I0402 16:49:16.425798 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 16:49:16.425961 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 16:49:16.426057 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 16:49:16.432316 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 16:49:16.432990 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 16:49:16.433120 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 16:49:16.433149 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 16:49:16.436072 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 16:49:16.455196 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 16:49:16.459543 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 16:49:16.459789 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 16:49:16.462282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 16:49:16.466928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 16:49:16.471368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 16:49:16.473764 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 16:49:16.473785 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 16:49:16.473809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 16:49:16.475772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 16:49:16.477455 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 16:49:16.479106 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 16:49:16.479124 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 16:49:16.479236 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 16:49:16.481223 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 16:49:16.485734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 16:49:16.490575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 16:49:16.493668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 16:49:16.496307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 16:49:16.498709 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 16:49:16.501276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 16:49:16.503780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 16:49:16.506039 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 16:49:16.507837 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 16:49:16.507891 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 16:49:16.512391 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.514429 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.514448 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.529119 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.545412 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.569027 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.582551 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.599507 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.610269 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:16.621071 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:49:36.406662 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 16:49:36.406646565 +0000 UTC m=+20.011414446 I0402 16:49:37.106449 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 16:49:37.106436574 +0000 UTC m=+20.711204425 I0402 16:49:37.107017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:49:37.107129 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 16:49:37.107113346 +0000 UTC m=+20.711881237 E0402 16:49:37.175242 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:49:37.175348 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 16:49:37.175337742 +0000 UTC m=+20.780105623 E0402 16:49:37.175379 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:49:37.180161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:37.180244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:49:37.180268 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 16:49:37.180259599 +0000 UTC m=+20.785027480 E0402 16:49:37.215703 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 16:49:37.215984 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:49:37.216069 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:49:37.216144 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 16:49:37.305214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vtnrj" condition "Approved" to 2026-04-02 16:49:37.305197734 +0000 UTC m=+20.909965625 I0402 16:49:37.338874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vtnrj" condition "Ready" to 2026-04-02 16:49:37.338862058 +0000 UTC m=+20.943629939 I0402 16:49:37.557427 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:37.557413868 +0000 UTC m=+21.162181759 I0402 16:49:37.597613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:37.598015 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:37.598006323 +0000 UTC m=+21.202774214 I0402 16:49:37.639285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:37.639481 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:37.639471995 +0000 UTC m=+21.244239876 I0402 16:49:42.216405 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:42.216387184 +0000 UTC m=+25.821155065 I0402 16:50:03.630888 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 16:50:03.630866517 +0000 UTC m=+47.235634408 I0402 16:50:03.630932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:50:03.631066 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 16:50:03.631060573 +0000 UTC m=+47.235828444 I0402 16:50:03.639081 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 16:50:03.639058418 +0000 UTC m=+47.243826279 I0402 16:50:03.656739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:03.656824 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 16:50:03.656813745 +0000 UTC m=+47.261581606 I0402 16:50:03.986224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:04.024983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-52rt6" condition "Approved" to 2026-04-02 16:50:04.024976217 +0000 UTC m=+47.629744068 I0402 16:50:04.056605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-52rt6" condition "Ready" to 2026-04-02 16:50:04.056587086 +0000 UTC m=+47.661354947 I0402 16:50:04.090113 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:04.090095024 +0000 UTC m=+47.694862885 I0402 16:50:04.112682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:04.113095 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:04.113085927 +0000 UTC m=+47.717853818 I0402 16:50:04.121480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:04.133319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:04.134256 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:04.134236432 +0000 UTC m=+47.739004333 I0402 16:54:38.425522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-139.