I0425 08:47:37.872887 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0425 08:47:37.872992 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0425 08:47:37.873061 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0425 08:47:37.876517 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0425 08:47:37.876903 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0425 08:47:37.877043 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0425 08:47:37.877085 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0425 08:47:37.879603 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0425 08:47:37.897405 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0425 08:47:37.905784 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0425 08:47:37.908782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0425 08:47:37.911575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0425 08:47:37.914230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0425 08:47:37.916327 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0425 08:47:37.916356 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0425 08:47:37.916362 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0425 08:47:37.916370 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0425 08:47:37.916376 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0425 08:47:37.916436 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0425 08:47:37.918344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0425 08:47:37.924549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0425 08:47:37.927207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0425 08:47:37.929801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0425 08:47:37.932369 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0425 08:47:37.936526 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0425 08:47:37.938019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0425 08:47:37.938193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0425 08:47:37.938326 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0425 08:47:37.943396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0425 08:47:37.943520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0425 08:47:37.943864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0425 08:47:37.945578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0425 08:47:37.948240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0425 08:47:37.950994 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:37.951275 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:37.951819 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:37.953476 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:37.953476 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:37.955491 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:37.956123 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:37.956402 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:37.958678 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:47:38.076699 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:11.191859 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-25 08:48:11.191837602 +0000 UTC m=+33.353941143 I0425 08:48:11.985477 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 08:48:11.985462297 +0000 UTC m=+34.147565828 I0425 08:48:11.985511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:11.985600 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-25 08:48:11.985590701 +0000 UTC m=+34.147694242 E0425 08:48:11.998730 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 08:48:11.998793 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-25 08:48:11.998786281 +0000 UTC m=+34.160889792 E0425 08:48:11.998815 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 08:48:12.003035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:12.003159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:12.003187 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-25 08:48:12.003178592 +0000 UTC m=+34.165282143 E0425 08:48:12.014570 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0425 08:48:12.014691 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 08:48:12.014728 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 08:48:12.014772 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0425 08:48:12.049301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:12.057233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m569c" condition "Approved" to 2026-04-25 08:48:12.057216205 +0000 UTC m=+34.219319746 I0425 08:48:12.080104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-m569c" condition "Ready" to 2026-04-25 08:48:12.080088294 +0000 UTC m=+34.242191835 I0425 08:48:12.132150 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:12.132139325 +0000 UTC m=+34.294242836 I0425 08:48:12.156512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:17.015865 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:17.015846408 +0000 UTC m=+39.177949949 I0425 08:48:17.572768 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-25 08:48:17.572755421 +0000 UTC m=+39.734858932 I0425 08:48:17.573156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:17.573182 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-25 08:48:17.573176085 +0000 UTC m=+39.735279596 I0425 08:48:17.590002 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-25 08:48:17.589990351 +0000 UTC m=+39.752093862 I0425 08:48:17.601447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:17.601532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:17.601587 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-25 08:48:17.601544479 +0000 UTC m=+39.763647990 I0425 08:48:17.771148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:17.782981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ktmjh" condition "Approved" to 2026-04-25 08:48:17.782965166 +0000 UTC m=+39.945068707 I0425 08:48:17.829145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ktmjh" condition "Ready" to 2026-04-25 08:48:17.829130869 +0000 UTC m=+39.991234410 I0425 08:48:17.856781 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:17.856773341 +0000 UTC m=+40.018876852 I0425 08:48:17.885329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:17.885595 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:17.88559071 +0000 UTC m=+40.047694201 I0425 08:48:17.899459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:17.899861 