I0519 19:18:38.666702       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0519 19:18:38.666827       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0519 19:18:38.666933       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0519 19:18:38.673297       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0519 19:18:38.674098       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0519 19:18:38.674237       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0519 19:18:38.674234       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0519 19:18:38.678292       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0519 19:18:38.692183       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0519 19:18:38.696678       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0519 19:18:38.696761       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0519 19:18:38.700137       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0519 19:18:38.704091       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0519 19:18:38.708165       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0519 19:18:38.710719       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0519 19:18:38.713080       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0519 19:18:38.713117       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0519 19:18:38.713128       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0519 19:18:38.713139       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0519 19:18:38.713145       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0519 19:18:38.715466       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0519 19:18:38.717698       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0519 19:18:38.719602       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0519 19:18:38.724394       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0519 19:18:38.728629       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0519 19:18:38.728717       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0519 19:18:38.732811       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0519 19:18:38.735973       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0519 19:18:38.737669       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0519 19:18:38.739631       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0519 19:18:38.741506       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0519 19:18:38.743342       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0519 19:18:38.747532       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0519 19:18:38.748324       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.749446       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.750723       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.751486       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.766243       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.779664       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.798819       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.816404       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.832505       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:38.843511       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0519 19:18:51.078604       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-19 19:18:51.078584253 +0000 UTC m=+12.446156753
I0519 19:18:52.059582       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-19 19:18:52.059542529 +0000 UTC m=+13.427115029
I0519 19:18:52.059840       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:18:52.059958       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 19:18:52.059944556 +0000 UTC m=+13.427517086
E0519 19:18:52.268231       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0519 19:18:52.268363       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-19 19:18:52.268349134 +0000 UTC m=+13.635921634
E0519 19:18:52.268436       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0519 19:18:52.272410       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:18:52.272524       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:18:52.272560       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 19:18:52.272549575 +0000 UTC m=+13.640122075
E0519 19:18:52.281454       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0519 19:18:52.281617       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0519 19:18:52.281674       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0519 19:18:52.281764       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0519 19:18:52.371725       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nthxj" condition "Approved" to 2026-05-19 19:18:52.371705916 +0000 UTC m=+13.739278406
I0519 19:18:52.400773       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nthxj" condition "Ready" to 2026-05-19 19:18:52.400755876 +0000 UTC m=+13.768328376
I0519 19:18:52.434929       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:18:52.434914034 +0000 UTC m=+13.802486534
I0519 19:18:52.464356       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:18:52.464845       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:18:52.46483416 +0000 UTC m=+13.832406670
I0519 19:18:52.490184       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:18:57.282813       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:18:57.282802718 +0000 UTC m=+18.650375188
I0519 19:19:19.463049       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:19:19.463102       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 19:19:19.463092108 +0000 UTC m=+40.830664588
I0519 19:19:19.463111       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-19 19:19:19.463092718 +0000 UTC m=+40.830665198
I0519 19:19:19.479897       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-19 19:19:19.479881352 +0000 UTC m=+40.847453842
I0519 19:19:19.486159       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:19:19.486303       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:19:19.486343       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 19:19:19.486334187 +0000 UTC m=+40.853906667
I0519 19:19:19.724511       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j2nsd" condition "Approved" to 2026-05-19 19:19:19.724498043 +0000 UTC m=+41.092070533
I0519 19:19:19.753687       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j2nsd" condition "Ready" to 2026-05-19 19:19:19.753676936 +0000 UTC m=+41.121249416
I0519 19:19:19.791082       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:19:19.791069067 +0000 UTC m=+41.158641567