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:38.425568 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Issuing" to 2026-04-02 16:54:38.425558674 +0000 UTC m=+322.030326535 I0402 16:54:38.425596 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready" to 2026-04-02 16:54:38.425577975 +0000 UTC m=+322.030345836 I0402 16:54:38.515027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:38.515132 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready" to 2026-04-02 16:54:38.515122961 +0000 UTC m=+322.119890822 I0402 16:54:38.862326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:38.892483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-139.nip.io-tls-ppdp5" condition "Approved" to 2026-04-02 16:54:38.892463487 +0000 UTC m=+322.497231348 I0402 16:54:38.923668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-139.nip.io-tls-ppdp5" condition "Ready" to 2026-04-02 16:54:38.923647521 +0000 UTC m=+322.528415412 I0402 16:54:38.954689 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:38.954669641 +0000 UTC m=+322.559437502 I0402 16:54:38.981249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:39.038734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:47.391886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:55:47.391962 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 16:55:47.391951417 +0000 UTC m=+390.996719308 I0402 16:55:47.392383 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 16:55:47.391820043 +0000 UTC m=+390.996587904 I0402 16:55:47.411572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:47.411723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:55:47.411766 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 16:55:47.411753436 +0000 UTC m=+391.016521337 E0402 16:55:47.411835 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:55:47.411878 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 16:55:47.41186837 +0000 UTC m=+391.016636221 E0402 16:55:47.411931 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:55:47.448664 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 16:55:47.448792 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:55:47.448833 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:55:47.448882 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 16:55:47.494599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:47.494800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8czqj" condition "Approved" to 2026-04-02 16:55:47.494781807 +0000 UTC m=+391.099549698 I0402 16:55:47.511257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8czqj" condition "Ready" to 2026-04-02 16:55:47.51124212 +0000 UTC m=+391.116009991 I0402 16:55:47.552443 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:47.552420589 +0000 UTC m=+391.157188481 I0402 16:55:47.588032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:47.588593 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:47.588577379 +0000 UTC m=+391.193345260 I0402 16:55:47.637908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:47.638237 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:47.638225808 +0000 UTC m=+391.242993669 I0402 16:55:47.638662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:52.449475 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:52.44945549 +0000 UTC m=+396.054223371 I0402 16:56:32.685729 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 16:56:32.68570874 +0000 UTC m=+436.290476631 I0402 16:56:32.686385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:56:32.686571 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 16:56:32.686557597 +0000 UTC m=+436.291325478 I0402 16:56:32.703740 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 16:56:32.703724853 +0000 UTC m=+436.308492714 I0402 16:56:32.703793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:56:32.703829 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 16:56:32.703822096 +0000 UTC m=+436.308589987 I0402 16:56:32.708071 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 16:56:32.708052081 +0000 UTC m=+436.312819962 I0402 16:56:32.714074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:56:32.714142 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 16:56:32.714137154 +0000 UTC m=+436.318905005 I0402 16:56:32.731833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:32.731892 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 16:56:32.731887248 +0000 UTC m=+436.336655099 I0402 16:56:32.734098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:32.734257 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 16:56:32.734241573 +0000 UTC m=+436.339009424 I0402 16:56:32.738510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:32.738565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:56:32.738588 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 16:56:32.738583772 +0000 UTC m=+436.343351633 I0402 16:56:32.841466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:32.886598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8t7p2" condition "Approved" to 2026-04-02 16:56:32.886583188 +0000 UTC m=+436.491351039 I0402 16:56:32.911031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8t7p2" condition "Ready" to 2026-04-02 16:56:32.911016705 +0000 UTC m=+436.515784556 I0402 16:56:32.916155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:32.928356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-26dpz" condition "Approved" to 2026-04-02 16:56:32.928342016 +0000 UTC m=+436.533109857 I0402 16:56:32.946895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-26dpz" condition "Ready" to 2026-04-02 16:56:32.946881375 +0000 UTC m=+436.551649236 I0402 16:56:32.946930 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:32.946915257 +0000 UTC m=+436.551683118 I0402 16:56:32.966032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:32.966586 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:32.966575281 +0000 UTC m=+436.571343192 I0402 16:56:33.031590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:33.031944 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:33.03193369 +0000 UTC m=+436.636701541 I0402 16:56:33.114319 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:33.11430983 +0000 UTC m=+436.719077681 I0402 16:56:33.231647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:33.232263 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:33.23225322 +0000 UTC m=+436.837021101 I0402 16:56:33.484745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:33.581644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:33.736172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-45n5h" condition "Approved" to 2026-04-02 16:56:33.736150784 +0000 UTC m=+437.340918675 I0402 16:56:34.160785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-45n5h" condition "Ready" to 2026-04-02 16:56:34.160773236 +0000 UTC m=+437.765541097 I0402 16:56:34.283409 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:34.283390646 +0000 UTC m=+437.888158497 I0402 16:56:34.495048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:34.495529 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:34.495517461 +0000 UTC m=+438.100285352 I0402 16:56:34.581998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:40.155888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:56:40.155894 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" condition "Ready" to 2026-04-02 16:56:40.155877935 +0000 UTC m=+443.760645796 I0402 16:56:40.155950 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" condition "Issuing" to 2026-04-02 16:56:40.155936277 +0000 UTC m=+443.760704158 I0402 16:56:40.171681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:40.171932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:56:40.172012 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" condition "Issuing" to 2026-04-02 16:56:40.171967687 +0000 UTC m=+443.776735578 I0402 