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:17.899853055 +0000 UTC m=+40.061956566 I0425 08:48:17.903150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:17.903501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:22.744853 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-25 08:48:22.744833522 +0000 UTC m=+44.906937033 I0425 08:48:22.744898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:22.744918 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 08:48:22.744913234 +0000 UTC m=+44.907016735 I0425 08:48:22.766028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:22.766106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:22.766123 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 08:48:22.766116961 +0000 UTC m=+44.928220472 I0425 08:48:22.820677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-zlcss" condition "Approved" to 2026-04-25 08:48:22.820666361 +0000 UTC m=+44.982769872 I0425 08:48:22.852911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-zlcss" condition "Ready" to 2026-04-25 08:48:22.852893829 +0000 UTC m=+45.014997380 I0425 08:48:22.880670 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:22.880655035 +0000 UTC m=+45.042758546 I0425 08:48:22.909205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:22.909567 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:22.909557206 +0000 UTC m=+45.071660727 I0425 08:48:22.915626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:22.932476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:23.441342 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-25 08:48:23.441327228 +0000 UTC m=+45.603430729 I0425 08:48:23.441630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:23.441648 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-25 08:48:23.441644548 +0000 UTC m=+45.603748059 I0425 08:48:23.476351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:23.476473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:23.476685 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-25 08:48:23.476551772 +0000 UTC m=+45.638655283 I0425 08:48:23.543261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:23.552945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hxzl7" condition "Approved" to 2026-04-25 08:48:23.552929668 +0000 UTC m=+45.715033199 I0425 08:48:23.579587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hxzl7" condition "Ready" to 2026-04-25 08:48:23.579574617 +0000 UTC m=+45.741678128 I0425 08:48:23.608709 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:23.608697527 +0000 UTC m=+45.770801038 I0425 08:48:23.647073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:23.647394 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:23.647384181 +0000 UTC m=+45.809487682 I0425 08:48:23.669590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:24.150374 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-25 08:48:24.150363024 +0000 UTC m=+46.312466535 I0425 08:48:24.855912 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-25 08:48:24.855900818 +0000 UTC m=+47.018004329 I0425 08:50:50.753938 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-25 08:50:50.753897652 +0000 UTC m=+192.916001193 I0425 08:50:50.753964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:50:50.754330 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-25 08:50:50.754306485 +0000 UTC m=+192.916410026 I0425 08:50:50.779665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:50:50.779760 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-25 08:50:50.779752074 +0000 UTC m=+192.941855575 E0425 08:50:50.784696 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 08:50:50.784742 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-25 08:50:50.784732942 +0000 UTC m=+192.946836483 I0425 08:50:50.784793 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0425 08:50:50.795799 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0425 08:50:50.796122 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 08:50:50.796216 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0425 08:50:50.796297 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0425 08:50:50.799662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:50:50.799792 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-25 08:50:50.799778501 +0000 UTC m=+192.961882062 I0425 08:50:50.799877 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-25 08:50:50.799845463 +0000 UTC m=+192.961949054 I0425 08:50:50.825259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:50:50.825368 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-25 08:50:50.825356275 +0000 UTC m=+192.987459806 I0425 08:50:50.975094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:50:51.012033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:50:51.018671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-4l9jz" condition "Approved" to 2026-04-25 08:50:51.018641743 +0000 UTC m=+193.180745274 I0425 08:50:51.046201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-4l9jz" condition "Ready" to 2026-04-25 08:50:51.046179555 +0000 UTC m=+193.208283096 I0425 08:50:51.049187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-drfsz" condition "Approved" to 2026-04-25 08:50:51.049180734 +0000 UTC m=+193.211284245 I0425 08:50:51.066809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-drfsz" condition "Ready" to 2026-04-25 08:50:51.066786409 +0000 UTC m=+193.228889920 I0425 08:50:51.074692 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:50:51.074646604 +0000 UTC m=+193.236750115 I0425 08:50:51.093678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:50:55.796812 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:50:55.796780805 +0000 UTC m=+197.958884336 I0425 08:50:55.815274 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-drfsz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:50:55.815259876 +0000 UTC m=+197.977363397 I0425 08:50:55.847204 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:50:55.847187629 +0000 UTC m=+198.009291170 I0425 08:50:55.868227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:50:55.918949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:55:24.676556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-132.