I0519 19:19:19.823155       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:19:19.875917       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:23:43.316350       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:23:43.316353       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-05-19 19:23:43.316304248 +0000 UTC m=+304.683876748
I0519 19:23:43.316411       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-05-19 19:23:43.31639599 +0000 UTC m=+304.683968490
I0519 19:23:43.334749       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:23:43.334876       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:23:43.334907       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-05-19 19:23:43.334897314 +0000 UTC m=+304.702469794
I0519 19:23:43.691544       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-ktjr9" condition "Approved" to 2026-05-19 19:23:43.691531725 +0000 UTC m=+305.059104205
I0519 19:23:43.723755       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-ktjr9" condition "Ready" to 2026-05-19 19:23:43.72373828 +0000 UTC m=+305.091310780
I0519 19:23:43.751425       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:23:43.751409349 +0000 UTC m=+305.118981849
I0519 19:23:43.773725       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:23:43.828547       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:24:50.104916       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 19:24:50.104874047 +0000 UTC m=+371.472446547
I0519 19:24:50.104934       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:24:50.105156       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 19:24:50.105133502 +0000 UTC m=+371.472706002
E0519 19:24:50.117309       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0519 19:24:50.117349       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-19 19:24:50.117342175 +0000 UTC m=+371.484914655
E0519 19:24:50.117387       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0519 19:24:50.119588       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:24:50.119735       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 19:24:50.119654429 +0000 UTC m=+371.487226909
E0519 19:24:50.126103       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0519 19:24:50.126270       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0519 19:24:50.126387       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0519 19:24:50.126511       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0519 19:24:50.134133       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:24:50.134212       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 19:24:50.134204046 +0000 UTC m=+371.501776526
I0519 19:24:50.137364       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:24:50.140255       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-l5hlf" condition "Approved" to 2026-05-19 19:24:50.14024715 +0000 UTC m=+371.507819630
I0519 19:24:50.144541       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 19:24:50.144528553 +0000 UTC m=+371.512101063
I0519 19:24:50.152199       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:24:50.154623       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-l5hlf" condition "Ready" to 2026-05-19 19:24:50.154614264 +0000 UTC m=+371.522186744
I0519 19:24:50.176339       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:24:50.176326357 +0000 UTC m=+371.543898837
I0519 19:24:50.189831       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:24:50.190110       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:24:50.19010337 +0000 UTC m=+371.557675850
I0519 19:24:50.207027       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:24:55.127425       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:24:55.127411725 +0000 UTC m=+376.494984225
I0519 19:25:33.071441       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 19:25:33.071418853 +0000 UTC m=+414.438991323
I0519 19:25:33.071691       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:25:33.071755       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-19 19:25:33.071733829 +0000 UTC m=+414.439306329
I0519 19:25:33.083199       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:25:33.083243       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-19 19:25:33.083234538 +0000 UTC m=+414.450807008
I0519 19:25:33.083576       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:25:33.083623       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-19 19:25:33.083614325 +0000 UTC m=+414.451186805
I0519 19:25:33.083749       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 19:25:33.083733677 +0000 UTC m=+414.451306137
I0519 19:25:33.083258       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 19:25:33.083239758 +0000 UTC m=+414.450812218
I0519 19:25:33.098554       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:33.098679       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 19:25:33.098670151 +0000 UTC m=+414.466242621
I0519 19:25:33.104566       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:33.104649       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 19:25:33.104637935 +0000 UTC m=+414.472210415
I0519 19:25:33.108806       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:33.109003       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 19:25:33.108887796 +0000 UTC m=+414.476460276
I0519 19:25:33.208873       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:33.219308       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:33.240698       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nw6j9" condition "Approved" to 2026-05-19 19:25:33.240675955 +0000 UTC m=+414.608248455
I0519 19:25:33.258449       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:33.259211       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cqqhh" condition "Approved" to 2026-05-19 19:25:33.259143107 +0000 UTC m=+414.626715607
I0519 19:25:33.262917       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nw6j9" condition "Ready" to 2026-05-19 19:25:33.262907218 +0000 UTC m=+414.630479718
I0519 19:25:33.274380       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cqqhh" condition "Ready" to 2026-05-19 19:25:33.274366417 +0000 UTC m=+414.641938877
I0519 19:25:33.289625       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:25:33.289610116 +0000 UTC m=+414.657182616
I0519 19:25:33.295632       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tfkpc" condition "Approved" to 2026-05-19 19:25:33.295624741 +0000 UTC m=+414.663197211
I0519 19:25:33.356043       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:33.356532       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:25:33.35651779 +0000 UTC m=+414.724090300
I0519 19:25:33.516187       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tfkpc" condition "Ready" to 2026-05-19 19:25:33.516170609 +0000 UTC m=+414.883743099
I0519 19:25:33.756289       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:25:33.75627627 +0000 UTC m=+415.123848750