16:56:40.459089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ld4rv-qdvb8" condition "Approved" to 2026-04-02 16:56:40.459069466 +0000 UTC m=+444.063837347 I0402 16:56:40.475936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ld4rv-qdvb8" condition "Ready" to 2026-04-02 16:56:40.475927112 +0000 UTC m=+444.080694963 I0402 16:56:40.502896 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:40.502880329 +0000 UTC m=+444.107648180 I0402 16:56:40.522671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:40.523107 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:40.523094672 +0000 UTC m=+444.127862563 I0402 16:56:40.547302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:40.547629 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ld4rv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:40.547620662 +0000 UTC m=+444.152388513 I0402 16:57:15.116980 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:57:15.117029 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 16:57:15.117017099 +0000 UTC m=+478.721784960 I0402 16:57:15.117657 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 16:57:15.116911926 +0000 UTC m=+478.721679777 I0402 16:57:15.148426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:57:15.148679 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 16:57:15.148661561 +0000 UTC m=+478.753429462 I0402 16:57:15.335760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:57:15.367292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j6hlp" condition "Approved" to 2026-04-02 16:57:15.367276163 +0000 UTC m=+478.972044034 I0402 16:57:15.385458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-j6hlp" condition "Ready" to 2026-04-02 16:57:15.385446958 +0000 UTC m=+478.990214819 I0402 16:57:15.417399 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:57:15.417377399 +0000 UTC m=+479.022145260 I0402 16:57:15.441108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:57:15.441670 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:57:15.441659828 +0000 UTC m=+479.046427709 I0402 16:57:15.461773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:57:15.462254 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:57:15.46224047 +0000 UTC m=+479.067008351 I0402 17:00:28.856905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:28.857102 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 17:00:28.857085642 +0000 UTC m=+672.461853523 I0402 17:00:28.857106 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 17:00:28.857086302 +0000 UTC m=+672.461854183 I0402 17:00:28.876667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:28.876800 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:28.876833 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 17:00:28.876824766 +0000 UTC m=+672.481592617 I0402 17:00:29.028689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:29.041282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5r57f" condition "Approved" to 2026-04-02 17:00:29.041262349 +0000 UTC m=+672.646030240 I0402 17:00:29.065569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5r57f" condition "Ready" to 2026-04-02 17:00:29.065554348 +0000 UTC m=+672.670322209 I0402 17:00:29.094833 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:29.094817874 +0000 UTC m=+672.699585735 I0402 17:00:29.123955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:29.125941 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:29.125928228 +0000 UTC m=+672.730696109 I0402 17:00:29.142557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:29.142796 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:29.142786032 +0000 UTC m=+672.747553883 I0402 17:03:06.652270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:03:06.652368 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 17:03:06.652356343 +0000 UTC m=+830.257124234 I0402 17:03:06.652463 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 17:03:06.652438655 +0000 UTC m=+830.257206516 I0402 17:03:06.684824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:03:06.684941 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:03:06.684976 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 17:03:06.684965355 +0000 UTC m=+830.289733246 I0402 17:03:07.082560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-lrthw" condition "Approved" to 2026-04-02 17:03:07.082545189 +0000 UTC m=+830.687313060 I0402 17:03:07.128508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-lrthw" condition "Ready" to 2026-04-02 17:03:07.128494044 +0000 UTC m=+830.733261905 I0402 17:03:07.203296 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:03:07.203274511 +0000 UTC m=+830.808042382 I0402 17:03:07.256905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:04:17.897528 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 17:04:17.897508241 +0000 UTC m=+901.502276102 I0402 17:04:17.897715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:04:17.897831 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 17:04:17.897813291 +0000 UTC m=+901.502581172 I0402 17:04:17.919458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:04:17.919555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:04:17.919579 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 17:04:17.919570787 +0000 UTC m=+901.524338638 I0402 17:04:18.117138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4pjpn" condition "Approved" to 2026-04-02 17:04:18.117118613 +0000 UTC m=+901.721886474 I0402 17:04:18.137417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4pjpn" condition "Ready" to 2026-04-02 17:04:18.137401993 +0000 UTC m=+901.742169854 I0402 17:04:18.177271 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:04:18.177257061 +0000 UTC m=+901.782024912 I0402 17:04:18.198178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:04:18.198577 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:04:18.198566763 +0000 UTC m=+901.803334624 I0402 17:04:18.223673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:22.103045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:07:22.103074 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 17:07:22.103050965 +0000 UTC m=+1085.707818826 I0402 17:07:22.103127 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 17:07:22.103113327 +0000 UTC m=+1085.707881218 I0402 17:07:22.120434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:22.120551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:07:22.120576 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 17:07:22.120569488 +0000 UTC m=+1085.725337339 I0402 17:07:22.249837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:22.263162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bt4fp" condition "Approved" to 2026-04-02 17:07:22.263139165 +0000 UTC m=+1085.867907056 I0402 17:07:22.283444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bt4fp" condition "Ready" to 2026-04-02 17:07:22.283426835 +0000 UTC m=+1085.888194686 I0402 17:07:22.316214 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:07:22.316190628 +0000 UTC m=+1085.920958489 I0402 17:07:22.345504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:22.346001 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:07:22.345992598 +0000 UTC m=+1085.950760459 I0402 17:07:22.365553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:22.366065 