837 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0520 13:59:03.843866 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0520 13:59:03.843886 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0520 13:59:03.843905 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0520 13:59:03.843924 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0520 13:59:03.843816 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0520 13:59:03.843942 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0520 13:59:03.843955 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0520 13:59:03.843974 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0520 13:59:03.843987 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0520 13:59:03.844000 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0520 13:59:03.844014 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" E0520 13:59:03.844065 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"