I0519 19:25:34.159528       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:34.159862       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:25:34.159838512 +0000 UTC m=+415.527410972
I0519 19:25:34.207921       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:34.255509       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:25:34.255489592 +0000 UTC m=+415.623062092
I0519 19:25:34.554397       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:34.554887       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:25:34.554876122 +0000 UTC m=+415.922448592
I0519 19:25:34.606758       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:34.905467       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:34.954569       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:41.248974       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" condition "Ready" to 2026-05-19 19:25:41.248927618 +0000 UTC m=+422.616500098
I0519 19:25:41.249186       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:25:41.249245       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" condition "Issuing" to 2026-05-19 19:25:41.249231393 +0000 UTC m=+422.616803903
I0519 19:25:41.269715       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v57sn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:41.269821       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" condition "Ready" to 2026-05-19 19:25:41.269810495 +0000 UTC m=+422.637382975
I0519 19:25:41.368710       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v57sn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:41.400310       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-v57sn-s55tk" condition "Approved" to 2026-05-19 19:25:41.400284299 +0000 UTC m=+422.767856809
I0519 19:25:41.422856       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-v57sn-s55tk" condition "Ready" to 2026-05-19 19:25:41.422841528 +0000 UTC m=+422.790413998
I0519 19:25:41.447302       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:25:41.447287504 +0000 UTC m=+422.814859974
I0519 19:25:41.467682       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v57sn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:25:41.468318       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:25:41.468310724 +0000 UTC m=+422.835883204
I0519 19:25:41.496053       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v57sn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v57sn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:26:15.038626       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 19:26:15.03860543 +0000 UTC m=+456.406177910
I0519 19:26:15.038793       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:26:15.038841       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-19 19:26:15.038830435 +0000 UTC m=+456.406402915
I0519 19:26:15.053661       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:26:15.053756       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 19:26:15.053746198 +0000 UTC m=+456.421318678
I0519 19:26:15.200847       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:26:15.270024       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sqq97" condition "Approved" to 2026-05-19 19:26:15.270005089 +0000 UTC m=+456.637577569
I0519 19:26:15.288357       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-sqq97" condition "Ready" to 2026-05-19 19:26:15.288343788 +0000 UTC m=+456.655916258
I0519 19:26:15.318374       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:26:15.31835318 +0000 UTC m=+456.685925660
I0519 19:26:15.343256       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:26:15.389417       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:29:31.663222       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 19:29:31.663194589 +0000 UTC m=+653.030767069
I0519 19:29:31.663353       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:29:31.663432       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 19:29:31.663424973 +0000 UTC m=+653.030997453
I0519 19:29:31.683638       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:29:31.683739       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 19:29:31.683725991 +0000 UTC m=+653.051298491
I0519 19:29:31.831085       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:29:31.862376       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lnzbb" condition "Approved" to 2026-05-19 19:29:31.862365121 +0000 UTC m=+653.229937601
I0519 19:29:31.884620       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lnzbb" condition "Ready" to 2026-05-19 19:29:31.884597165 +0000 UTC m=+653.252169675
I0519 19:29:31.926283       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:29:31.926268211 +0000 UTC m=+653.293840671
I0519 19:29:31.948557       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:29:31.949095       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:29:31.949084147 +0000 UTC m=+653.316656647
I0519 19:29:31.964974       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:29:31.972886       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:31:59.905800       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-19 19:31:59.905779938 +0000 UTC m=+801.273352418
I0519 19:31:59.906192       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:31:59.906303       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-19 19:31:59.906289057 +0000 UTC m=+801.273861567
I0519 19:31:59.924344       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:31:59.924493       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-19 19:31:59.924479826 +0000 UTC m=+801.292052336
I0519 19:32:00.012783       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:32:00.046329       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-v5stt" condition "Approved" to 2026-05-19 19:32:00.046311318 +0000 UTC m=+801.413883798
I0519 19:32:00.070556       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-v5stt" condition "Ready" to 2026-05-19 19:32:00.070538022 +0000 UTC m=+801.438110532
I0519 19:32:00.112532       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:32:00.112515346 +0000 UTC m=+801.480087826
I0519 19:32:00.133530       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:32:00.134003       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:32:00.133993477 +0000 UTC m=+801.501565957
I0519 19:32:00.148405       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:32:00.160847       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:33:00.375100       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:33:00.375189       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-19 19:33:00.375162433 +0000 UTC m=+861.742734913
I0519 19:33:00.375188       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-19 19:33:00.375132382 +0000 UTC m=+861.742704892