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:07:22.366051771 +0000 UTC m=+1085.970819652 I0402 17:07:22.368350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:30.570239 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-02 17:13:30.570202003 +0000 UTC m=+1454.174969854 I0402 17:13:30.570393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:13:30.570527 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-02 17:13:30.570513483 +0000 UTC m=+1454.175281374 I0402 17:13:30.588482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:30.588561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:13:30.588577 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-02 17:13:30.588571766 +0000 UTC m=+1454.193339617 I0402 17:13:30.753645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:30.763804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-jd9vv" condition "Approved" to 2026-04-02 17:13:30.763784261 +0000 UTC m=+1454.368552122 I0402 17:13:30.784624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-jd9vv" condition "Ready" to 2026-04-02 17:13:30.78461178 +0000 UTC m=+1454.389379651 I0402 17:13:30.812996 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:13:30.812978785 +0000 UTC m=+1454.417746646 I0402 17:13:30.841730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:14:54.703611 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-02 17:14:54.703584429 +0000 UTC m=+1538.308352290 I0402 17:14:54.703990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:14:54.704079 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-02 17:14:54.704070254 +0000 UTC m=+1538.308838115 I0402 17:14:54.722325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:14:54.722601 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-02 17:14:54.722590232 +0000 UTC m=+1538.327358093 I0402 17:14:55.139622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:14:55.182600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-lgj97" condition "Approved" to 2026-04-02 17:14:55.18259048 +0000 UTC m=+1538.787358331 I0402 17:14:55.209225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-lgj97" condition "Ready" to 2026-04-02 17:14:55.20920833 +0000 UTC m=+1538.813976211 I0402 17:14:55.240550 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:14:55.240533777 +0000 UTC m=+1538.845301668 I0402 17:14:55.267777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:57.251771 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-02 17:15:57.251743654 +0000 UTC m=+1600.856511535 I0402 17:15:57.252117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:15:57.252386 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-02 17:15:57.252206019 +0000 UTC m=+1600.856973900 I0402 17:15:57.274721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:57.274853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:15:57.274898 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-02 17:15:57.274886066 +0000 UTC m=+1600.879653957 I0402 17:15:57.330638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-s9bzk" condition "Approved" to 2026-04-02 17:15:57.330616574 +0000 UTC m=+1600.935384465 I0402 17:15:57.355286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-s9bzk" condition "Ready" to 2026-04-02 17:15:57.355271423 +0000 UTC m=+1600.960039294 I0402 17:15:57.383176 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:15:57.383158253 +0000 UTC m=+1600.987926114 I0402 17:15:57.406189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:57.406561 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:15:57.406550813 +0000 UTC m=+1601.011318674 I0402 17:15:57.418732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:57.434247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:57.948508 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-02 17:15:57.948488666 +0000 UTC m=+1601.553256527 I0402 17:15:57.948521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:15:57.948598 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-02 17:15:57.948583259 +0000 UTC m=+1601.553351140 I0402 17:15:57.966784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:57.966901 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-02 17:15:57.96688774 +0000 UTC m=+1601.571655621 I0402 17:15:57.986086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:57.986181 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-02 17:15:57.986171311 +0000 UTC m=+1601.590939162 I0402 17:15:57.999182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-xgz4h" condition "Approved" to 2026-04-02 17:15:57.999171697 +0000 UTC m=+1601.603939548 I0402 17:15:58.017702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-xgz4h" condition "Ready" to 2026-04-02 17:15:58.017680964 +0000 UTC m=+1601.622448855 I0402 17:15:58.050037 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:15:58.050017503 +0000 UTC m=+1601.654785364 I0402 17:15:58.072496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:58.072840 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:15:58.072829954 +0000 UTC m=+1601.677597815 I0402 17:15:58.091180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:58.091423 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:15:58.091410484 +0000 UTC m=+1601.696178345 I0402 17:15:58.092226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:15:58.674486 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-02 17:15:58.674466348 +0000 UTC m=+1602.279234229 I0402 17:15:59.346986 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-02 17:15:59.346970464 +0000 UTC m=+1602.951738325 I0402 17:16:45.767145 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-02 17:16:45.767127758 +0000 UTC m=+1649.371895609 I0402 17:16:45.767674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:16:45.767743 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-02 17:16:45.767732057 +0000 UTC m=+1649.372499908 I0402 17:16:45.794205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:45.794288 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-02 17:16:45.794280386 +0000 UTC m=+1649.399048237 I0402 17:16:48.829365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:48.887345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-qrn88" condition "Approved" to 2026-04-02 17:16:48.887326376 +0000 UTC m=+1652.492094227 I0402 17:16:48.910316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-qrn88" condition "Ready" to 2026-04-02 17:16:48.910302462 +0000 UTC m=+1652.515070323 I0402 17:16:48.945228 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:16:48.945210705 +0000 UTC m=+1652.549978586 I0402 17:16:48.971677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:48.972733 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:16:48.972721324 +0000 UTC m=+1652.577489205 I0402 17:16:48.991225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:48.991766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:48.992015 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:16:48.992005873 +0000 UTC m=+1652.596773734 I0402 17:19:24.885210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:19:24.885288 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-02 17:19:24.885281228 +0000 UTC m=+1808.490049079 I0402 17:19:24.885286 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-02 17:19:24.885273628 +0000 