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:55:24.676629 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Issuing" to 2026-04-25 08:55:24.676594117 +0000 UTC m=+466.838697658 I0425 08:55:24.677431 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-04-25 08:55:24.677420301 +0000 UTC m=+466.839523842 I0425 08:55:24.698609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:55:24.698743 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready" to 2026-04-25 08:55:24.69873067 +0000 UTC m=+466.860834211 I0425 08:55:24.859303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:55:24.892725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-v4rq4" condition "Approved" to 2026-04-25 08:55:24.892715101 +0000 UTC m=+467.054818602 I0425 08:55:24.914315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-132.nip.io-tls-v4rq4" condition "Ready" to 2026-04-25 08:55:24.914306818 +0000 UTC m=+467.076410319 I0425 08:55:24.942878 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-132.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:55:24.942868439 +0000 UTC m=+467.104971940 I0425 08:55:24.962239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-132.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-132.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:28.593719 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-25 08:57:28.593685833 +0000 UTC m=+590.755789334 I0425 08:57:28.593828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:57:28.593950 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 08:57:28.59394267 +0000 UTC m=+590.756046181 I0425 08:57:28.616951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:28.617066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:57:28.617089 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 08:57:28.617080228 +0000 UTC m=+590.779183739 I0425 08:57:28.821476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fvwpq" condition "Approved" to 2026-04-25 08:57:28.82145217 +0000 UTC m=+590.983555711 I0425 08:57:28.842711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fvwpq" condition "Ready" to 2026-04-25 08:57:28.842695713 +0000 UTC m=+591.004799254 I0425 08:57:28.871350 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:57:28.871215777 +0000 UTC m=+591.033319318 I0425 08:57:28.892706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:28.893218 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:57:28.893209771 +0000 UTC m=+591.055313282 I0425 08:57:28.903213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:28.910971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:21.953664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:58:21.953775 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 08:58:21.95375183 +0000 UTC m=+644.115855351 I0425 08:58:21.954060 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-25 08:58:21.954055778 +0000 UTC m=+644.116159289 I0425 08:58:21.980732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:21.980828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:58:21.980850 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 08:58:21.980842922 +0000 UTC m=+644.142946413 I0425 08:58:22.164043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:22.182977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cw88h" condition "Approved" to 2026-04-25 08:58:22.182952449 +0000 UTC m=+644.345055960 I0425 08:58:22.215412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-cw88h" condition "Ready" to 2026-04-25 08:58:22.215400806 +0000 UTC m=+644.377504307 I0425 08:58:22.247967 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:22.247949726 +0000 UTC m=+644.410053227 I0425 08:58:22.272878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:44.169033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:58:44.169116 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-25 08:58:44.169077304 +0000 UTC m=+666.331180865 I0425 08:58:44.169124 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-25 08:58:44.169067724 +0000 UTC m=+666.331171235 E0425 08:58:44.185189 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 08:58:44.185275 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-25 08:58:44.185264802 +0000 UTC m=+666.347368333 E0425 08:58:44.185306 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 08:58:44.194734 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0425 08:58:44.194742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:44.194815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" E0425 08:58:44.194815 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 08:58:44.194839 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 08:58:44.194835 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-25 08:58:44.194829728 +0000 UTC m=+666.356933229 E0425 08:58:44.194862 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0425 08:58:44.235846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:44.244016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zd254" condition "Approved" to 2026-04-25 08:58:44.244006708 +0000 UTC m=+666.406110219 I0425 08:58:44.256123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zd254" condition "Ready" to 2026-04-25 08:58:44.256111607 +0000 UTC m=+666.418215118 I0425 08:58:44.277480 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:44.277463055 +0000 UTC m=+666.439566576 I0425 08:58:44.304893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:44.305180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:44.305195 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:44.305189325 +0000 UTC m=+666.467292826 I0425 08:58:44.315596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:44.321321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:44.321612 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:44.32160424 +0000 UTC m=+666.483707741 I0425 08:58:45.856986 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-25 08:58:45.856976319 +0000 UTC m=+668.019079820 I0425 08:58:45.857111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:58:45.857144 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-25 08:58:45.857136684 +0000 UTC m=+668.019240215 I0425 08:58:45.890897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:45.890954 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:58:45.890968 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-25 08:58:45.890962501 +0000 UTC m=+668.053066002 I0425 08:58:46.106769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:46.115101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fw69x" condition "Approved" to 2026-04-25 08:58:46.115084593 +0000 UTC m=+668.277188104 I0425 