I0519 19:33:00.395743       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:33:00.395946       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-19 19:33:00.395930371 +0000 UTC m=+861.763502921
I0519 19:33:00.869899       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:33:00.906343       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-t8xwz" condition "Approved" to 2026-05-19 19:33:00.906328163 +0000 UTC m=+862.273900643
I0519 19:33:00.929668       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-t8xwz" condition "Ready" to 2026-05-19 19:33:00.929651 +0000 UTC m=+862.297223480
I0519 19:33:00.963707       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:33:00.963688291 +0000 UTC m=+862.331260761
I0519 19:33:00.986254       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:36:07.495641       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-19 19:36:07.495503057 +0000 UTC m=+1048.863075537
I0519 19:36:07.495961       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:36:07.496047       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-19 19:36:07.496034767 +0000 UTC m=+1048.863607267
I0519 19:36:07.515082       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:36:07.515276       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:36:07.515308       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-19 19:36:07.515298965 +0000 UTC m=+1048.882871445
I0519 19:36:07.853561       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:36:07.858594       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2tngm" condition "Approved" to 2026-05-19 19:36:07.858571926 +0000 UTC m=+1049.226144406
I0519 19:36:07.876409       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2tngm" condition "Ready" to 2026-05-19 19:36:07.876386616 +0000 UTC m=+1049.243959136
I0519 19:36:07.908793       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:36:07.908778983 +0000 UTC m=+1049.276351463
I0519 19:36:07.932990       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:36:07.933474       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:36:07.933463053 +0000 UTC m=+1049.301035543
I0519 19:36:07.952509       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:36:07.952962       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:36:07.952950194 +0000 UTC m=+1049.320522704
I0519 19:42:14.119561       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-19 19:42:14.119508475 +0000 UTC m=+1415.487081005
I0519 19:42:14.119697       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:42:14.119721       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-19 19:42:14.119716329 +0000 UTC m=+1415.487288809
I0519 19:42:14.137562       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:42:14.137709       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:42:14.137740       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-19 19:42:14.137731049 +0000 UTC m=+1415.505303529
I0519 19:42:14.479549       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:42:14.490448       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-5p5lx" condition "Approved" to 2026-05-19 19:42:14.490430595 +0000 UTC m=+1415.858003065
I0519 19:42:14.511276       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-5p5lx" condition "Ready" to 2026-05-19 19:42:14.511258708 +0000 UTC m=+1415.878831178
I0519 19:42:14.544429       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:42:14.544412682 +0000 UTC m=+1415.911985162
I0519 19:42:14.565767       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:43:41.295453       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-19 19:43:41.295430283 +0000 UTC m=+1502.663002763
I0519 19:43:41.295580       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:43:41.295670       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-19 19:43:41.295661588 +0000 UTC m=+1502.663234068
I0519 19:43:41.316031       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:43:41.316139       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-19 19:43:41.316129823 +0000 UTC m=+1502.683702323
I0519 19:43:41.464363       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:43:41.493806       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-z79f2" condition "Approved" to 2026-05-19 19:43:41.493785706 +0000 UTC m=+1502.861358206
I0519 19:43:41.515319       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-z79f2" condition "Ready" to 2026-05-19 19:43:41.515307562 +0000 UTC m=+1502.882880042
I0519 19:43:41.546882       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:43:41.546869367 +0000 UTC m=+1502.914441877
I0519 19:43:41.575599       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:43:41.576042       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:43:41.576031558 +0000 UTC m=+1502.943604038
I0519 19:43:41.593199       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:43:41.593526       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:43:41.593516507 +0000 UTC m=+1502.961088987
I0519 19:44:36.354576       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-19 19:44:36.354558447 +0000 UTC m=+1557.722130927
I0519 19:44:36.355133       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:44:36.355265       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-19 19:44:36.35524863 +0000 UTC m=+1557.722821130
I0519 19:44:36.370922       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:44:36.371072       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:44:36.371138       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-19 19:44:36.37112568 +0000 UTC m=+1557.738698160
I0519 19:44:36.421934       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-fswdg" condition "Approved" to 2026-05-19 19:44:36.421915368 +0000 UTC m=+1557.789487868
I0519 19:44:36.447248       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-fswdg" condition "Ready" to 2026-05-19 19:44:36.447227185 +0000 UTC m=+1557.814799665
I0519 19:44:36.519974       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:44:36.519960128 +0000 UTC m=+1557.887532598
I0519 19:44:36.556827       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:44:36.616438       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:44:37.018407       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:44:37.018462       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-19 19:44:37.018450824 +0000 UTC m=+1558.386023304
I0519 19:44:37.018552       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-19 19:44:37.018528155 +0000 UTC m=+1558.386100635
I0519 19:44:37.035360       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:44:37.035440       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-19 19:44:37.035432424 +0000 UTC m=+1558.403004894