UTC m=+1808.490041479 I0402 17:19:24.902864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:24.903118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:19:24.903187 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-02 17:19:24.903174943 +0000 UTC m=+1808.507942824 I0402 17:19:25.105843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:25.113748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-c9r66" condition "Approved" to 2026-04-02 17:19:25.113737516 +0000 UTC m=+1808.718505407 I0402 17:19:25.132671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-c9r66" condition "Ready" to 2026-04-02 17:19:25.132636824 +0000 UTC m=+1808.737404705 I0402 17:19:25.160201 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:19:25.160188834 +0000 UTC m=+1808.764956695 I0402 17:19:25.188143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:25.188471 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:19:25.188461318 +0000 UTC m=+1808.793229179 I0402 17:19:25.195245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:25.218683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:26.405196 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-02 17:19:26.405174721 +0000 UTC m=+1810.009942612 I0402 17:19:26.405279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:19:26.405331 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-02 17:19:26.405321666 +0000 UTC m=+1810.010089527 I0402 17:19:26.423722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:26.423875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:19:26.423924 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-02 17:19:26.423913973 +0000 UTC m=+1810.028681824 I0402 17:19:26.648032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-9ftvw" condition "Approved" to 2026-04-02 17:19:26.648014994 +0000 UTC m=+1810.252782865 I0402 17:19:26.675950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-9ftvw" condition "Ready" to 2026-04-02 17:19:26.675933056 +0000 UTC m=+1810.280700917 I0402 17:19:26.714626 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:19:26.714606968 +0000 UTC m=+1810.319374829 I0402 17:19:26.747469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:26.806490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:22:34.733552 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-02 17:22:34.733509998 +0000 UTC m=+1998.338277849 I0402 17:22:34.733667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:22:34.733980 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-02 17:22:34.733847919 +0000 UTC m=+1998.338615780 I0402 17:22:34.749315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:22:34.749430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:22:34.749457 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-02 17:22:34.749450442 +0000 UTC m=+1998.354218293 I0402 17:22:35.018987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-gxrp6" condition "Approved" to 2026-04-02 17:22:35.018965507 +0000 UTC m=+1998.623733358 I0402 17:22:35.040818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-gxrp6" condition "Ready" to 2026-04-02 17:22:35.040806817 +0000 UTC m=+1998.645574668 I0402 17:22:35.080012 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:22:35.079949504 +0000 UTC m=+1998.684717395 I0402 17:22:35.101418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:22:35.101743 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:22:35.101734952 +0000 UTC m=+1998.706502823 I0402 17:22:35.120515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:22:35.126927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:23:25.174889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-tdf4j-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:23:25.174925 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdf4j-vnc" condition "Issuing" to 2026-04-02 17:23:25.174917522 +0000 UTC m=+2048.779685363 I0402 17:23:25.175381 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdf4j-vnc" condition "Ready" to 2026-04-02 17:23:25.175359546 +0000 UTC m=+2048.780127407 I0402 17:23:25.177237 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdf4j-api" condition "Ready" to 2026-04-02 17:23:25.177231525 +0000 UTC m=+2048.781999386 I0402 17:23:25.177452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-tdf4j-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:23:25.177466 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdf4j-api" condition "Issuing" to 2026-04-02 17:23:25.177462432 +0000 UTC m=+2048.782230293 I0402 17:23:25.194175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-tdf4j-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdf4j-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:23:25.194359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-tdf4j-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:23:25.194438 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdf4j-api" condition "Issuing" to 2026-04-02 17:23:25.194403368 +0000 UTC m=+2048.799171219 I0402 17:23:25.204796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-tdf4j-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdf4j-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:23:25.204921 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdf4j-vnc" condition "Ready" to 2026-04-02 17:23:25.20491131 +0000 UTC m=+2048.809679191 I0402 17:23:25.398606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-tdf4j-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdf4j-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:23:25.432813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tdf4j-vnc-wcv59" condition "Approved" to 2026-04-02 17:23:25.432799519 +0000 UTC m=+2049.037567380 I0402 17:23:25.464451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tdf4j-vnc-wcv59" condition "Ready" to 2026-04-02 17:23:25.464397498 +0000 UTC m=+2049.069165379 I0402 17:23:25.504887 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tdf4j-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:23:25.504875956 +0000 UTC m=+2049.109643807 I0402 17:23:25.532830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-tdf4j-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdf4j-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:23:25.603172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-tdf4j-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdf4j-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:23:25.603330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tdf4j-api-zhdm2" condition "Approved" to 2026-04-02 17:23:25.603313866 +0000 UTC m=+2049.208081717 I0402 17:23:25.622982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tdf4j-api-zhdm2" condition "Ready" to 2026-04-02 17:23:25.622968177 +0000 UTC m=+2049.227736038 I0402 17:23:25.661033 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tdf4j-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:23:25.661013689 +0000 UTC m=+2049.265781530 I0402 17:23:25.679063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-tdf4j-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdf4j-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:23:25.679499 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tdf4j-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:23:25.679491323 +0000 UTC m=+2049.284259164 I0402 