08:58:46.143448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fw69x" condition "Ready" to 2026-04-25 08:58:46.143435772 +0000 UTC m=+668.305539283 I0425 08:58:46.175525 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:46.175511068 +0000 UTC m=+668.337614599 I0425 08:58:46.194578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:46.194985 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:46.194975961 +0000 UTC m=+668.357079472 I0425 08:58:46.198278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:46.210615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:46.210909 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:46.2108999 +0000 UTC m=+668.373003411 I0425 08:58:46.214038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:49.195598 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:49.195583215 +0000 UTC m=+671.357686756 I0425 08:59:33.283558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:33.283584 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-25 08:59:33.28357846 +0000 UTC m=+715.445681961 I0425 08:59:33.283673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:33.283701 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-25 08:59:33.283694543 +0000 UTC m=+715.445798034 I0425 08:59:33.284098 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-25 08:59:33.284094005 +0000 UTC m=+715.446197506 I0425 08:59:33.284349 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-25 08:59:33.284345462 +0000 UTC m=+715.446448953 I0425 08:59:33.326645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:33.327052 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-25 08:59:33.327044611 +0000 UTC m=+715.489148112 I0425 08:59:33.327362 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:33.327402 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-25 08:59:33.327394531 +0000 UTC m=+715.489498032 I0425 08:59:33.327724 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-25 08:59:33.32771912 +0000 UTC m=+715.489822631 I0425 08:59:33.381708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:33.381788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:33.381812 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-25 08:59:33.381804938 +0000 UTC m=+715.543908439 I0425 08:59:33.392614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:33.394690 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-25 08:59:33.394682139 +0000 UTC m=+715.556785660 I0425 08:59:33.608920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:33.665631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z4j6q" condition "Approved" to 2026-04-25 08:59:33.665614351 +0000 UTC m=+715.827717862 I0425 08:59:33.676467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gqpfb" condition "Approved" to 2026-04-25 08:59:33.676452393 +0000 UTC m=+715.838555894 I0425 08:59:33.718246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z4j6q" condition "Ready" to 2026-04-25 08:59:33.718236767 +0000 UTC m=+715.880340268 I0425 08:59:33.723631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gqpfb" condition "Ready" to 2026-04-25 08:59:33.723621382 +0000 UTC m=+715.885724883 I0425 08:59:33.760170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:33.783039 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:33.783025452 +0000 UTC m=+715.945128943 I0425 08:59:33.789814 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:33.789800807 +0000 UTC m=+715.951904328 I0425 08:59:33.803811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:33.804103 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:33.804094868 +0000 UTC m=+715.966198379 I0425 08:59:33.816710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:33.817061 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:33.817053362 +0000 UTC m=+715.979156873 I0425 08:59:33.922015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:34.014251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:34.067586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:34.067905 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:34.067898255 +0000 UTC m=+716.230001766 I0425 08:59:34.421634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-np8bw" condition "Approved" to 2026-04-25 08:59:34.421621471 +0000 UTC m=+716.583724972 I0425 08:59:34.582847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-np8bw" condition "Ready" to 2026-04-25 08:59:34.582837853 +0000 UTC m=+716.744941344 I0425 08:59:34.989667 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-np8bw" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-z6sqw" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0425 08:59:35.173200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-682m7" condition "Approved" to 2026-04-25 08:59:35.173177353 +0000 UTC m=+717.335280854 I0425 08:59:35.440806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-682m7" condition "Ready" to 2026-04-25 08:59:35.4407893 +0000 UTC m=+717.602892831 I0425 08:59:35.725025 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:35.724968903 +0000 UTC m=+717.887072414 I0425 08:59:35.818228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:35.818735 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:35.818726823 +0000 UTC m=+717.980830334 I0425 08:59:36.019467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:36.127402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:36.127434 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-25 08:59:36.127427673 +0000 UTC m=+718.289531174 I0425 08:59:36.127455 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-25 08:59:36.127439083 +0000 UTC m=+718.289542574 I0425 08:59:36.214708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:36.214828 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-25 08:59:36.214817669 +0000 UTC m=+718.376921200 I0425 08:59:36.499213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:36.634614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cvkpw" condition "Approved" to 2026-04-25 08:59:36.634590477 +0000 UTC m=+718.796694018 I0425 08:59:36.926278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cvkpw" condition "Ready" to 2026-04-25 08:59:36.926265886 +0000 UTC m=+719.088369397 I0425 08:59:37.183962 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:37.183945427 +0000 UTC m=+719.346048938 I0425 08:59:37.268526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:37.269382 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:37.269370786 +0000 UTC m=+719.431474327 