I0519 19:44:37.066135       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:44:37.093112       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-dq2bz" condition "Approved" to 2026-05-19 19:44:37.093090732 +0000 UTC m=+1558.460663222
I0519 19:44:37.107649       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-dq2bz" condition "Ready" to 2026-05-19 19:44:37.107636227 +0000 UTC m=+1558.475208697
I0519 19:44:37.143513       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:44:37.143495013 +0000 UTC m=+1558.511067513
I0519 19:44:37.175015       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:44:37.770136       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-19 19:44:37.770119287 +0000 UTC m=+1559.137691787
I0519 19:44:38.444984       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-19 19:44:38.44496753 +0000 UTC m=+1559.812540040
I0519 19:45:24.688542       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-19 19:45:24.688510053 +0000 UTC m=+1606.056082513
I0519 19:45:24.689073       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:45:24.689094       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-19 19:45:24.689091023 +0000 UTC m=+1606.056663483
I0519 19:45:24.721472       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:45:24.721599       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-19 19:45:24.721590746 +0000 UTC m=+1606.089163226
I0519 19:45:26.918303       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:45:26.968181       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-hnnft" condition "Approved" to 2026-05-19 19:45:26.968164477 +0000 UTC m=+1608.335736957
I0519 19:45:26.994922       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-hnnft" condition "Ready" to 2026-05-19 19:45:26.994912212 +0000 UTC m=+1608.362484682
I0519 19:45:27.031468       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:45:27.031454301 +0000 UTC m=+1608.399026781
I0519 19:45:27.059305       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:45:27.124261       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:55.251479       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-19 19:47:55.251462323 +0000 UTC m=+1756.619034793
I0519 19:47:55.251638       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:47:55.251824       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-19 19:47:55.25176058 +0000 UTC m=+1756.619333080
I0519 19:47:55.274978       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:55.275056       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:47:55.275082       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-19 19:47:55.275075303 +0000 UTC m=+1756.642647813
I0519 19:47:55.683154       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-vqwtr" condition "Approved" to 2026-05-19 19:47:55.683137953 +0000 UTC m=+1757.050710433
I0519 19:47:55.710526       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-vqwtr" condition "Ready" to 2026-05-19 19:47:55.710513233 +0000 UTC m=+1757.078085733
I0519 19:47:55.738786       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:47:55.738768791 +0000 UTC m=+1757.106341271
I0519 19:47:55.769658       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:55.770038       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:47:55.770029197 +0000 UTC m=+1757.137601667
I0519 19:47:55.774509       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:55.793106       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:55.793642       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:47:55.793629177 +0000 UTC m=+1757.161201657
I0519 19:47:55.796179       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:56.754067       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:47:56.754113       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-19 19:47:56.754103064 +0000 UTC m=+1758.121675564
I0519 19:47:56.754131       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-19 19:47:56.754097824 +0000 UTC m=+1758.121670324
I0519 19:47:56.767696       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:56.767807       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-19 19:47:56.767796044 +0000 UTC m=+1758.135368524
I0519 19:47:56.886726       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:56.920142       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-gwhns" condition "Approved" to 2026-05-19 19:47:56.920125384 +0000 UTC m=+1758.287697864
I0519 19:47:56.941252       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-gwhns" condition "Ready" to 2026-05-19 19:47:56.941239216 +0000 UTC m=+1758.308811696
I0519 19:47:56.970114       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:47:56.970095146 +0000 UTC m=+1758.337667626
I0519 19:47:56.992245       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:56.992642       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:47:56.992633365 +0000 UTC m=+1758.360205845
I0519 19:47:57.015871       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:47:57.016385       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:47:57.016374617 +0000 UTC m=+1758.383947097
I0519 19:50:57.416382       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:50:57.416435       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-19 19:50:57.416410956 +0000 UTC m=+1938.783983436
I0519 19:50:57.416603       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-19 19:50:57.416581409 +0000 UTC m=+1938.784153909
I0519 19:50:57.433530       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:50:57.433624       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:50:57.433659       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-19 19:50:57.433641964 +0000 UTC m=+1938.801214444
I0519 19:50:57.809269       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:50:57.814158       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-zknrh" condition "Approved" to 2026-05-19 19:50:57.814144032 +0000 UTC m=+1939.181716512
I0519 19:50:57.835599       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-zknrh" condition "Ready" to 2026-05-19 19:50:57.83558431 +0000 UTC m=+1939.203156780
I0519 19:50:57.868449       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:50:57.868422886 +0000 UTC m=+1939.235995396
I0519 19:50:57.890093       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.078350       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtv67-api" condition "Ready" to 2026-05-19 19:51:43.078336374 +0000 UTC m=+1984.445908854
I0519 19:51:43.078384       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtv67-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:51:43.078440       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtv67-api" condition "Issuing" to 2026-05-19 19:51:43.078428606 +0000 UTC m=+1984.446001116