17:23:25.701463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-tdf4j-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdf4j-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:30.140676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:25:30.140773 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-02 17:25:30.140761171 +0000 UTC m=+2173.745529062 I0402 17:25:30.140851 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-02 17:25:30.140594316 +0000 UTC m=+2173.745362207 I0402 17:25:30.159999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:30.160125 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-02 17:25:30.160114953 +0000 UTC m=+2173.764882814 I0402 17:25:30.341776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:30.380911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-2s6ld" condition "Approved" to 2026-04-02 17:25:30.380897252 +0000 UTC m=+2173.985665113 I0402 17:25:30.396689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-2s6ld" condition "Ready" to 2026-04-02 17:25:30.396675801 +0000 UTC m=+2174.001443652 I0402 17:25:30.426596 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:25:30.426571646 +0000 UTC m=+2174.031339527 I0402 17:25:30.453119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:30.454799 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:25:30.454786898 +0000 UTC m=+2174.059554749 I0402 17:25:30.470183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:30.479269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:29:09.075253 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-02 17:29:09.075201533 +0000 UTC m=+2392.679969394 I0402 17:29:09.075950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:29:09.076110 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-02 17:29:09.076097781 +0000 UTC m=+2392.680865672 I0402 17:29:09.094541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:29:09.094718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:29:09.094754 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-02 17:29:09.094744411 +0000 UTC m=+2392.699512272 I0402 17:29:09.260075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-9r48d" condition "Approved" to 2026-04-02 17:29:09.260059727 +0000 UTC m=+2392.864827608 I0402 17:29:09.280181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-9r48d" condition "Ready" to 2026-04-02 17:29:09.280167533 +0000 UTC m=+2392.884935394 I0402 17:29:09.310145 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:29:09.31013114 +0000 UTC m=+2392.914899001 I0402 17:29:09.344542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:29:09.344989 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:29:09.344981602 +0000 UTC m=+2392.949749463 I0402 17:29:09.374839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:29:10.689284 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-02 17:29:10.689256178 +0000 UTC m=+2394.294024109 I0402 17:29:10.689506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:29:10.689560 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-02 17:29:10.689550187 +0000 UTC m=+2394.294318038 I0402 17:29:10.712787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:29:10.712933 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:29:10.712977 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-02 17:29:10.712967797 +0000 UTC m=+2394.317735648 I0402 17:29:11.122529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-hvz6g" condition "Approved" to 2026-04-02 17:29:11.122511554 +0000 UTC m=+2394.727279435 I0402 17:29:11.138149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-hvz6g" condition "Ready" to 2026-04-02 17:29:11.138134508 +0000 UTC m=+2394.742902399 I0402 17:29:11.172032 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:29:11.172018449 +0000 UTC m=+2394.776786300 I0402 17:29:11.199331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:29:11.253167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:36.181866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:36.181912 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-02 17:31:36.181904083 +0000 UTC m=+2539.786671944 I0402 17:31:36.182027 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-02 17:31:36.182013406 +0000 UTC m=+2539.786781297 I0402 17:31:36.199990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:36.200260 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-02 17:31:36.200248033 +0000 UTC m=+2539.805015914 E0402 17:31:36.200468 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:31:36.200559 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-02 17:31:36.200547612 +0000 UTC m=+2539.805315473 I0402 17:31:36.200596 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 17:31:36.216903 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0402 17:31:36.217060 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:31:36.217104 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 17:31:36.217149 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0402 17:31:36.227597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:36.256817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-slxtz" condition "Approved" to 2026-04-02 17:31:36.25679389 +0000 UTC m=+2539.861561781 I0402 17:31:36.275556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-slxtz" condition "Ready" to 2026-04-02 17:31:36.275542553 +0000 UTC m=+2539.880310424 I0402 17:31:36.307915 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:36.307901746 +0000 UTC m=+2539.912669607 I0402 17:31:36.336393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:36.336721 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:36.336714157 +0000 UTC m=+2539.941482018 I0402 17:31:36.349902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:36.354423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:36.867223 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-02 17:31:36.867198467 +0000 UTC m=+2540.471966328 I0402 17:31:36.867507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:36.867733 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-02 17:31:36.867702703 +0000 UTC m=+2540.472470584 E0402 17:31:36.885620 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:31:36.885662 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-02 17:31:36.88565453 +0000 UTC m=+2540.490422391 I0402 17:31:36.885722 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:31:36.892756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:36.892936 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:36.892992 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-02 17:31:36.892981832 +0000 UTC m=+2540.497749683 E0402 17:31:36.896066 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0402 17:31:36.896692 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:31:36.896745 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 17:31:36.896794 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0402 17:31:36.996402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:37.004258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-h8td4" condition "Approved" to 2026-04-02 17:31:37.004236919 +0000 UTC m=+2540.609004790 I0402 17:31:37.024228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-h8td4" condition "Ready" to 2026-04-02 17:31:37.024219201 +0000 UTC