I0425 08:59:37.471407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:40.572033 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" condition "Ready" to 2026-04-25 08:59:40.572014661 +0000 UTC m=+722.734118192 I0425 08:59:40.572526 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:40.572554 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" condition "Issuing" to 2026-04-25 08:59:40.572545366 +0000 UTC m=+722.734648907 I0425 08:59:40.595582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:40.595868 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:40.595954 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" condition "Issuing" to 2026-04-25 08:59:40.595937981 +0000 UTC m=+722.758041522 I0425 08:59:40.768139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:40.775462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ph9tp-424hk" condition "Approved" to 2026-04-25 08:59:40.77544552 +0000 UTC m=+722.937549021 I0425 08:59:40.801865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ph9tp-424hk" condition "Ready" to 2026-04-25 08:59:40.80185343 +0000 UTC m=+722.963956941 I0425 08:59:40.843704 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:40.843690325 +0000 UTC m=+723.005793826 I0425 08:59:40.864157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ph9tp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:54.755425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:54.755435 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-25 08:59:54.755423324 +0000 UTC m=+736.917526845 I0425 08:59:54.755455 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-25 08:59:54.755449815 +0000 UTC m=+736.917553326 I0425 08:59:54.778164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:54.778378 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-25 08:59:54.778369104 +0000 UTC m=+736.940472615 I0425 08:59:55.029134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:55.076708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-l74k2" condition "Approved" to 2026-04-25 08:59:55.076690276 +0000 UTC m=+737.238793777 I0425 08:59:55.118653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-l74k2" condition "Ready" to 2026-04-25 08:59:55.118638244 +0000 UTC m=+737.280741765 I0425 08:59:55.157163 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:55.157152353 +0000 UTC m=+737.319255864 I0425 08:59:55.194442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:55.194759 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:55.194751175 +0000 UTC m=+737.356854686 I0425 08:59:55.229683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:41.019384 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-25 09:00:41.019368775 +0000 UTC m=+783.181472286 I0425 09:00:41.019836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:00:41.019855 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-25 09:00:41.019851708 +0000 UTC m=+783.181955219 I0425 09:00:41.043508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:41.043582 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-25 09:00:41.043573382 +0000 UTC m=+783.205676893 I0425 09:00:41.104685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:41.144516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zw65p" condition "Approved" to 2026-04-25 09:00:41.144500517 +0000 UTC m=+783.306604028 I0425 09:00:41.166036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zw65p" condition "Ready" to 2026-04-25 09:00:41.166014836 +0000 UTC m=+783.328118367 I0425 09:00:41.194567 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:00:41.194557947 +0000 UTC m=+783.356661448 I0425 09:00:41.212658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:41.275299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:08.385934 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-25 09:01:08.385916431 +0000 UTC m=+810.548019972 I0425 09:01:08.386442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:01:08.386527 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-25 09:01:08.386519628 +0000 UTC m=+810.548623159 I0425 09:01:08.414326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:08.414441 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-25 09:01:08.414432252 +0000 UTC m=+810.576535793 I0425 09:01:08.573795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:08.606490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-5wl8m" condition "Approved" to 2026-04-25 09:01:08.606473151 +0000 UTC m=+810.768576662 I0425 09:01:08.631292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-5wl8m" condition "Ready" to 2026-04-25 09:01:08.631283894 +0000 UTC m=+810.793387395 I0425 09:01:08.657958 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:01:08.657940312 +0000 UTC m=+810.820043823 I0425 09:01:08.676831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:08.677186 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:01:08.677178686 +0000 UTC m=+810.839282187 I0425 09:01:08.698797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:58.069743 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-25 09:01:58.069715623 +0000 UTC m=+860.231819134 I0425 09:01:58.070548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:01:58.070600 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-25 09:01:58.070588869 +0000 UTC m=+860.232692390 I0425 09:01:58.085404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:58.085482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:01:58.085505 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-25 09:01:58.085496278 +0000 UTC m=+860.247599789 I0425 09:01:58.222527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-25xxv" condition "Approved" to 2026-04-25 09:01:58.222514995 +0000 UTC m=+860.384618506 I0425 09:01:58.240816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-25xxv" condition "Ready" to 2026-04-25 09:01:58.240804361 +0000 UTC m=+860.402907872 I0425 09:01:58.272046 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:01:58.272032621 +0000 UTC m=+860.434136142 I0425 09:01:58.292720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:58.346120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:59.457506 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-25 09:01:59.457492171 +0000 UTC m=+861.619595672 I0425 09:01:59.457652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:01:59.457702 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-25 09:01:59.457691087 +0000 UTC m=+861.619794618 