I0519 19:51:43.081651       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtv67-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:51:43.081689       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtv67-vnc" condition "Issuing" to 2026-05-19 19:51:43.081680139 +0000 UTC m=+1984.449252619
I0519 19:51:43.082006       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtv67-vnc" condition "Ready" to 2026-05-19 19:51:43.081987414 +0000 UTC m=+1984.449559884
I0519 19:51:43.097496       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vtv67-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-api\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.097570       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtv67-api" condition "Ready" to 2026-05-19 19:51:43.097564521 +0000 UTC m=+1984.465137001
I0519 19:51:43.104568       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtv67-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.104683       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtv67-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:51:43.104706       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtv67-vnc" condition "Issuing" to 2026-05-19 19:51:43.104700497 +0000 UTC m=+1984.472272977
I0519 19:51:43.221220       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vtv67-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-api\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.236465       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vtv67-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.242743       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vtv67-vnc-7sw29" condition "Approved" to 2026-05-19 19:51:43.242732586 +0000 UTC m=+1984.610305066
I0519 19:51:43.252873       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vtv67-api-n69j5" condition "Approved" to 2026-05-19 19:51:43.252866469 +0000 UTC m=+1984.620438929
I0519 19:51:43.263941       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vtv67-vnc-7sw29" condition "Ready" to 2026-05-19 19:51:43.263831658 +0000 UTC m=+1984.631404118
I0519 19:51:43.277666       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vtv67-api-n69j5" condition "Ready" to 2026-05-19 19:51:43.277652371 +0000 UTC m=+1984.645224851
I0519 19:51:43.306000       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtv67-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:51:43.305985121 +0000 UTC m=+1984.673557601
I0519 19:51:43.313249       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtv67-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:51:43.313234259 +0000 UTC m=+1984.680806739
I0519 19:51:43.339230       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vtv67-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.341894       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vtv67-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-api\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.342375       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtv67-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:51:43.342362684 +0000 UTC m=+1984.709935194
I0519 19:51:43.342402       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtv67-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:51:43.342391984 +0000 UTC m=+1984.709964464
I0519 19:51:43.367913       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vtv67-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-api\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.368087       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vtv67-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-api\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.368313       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtv67-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:51:43.368305407 +0000 UTC m=+1984.735877877
I0519 19:51:43.368659       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vtv67-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtv67-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:51:43.368844       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtv67-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:51:43.368840778 +0000 UTC m=+1984.736413248
I0519 19:53:50.542363       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-19 19:53:50.54231048 +0000 UTC m=+2111.909882990
I0519 19:53:50.542440       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:53:50.543085       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-19 19:53:50.543074125 +0000 UTC m=+2111.910646745
I0519 19:53:50.573208       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:53:50.573281       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:53:50.573296       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-19 19:53:50.573291501 +0000 UTC m=+2111.940863981
I0519 19:53:50.829914       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-8jcxl" condition "Approved" to 2026-05-19 19:53:50.829890418 +0000 UTC m=+2112.197462928
I0519 19:53:50.853715       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-8jcxl" condition "Ready" to 2026-05-19 19:53:50.853700761 +0000 UTC m=+2112.221273241
I0519 19:53:50.886682       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:53:50.886666859 +0000 UTC m=+2112.254239339
I0519 19:53:50.911287       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:53:50.911800       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:53:50.911791607 +0000 UTC m=+2112.279364117
I0519 19:53:50.948331       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:28.587199       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:57:28.587281       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-19 19:57:28.587228776 +0000 UTC m=+2329.954801256
I0519 19:57:28.587423       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-19 19:57:28.587398999 +0000 UTC m=+2329.954971509
I0519 19:57:28.604624       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:28.604858       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-19 19:57:28.604823521 +0000 UTC m=+2329.972396021
I0519 19:57:29.043591       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:29.075023       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-kkcnq" condition "Approved" to 2026-05-19 19:57:29.075009264 +0000 UTC m=+2330.442581754
I0519 19:57:29.093462       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-kkcnq" condition "Ready" to 2026-05-19 19:57:29.093449355 +0000 UTC m=+2330.461021835
I0519 19:57:29.120913       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:57:29.120896468 +0000 UTC m=+2330.488468948
I0519 19:57:29.146361       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:29.146805       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:57:29.146790722 +0000 UTC m=+2330.514363202