m=+2540.628987062 I0402 17:31:37.051126 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:37.051120752 +0000 UTC m=+2540.655888613 I0402 17:31:37.073973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:37.074318 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:37.074306915 +0000 UTC m=+2540.679074776 I0402 17:31:37.091263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:37.091852 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:37.091839959 +0000 UTC m=+2540.696607830 I0402 17:31:37.092015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:37.670482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:37.670557 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-02 17:31:37.670544074 +0000 UTC m=+2541.275311965 I0402 17:31:37.670788 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-02 17:31:37.670518073 +0000 UTC m=+2541.275285964 I0402 17:31:37.694801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:37.694924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:37.694953 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-02 17:31:37.694945245 +0000 UTC m=+2541.299713116 I0402 17:31:37.761344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-6rwgm" condition "Approved" to 2026-04-02 17:31:37.761329323 +0000 UTC m=+2541.366097184 I0402 17:31:37.778129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-6rwgm" condition "Ready" to 2026-04-02 17:31:37.778111864 +0000 UTC m=+2541.382879725 I0402 17:31:41.218009 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:41.217993609 +0000 UTC m=+2544.822761490 I0402 17:31:41.301715 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-6rwgm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:41.301696445 +0000 UTC m=+2544.906464326 I0402 17:31:41.332643 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:41.332624163 +0000 UTC m=+2544.937392024 I0402 17:31:41.357195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:41.896966 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:41.896952113 +0000 UTC m=+2545.501719974 I0402 17:33:55.287380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:33:55.287434 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-02 17:33:55.287421071 +0000 UTC m=+2678.892188962 I0402 17:33:55.287638 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-02 17:33:55.287626438 +0000 UTC m=+2678.892394299 I0402 17:33:55.305013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:33:55.305223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:33:55.305273 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-02 17:33:55.305249461 +0000 UTC m=+2678.910017342 I0402 17:33:55.647190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-h2vrk" condition "Approved" to 2026-04-02 17:33:55.647173412 +0000 UTC m=+2679.251941273 I0402 17:33:55.675331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-h2vrk" condition "Ready" to 2026-04-02 17:33:55.675314042 +0000 UTC m=+2679.280081923 I0402 17:33:55.708878 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:33:55.708865213 +0000 UTC m=+2679.313633074 I0402 17:33:55.737739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:33:55.738532 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:33:55.738520192 +0000 UTC m=+2679.343288083 I0402 17:33:55.762286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:33:55.762632 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:33:55.762623862 +0000 UTC m=+2679.367391703 I0402 17:34:42.352109 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-02 17:34:42.352084483 +0000 UTC m=+2725.956852384 I0402 17:34:42.377742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:34:42.377787 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-02 17:34:42.377778125 +0000 UTC m=+2725.982545986 I0402 17:34:42.377864 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-02 17:34:42.377821286 +0000 UTC m=+2725.982589207 I0402 17:34:42.397578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:42.397706 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-02 17:34:42.397693562 +0000 UTC m=+2726.002461453 E0402 17:34:42.407679 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0402 17:34:42.470487 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-02 17:34:42.470466298 +0000 UTC m=+2726.075234179 I0402 17:34:42.491415 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-02 17:34:42.491401917 +0000 UTC m=+2726.096169798 I0402 17:34:42.491984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:34:42.492019 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-02 17:34:42.492012917 +0000 UTC m=+2726.096780798 E0402 17:34:42.497346 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0402 17:34:42.511033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:42.511102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:34:42.511131 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-02 17:34:42.511123578 +0000 UTC m=+2726.115891439 I0402 17:34:42.834163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vt42b" condition "Approved" to 2026-04-02 17:34:42.834144635 +0000 UTC m=+2726.438912486 I0402 17:34:42.864345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vt42b" condition "Ready" to 2026-04-02 17:34:42.864331829 +0000 UTC m=+2726.469099690 I0402 17:34:42.904639 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:34:42.904622618 +0000 UTC m=+2726.509390459 I0402 17:34:42.934471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:43.369744 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-02 17:34:43.369723527 +0000 UTC m=+2726.974491368 I0402 17:34:43.390875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:34:43.390905 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-02 17:34:43.390885473 +0000 UTC m=+2726.995653344 I0402 17:34:43.390925 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-02 17:34:43.390914474 +0000 UTC m=+2726.995682335 I0402 17:34:43.408458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:43.408567 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-02 17:34:43.408558668 +0000 UTC m=+2727.013326509 I0402 17:34:43.725337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:43.777732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-f4pjf" condition "Approved" to 2026-04-02 17:34:43.777703959 +0000 UTC m=+2727.382471820 I0402 17:34:43.800322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-f4pjf" condition "Ready" to 2026-04-02 17:34:43.800309722 +0000 UTC m=+2727.405077573 I0402 17:34:43.838283 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:34:43.838269885 +0000 UTC m=+2727.443037736 I0402 17:34:43.868212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:43.881785 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-02 17:34:43.881767676 +0000 UTC m=+2727.486535567 I0402 17:34:43.904411 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-02 17:34:43.904389559 +0000 UTC m=+2727.509157440 I0402 17:34:43.904673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:34:43.904782 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-02 17:34:43.904714269 +0000 UTC m=+2727.509482131 I0402 17:34:43.922712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:43.923139 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-02 17:34:43.923123648 +0000 UTC m=+2727.527891499 I0402 