I0425 09:01:59.477674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:59.477784 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-25 09:01:59.477773075 +0000 UTC m=+861.639876616 I0425 09:01:59.645129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:59.674728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-nnbzg" condition "Approved" to 2026-04-25 09:01:59.674706828 +0000 UTC m=+861.836810369 I0425 09:01:59.692191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-nnbzg" condition "Ready" to 2026-04-25 09:01:59.692176421 +0000 UTC m=+861.854279932 I0425 09:01:59.731926 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:01:59.731913476 +0000 UTC m=+861.894016987 I0425 09:01:59.752228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:06.420209 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-25 09:03:06.420184812 +0000 UTC m=+928.582288344 I0425 09:03:06.420571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:06.420625 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-25 09:03:06.420616625 +0000 UTC m=+928.582720126 I0425 09:03:06.449467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:06.449651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:06.449683 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-25 09:03:06.449675081 +0000 UTC m=+928.611778582 I0425 09:03:06.861271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:06.872905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7qpwk" condition "Approved" to 2026-04-25 09:03:06.872892494 +0000 UTC m=+929.034996045 I0425 09:03:06.893364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7qpwk" condition "Ready" to 2026-04-25 09:03:06.893341883 +0000 UTC m=+929.055445424 I0425 09:03:06.922133 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:06.922121651 +0000 UTC m=+929.084225172 I0425 09:03:06.941042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:06.941314 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:06.941308954 +0000 UTC m=+929.103412465 I0425 09:03:06.957665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:06.964948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:06.965243 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:06.965235814 +0000 UTC m=+929.127339325 I0425 09:03:40.943758 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-25 09:03:40.943742014 +0000 UTC m=+963.105845525 I0425 09:03:40.943907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:40.943929 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-25 09:03:40.943924919 +0000 UTC m=+963.106028420 I0425 09:03:40.979048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:40.979146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:40.979166 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-25 09:03:40.979160633 +0000 UTC m=+963.141264124 I0425 09:03:44.593084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:44.617003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-b56jb" condition "Approved" to 2026-04-25 09:03:44.616984284 +0000 UTC m=+966.779087815 I0425 09:03:44.639042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-b56jb" condition "Ready" to 2026-04-25 09:03:44.639030545 +0000 UTC m=+966.801134046 I0425 09:03:44.670245 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:44.670230828 +0000 UTC m=+966.832334329 I0425 09:03:44.692606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:44.693307 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:44.693297748 +0000 UTC m=+966.855401269 I0425 09:03:44.719389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:44.720063 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:44.720054554 +0000 UTC m=+966.882158065 I0425 09:03:44.720391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:47.123875 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-25 09:03:47.123847196 +0000 UTC m=+969.285950707 I0425 09:03:47.156543 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-25 09:03:47.156522431 +0000 UTC m=+969.318625932 I0425 09:03:47.156720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:47.156774 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-25 09:03:47.156761359 +0000 UTC m=+969.318864900 I0425 09:03:47.205582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:47.205756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:47.205821 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-25 09:03:47.205775991 +0000 UTC m=+969.367879502 E0425 09:03:47.228607 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0425 09:03:47.289995 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-25 09:03:47.28996878 +0000 UTC m=+969.452072311 I0425 09:03:47.311716 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-25 09:03:47.311694202 +0000 UTC m=+969.473797713 I0425 09:03:47.312192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:47.312270 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-25 09:03:47.312251868 +0000 UTC m=+969.474355439 I0425 09:03:47.333953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:47.334077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:47.334382 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-25 09:03:47.334102623 +0000 UTC m=+969.496206134 E0425 09:03:47.444627 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0425 09:03:47.508560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:47.514314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-bg9s6" condition "Approved" to 2026-04-25 09:03:47.514298579 +0000 UTC m=+969.676402070 I0425 09:03:47.538220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-bg9s6" condition "Ready" to 2026-04-25 09:03:47.538210723 +0000 UTC m=+969.700314224 I0425 09:03:47.582217 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:47.582201862 +0000 UTC m=+969.744305363 I0425 09:03:47.614217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:47.693962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:48.117755 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-25 09:03:48.117739626 +0000 UTC m=+970.279843137 I0425 09:03:48.139763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:48.139803 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-25 09:03:48.139793647 +0000 UTC m=+970.301897158 I0425 09:03:48.140121 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-25 09:03:48.140107966 +0000 UTC m=+970.302211477 I0425 09:03:48.154917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:48.155014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:48.155047 