I0519 19:57:29.166627       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:29.167041       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:57:29.167027337 +0000 UTC m=+2330.534599817
I0519 19:57:29.172030       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:30.086719       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:57:30.086767       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-19 19:57:30.086754431 +0000 UTC m=+2331.454326941
I0519 19:57:30.086851       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-19 19:57:30.086830112 +0000 UTC m=+2331.454402612
I0519 19:57:30.106001       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:30.106497       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-19 19:57:30.106485617 +0000 UTC m=+2331.474058187
I0519 19:57:30.471448       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:30.504640       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-fng88" condition "Approved" to 2026-05-19 19:57:30.504615848 +0000 UTC m=+2331.872188328
I0519 19:57:30.523094       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-fng88" condition "Ready" to 2026-05-19 19:57:30.52307964 +0000 UTC m=+2331.890652120
I0519 19:57:30.554397       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:57:30.554376596 +0000 UTC m=+2331.921949086
I0519 19:57:30.577538       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:30.579017       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:57:30.578995574 +0000 UTC m=+2331.946568034
I0519 19:57:30.609470       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:57:30.609775       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:57:30.60976577 +0000 UTC m=+2331.977338260
I0519 19:57:30.613313       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:37.758203       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-19 19:59:37.758178312 +0000 UTC m=+2459.125750792
I0519 19:59:37.758663       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:59:37.758782       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-19 19:59:37.758765994 +0000 UTC m=+2459.126338504
E0519 19:59:37.772424       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0519 19:59:37.772553       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-19 19:59:37.772542986 +0000 UTC m=+2459.140115496
I0519 19:59:37.772588       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0519 19:59:37.776634       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:37.776725       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:59:37.776758       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-19 19:59:37.776749706 +0000 UTC m=+2459.144322226
E0519 19:59:37.786114       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
E0519 19:59:37.786226       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0519 19:59:37.786267       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0519 19:59:37.786352       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
I0519 19:59:37.822580       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-9j782" condition "Approved" to 2026-05-19 19:59:37.822564048 +0000 UTC m=+2459.190136528
I0519 19:59:37.847098       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-9j782" condition "Ready" to 2026-05-19 19:59:37.847081046 +0000 UTC m=+2459.214653526
I0519 19:59:37.881428       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:37.881414029 +0000 UTC m=+2459.248986509
I0519 19:59:37.912575       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:37.912977       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:37.912969521 +0000 UTC m=+2459.280542001
I0519 19:59:37.937176       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:38.439656       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-19 19:59:38.439636649 +0000 UTC m=+2459.807209159
I0519 19:59:38.440080       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:59:38.440839       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-19 19:59:38.440132989 +0000 UTC m=+2459.807705499
E0519 19:59:38.455338       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0519 19:59:38.455382       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-19 19:59:38.455373959 +0000 UTC m=+2459.822946439
I0519 19:59:38.455429       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0519 19:59:38.464227       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:38.464347       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:59:38.464373       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-19 19:59:38.464366259 +0000 UTC m=+2459.831938739
E0519 19:59:38.466833       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
E0519 19:59:38.466958       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0519 19:59:38.466992       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0519 19:59:38.467032       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
I0519 19:59:38.509222       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:38.512798       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zj64t" condition "Approved" to 2026-05-19 19:59:38.512782632 +0000 UTC m=+2459.880355112
I0519 19:59:38.526692       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zj64t" condition "Ready" to 2026-05-19 19:59:38.526676287 +0000 UTC m=+2459.894248787
I0519 19:59:38.558701       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:38.558684737 +0000 UTC m=+2459.926257217
I0519 19:59:38.581575       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:38.581943       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:38.581931558 +0000 UTC m=+2459.949504038
I0519 19:59:38.603362       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:39.166177       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-19 19:59:39.166149774 +0000 UTC m=+2460.533722254
I0519 19:59:39.166375       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:59:39.166449       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-19 19:59:39.166434669 +0000 UTC m=+2460.534007169
I0519 19:59:39.187726       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:39.188104       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 19:59:39.188214       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-19 19:59:39.188192813 +0000 UTC m=+2460.555765293
I0519 19:59:39.233060       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:39.239669       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-stbcp" condition "Approved" to 2026-05-19 19:59:39.239644353 +0000 UTC m=+2460.607216833
I0519 19:59:39.258527       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-stbcp" condition "Ready" to 2026-05-19 19:59:39.258509703 +0000 UTC m=+2460.626082183
I0519 19:59:42.786901       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:42.786877382 +0000 UTC m=+2464.154449882