17:34:44.097017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:44.132981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rzck2" condition "Approved" to 2026-04-02 17:34:44.132967107 +0000 UTC m=+2727.737734958 I0402 17:34:44.154666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rzck2" condition "Ready" to 2026-04-02 17:34:44.15465506 +0000 UTC m=+2727.759422911 I0402 17:34:44.251682 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:34:44.251666241 +0000 UTC m=+2727.856434092 I0402 17:34:44.292488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:44.292861 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:34:44.292854948 +0000 UTC m=+2727.897622799 I0402 17:34:44.330998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:44.331304 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:34:44.331292687 +0000 UTC m=+2727.936060528 I0402 17:34:44.385057 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-02 17:34:44.385033295 +0000 UTC m=+2727.989801176 I0402 17:34:44.412545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:34:44.412586 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-02 17:34:44.412576536 +0000 UTC m=+2728.017344407 I0402 17:34:44.412611 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-02 17:34:44.412593766 +0000 UTC m=+2728.017361627 I0402 17:34:44.468868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:44.472371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:34:44.472433 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-02 17:34:44.472423049 +0000 UTC m=+2728.077190910 I0402 17:34:44.770507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-htsvm" condition "Approved" to 2026-04-02 17:34:44.770492078 +0000 UTC m=+2728.375259929 I0402 17:34:44.863614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-htsvm" condition "Ready" to 2026-04-02 17:34:44.863602745 +0000 UTC m=+2728.468370596 I0402 17:34:45.318591 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:34:45.31857148 +0000 UTC m=+2728.923339371 I0402 17:34:45.469791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:34:45.470080 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:34:45.470073773 +0000 UTC m=+2729.074841624 I0402 17:34:45.660916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:38:28.956658 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-02 17:38:28.956638121 +0000 UTC m=+2952.561405982 I0402 17:38:28.957602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:38:28.957651 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-02 17:38:28.957639693 +0000 UTC m=+2952.562407564 I0402 17:38:29.101221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:38:29.101378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:38:29.101411 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-02 17:38:29.101401398 +0000 UTC m=+2952.706169279 I0402 17:38:30.036271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-w99zp" condition "Approved" to 2026-04-02 17:38:30.036254735 +0000 UTC m=+2953.641022586 I0402 17:38:30.116062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-w99zp" condition "Ready" to 2026-04-02 17:38:30.116045636 +0000 UTC m=+2953.720813497 I0402 17:38:30.346869 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:38:30.346855655 +0000 UTC m=+2953.951623516 I0402 17:38:30.418304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:38:30.418596 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:38:30.418588968 +0000 UTC m=+2954.023356829 I0402 17:38:30.575194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:38:32.366579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:38:32.366645 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-02 17:38:32.366623064 +0000 UTC m=+2955.971390945 I0402 17:38:32.366851 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-02 17:38:32.3668279 +0000 UTC m=+2955.971595781 I0402 17:38:32.450960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:38:32.451151 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-02 17:38:32.451137796 +0000 UTC m=+2956.055905687 I0402 17:38:32.748132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:38:33.158660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-8b8bq" condition "Approved" to 2026-04-02 17:38:33.158637884 +0000 UTC m=+2956.763405735 I0402 17:38:33.322102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-8b8bq" condition "Ready" to 2026-04-02 17:38:33.322079559 +0000 UTC m=+2956.926847420 I0402 17:38:33.575572 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:38:33.575549342 +0000 UTC m=+2957.180317233 I0402 17:38:33.849544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:38:33.850003 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:38:33.849993346 +0000 UTC m=+2957.454761217 I0402 17:38:34.040140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:45:11.233061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:45:11.233075 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-02 17:45:11.233045007 +0000 UTC m=+3354.837812898 I0402 17:45:11.233174 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-02 17:45:11.23316198 +0000 UTC m=+3354.837929871 I0402 17:45:11.253394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:45:11.253488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:45:11.253511 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-02 17:45:11.253505973 +0000 UTC m=+3354.858273854 I0402 17:45:11.438438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:45:11.454240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-sdkq9" condition "Approved" to 2026-04-02 17:45:11.454223601 +0000 UTC m=+3355.058991462 I0402 17:45:11.475932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-sdkq9" condition "Ready" to 2026-04-02 17:45:11.475918996 +0000 UTC m=+3355.080686857 I0402 17:45:11.507750 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:45:11.50772653 +0000 UTC m=+3355.112494421 I0402 17:45:11.536895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:45:11.537292 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:45:11.537284924 +0000 UTC m=+3355.142052765 I0402 17:45:11.561643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:45:48.991422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:45:48.991484 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-02 17:45:48.991470497 +0000 UTC m=+3392.596238388 I0402 17:45:48.991547 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-02 17:45:48.991525749 +0000 UTC m=+3392.596293630 I0402 17:45:49.013594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:45:49.013683 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:45:49.013808 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-02 17:45:49.013799142 +0000 UTC m=+3392.618567003 I0402 17:45:49.204440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rxw9l" condition "Approved" to 2026-04-02 17:45:49.204415681 +0000 UTC m=+3392.809183532 I0402 17:45:49.227505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-rxw9l" condition "Ready" to 2026-04-02 17:45:49.22748871 +0000 UTC m=+3392.832256571 I0402 17:45:49.262333 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:45:49.262315339 +0000 UTC m=+3392.867083200 I0402 17:45:49.297350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:45:49.361164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"