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-25 09:03:48.155037584 +0000 UTC m=+970.317141125 I0425 09:03:48.452050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-cpzvb" condition "Approved" to 2026-04-25 09:03:48.452036652 +0000 UTC m=+970.614140143 I0425 09:03:48.477520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-cpzvb" condition "Ready" to 2026-04-25 09:03:48.4775033 +0000 UTC m=+970.639606811 I0425 09:03:48.526766 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:48.52674962 +0000 UTC m=+970.688853141 I0425 09:03:48.537946 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-25 09:03:48.53793248 +0000 UTC m=+970.700035981 I0425 09:03:48.546466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:48.546712 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:48.546708871 +0000 UTC m=+970.708812372 I0425 09:03:48.575814 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-25 09:03:48.575804633 +0000 UTC m=+970.737908134 I0425 09:03:48.575831 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:48.576314 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-25 09:03:48.576308818 +0000 UTC m=+970.738412329 I0425 09:03:48.589473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:48.589845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:48.664718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:48.664793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:48.664816 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-25 09:03:48.664810471 +0000 UTC m=+970.826913962 I0425 09:03:48.981883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:48.985657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zjzsk" condition "Approved" to 2026-04-25 09:03:48.98564921 +0000 UTC m=+971.147752711 I0425 09:03:49.004367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zjzsk" condition "Ready" to 2026-04-25 09:03:49.004353986 +0000 UTC m=+971.166457497 I0425 09:03:49.036141 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:49.036124245 +0000 UTC m=+971.198227786 I0425 09:03:49.057238 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-25 09:03:49.057223389 +0000 UTC m=+971.219326890 I0425 09:03:49.061218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:49.061573 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:49.061565032 +0000 UTC m=+971.223668533 I0425 09:03:49.073109 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-25 09:03:49.073092383 +0000 UTC m=+971.235195884 I0425 09:03:49.073276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:49.073337 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-25 09:03:49.07333261 +0000 UTC m=+971.235436111 I0425 09:03:49.239137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:49.239461 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:49.239453163 +0000 UTC m=+971.401556674 I0425 09:03:49.330924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:49.331000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:49.331020 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-25 09:03:49.331013603 +0000 UTC m=+971.493117114 I0425 09:03:49.753924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:49.761066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-q7sp6" condition "Approved" to 2026-04-25 09:03:49.761052049 +0000 UTC m=+971.923155540 I0425 09:03:49.850319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-q7sp6" condition "Ready" to 2026-04-25 09:03:49.850301452 +0000 UTC m=+972.012404993 I0425 09:03:50.290969 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:50.290953371 +0000 UTC m=+972.453056872 I0425 09:03:50.432299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:50.432608 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:50.432600224 +0000 UTC m=+972.594703725 I0425 09:03:50.636673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:32.544351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:06:32.544527 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-25 09:06:32.544441879 +0000 UTC m=+1134.706545410 I0425 09:06:32.544523 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-25 09:06:32.54448728 +0000 UTC m=+1134.706590811 I0425 09:06:32.564486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:32.564670 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-25 09:06:32.564658006 +0000 UTC m=+1134.726761537 I0425 09:06:32.737832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:32.775151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-dg4kx" condition "Approved" to 2026-04-25 09:06:32.775136587 +0000 UTC m=+1134.937240118 I0425 09:06:32.796267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-dg4kx" condition "Ready" to 2026-04-25 09:06:32.796254461 +0000 UTC m=+1134.958357972 I0425 09:06:32.823220 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:32.823200032 +0000 UTC m=+1134.985303573 I0425 09:06:32.853126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:32.853672 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:32.853662223 +0000 UTC m=+1135.015765724 I0425 09:06:32.892125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:33.980646 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-25 09:06:33.980633436 +0000 UTC m=+1136.142736937 I0425 09:06:33.980978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:06:33.981015 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-25 09:06:33.981005756 +0000 UTC m=+1136.143109267 I0425 09:06:34.001833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:34.001892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:06:34.001906 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-25 09:06:34.001900874 +0000 UTC m=+1136.164004375 I0425 09:06:34.153828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-v9wxj" condition "Approved" to 2026-04-25 09:06:34.153818109 +0000 UTC m=+1136.315921610 I0425 09:06:34.177383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-v9wxj" condition "Ready" to 2026-04-25 09:06:34.177368332 +0000 UTC m=+1136.339471843 I0425 09:06:34.214435 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:34.214420082 +0000 UTC m=+1136.376523593 I0425 09:06:34.235548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:34.236161 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:34.236149314 +0000 UTC m=+1136.398252845 I0425 09:06:34.250398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:34.262632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"