I0519 19:59:42.802971       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-stbcp" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:42.802953278 +0000 UTC m=+2464.170525758
I0519 19:59:42.835030       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:42.835016049 +0000 UTC m=+2464.202588509
I0519 19:59:42.853388       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:42.853666       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:42.853658623 +0000 UTC m=+2464.221231103
I0519 19:59:42.881510       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:42.891778       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 19:59:43.467669       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 19:59:43.467658826 +0000 UTC m=+2464.835231306
I0519 20:01:54.637482       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:01:54.637556       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-19 20:01:54.637520008 +0000 UTC m=+2596.005092508
I0519 20:01:54.637639       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-19 20:01:54.637617179 +0000 UTC m=+2596.005189659
I0519 20:01:54.656544       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:01:54.656629       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:01:54.656656       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-19 20:01:54.656651791 +0000 UTC m=+2596.024224261
I0519 20:01:55.059431       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:01:55.074609       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-pcqzc" condition "Approved" to 2026-05-19 20:01:55.07457858 +0000 UTC m=+2596.442151050
I0519 20:01:55.100714       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-pcqzc" condition "Ready" to 2026-05-19 20:01:55.100697938 +0000 UTC m=+2596.468270408
I0519 20:01:55.138536       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 20:01:55.138524988 +0000 UTC m=+2596.506097468
I0519 20:01:55.159335       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:41.582207       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-19 20:02:41.582180056 +0000 UTC m=+2642.949752536
I0519 20:02:41.605858       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-19 20:02:41.605838836 +0000 UTC m=+2642.973411356
I0519 20:02:41.605953       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:41.606003       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-19 20:02:41.605991679 +0000 UTC m=+2642.973564179
I0519 20:02:41.622105       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:41.622240       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:41.622274       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-19 20:02:41.62226302 +0000 UTC m=+2642.989835520
E0519 20:02:41.650948       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers"
I0519 20:02:41.701751       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-19 20:02:41.701731373 +0000 UTC m=+2643.069303853
I0519 20:02:41.724775       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:41.724824       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-19 20:02:41.724808102 +0000 UTC m=+2643.092380612
I0519 20:02:41.724824       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-19 20:02:41.724815292 +0000 UTC m=+2643.092387802
I0519 20:02:41.745350       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:41.745559       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:41.745598       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-19 20:02:41.745591658 +0000 UTC m=+2643.113164168
I0519 20:02:41.999501       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2vq4f" condition "Approved" to 2026-05-19 20:02:41.999489213 +0000 UTC m=+2643.367061693
I0519 20:02:42.022784       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2vq4f" condition "Ready" to 2026-05-19 20:02:42.022768136 +0000 UTC m=+2643.390340606
I0519 20:02:42.060027       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 20:02:42.060012726 +0000 UTC m=+2643.427585226
I0519 20:02:42.093803       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
E0519 20:02:42.152505       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert"
I0519 20:02:42.165990       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:42.589913       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-19 20:02:42.589890036 +0000 UTC m=+2643.957462516
I0519 20:02:42.618416       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-19 20:02:42.618395179 +0000 UTC m=+2643.985967689
I0519 20:02:42.618868       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:42.618898       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-19 20:02:42.618891478 +0000 UTC m=+2643.986463988
I0519 20:02:42.637368       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:42.637485       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:42.637527       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-19 20:02:42.637517182 +0000 UTC m=+2644.005089692
I0519 20:02:42.928078       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:42.932692       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-zwwst" condition "Approved" to 2026-05-19 20:02:42.932676933 +0000 UTC m=+2644.300249413
I0519 20:02:42.955483       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-zwwst" condition "Ready" to 2026-05-19 20:02:42.955473277 +0000 UTC m=+2644.323045747
I0519 20:02:43.004383       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 20:02:43.004371879 +0000 UTC m=+2644.371944349
I0519 20:02:43.036499       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:43.096596       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:43.196287       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-19 20:02:43.196260242 +0000 UTC m=+2644.563832722
I0519 20:02:43.228081       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-19 20:02:43.228058278 +0000 UTC m=+2644.595630768
I0519 20:02:43.228566       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:43.228591       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-19 20:02:43.228586888 +0000 UTC m=+2644.596159368
I0519 20:02:43.247352       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:43.247437       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:43.247460       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-19 20:02:43.247452368 +0000 UTC m=+2644.615024838
I0519 20:02:43.544737       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-77n6m" condition "Approved" to 2026-05-19 20:02:43.544727138 +0000 UTC m=+2644.912299608
I0519 20:02:43.591769       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-77n6m" condition "Ready" to 2026-05-19 20:02:43.591756364 +0000 UTC m=+2644.959328844
I0519 20:02:43.646420       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 20:02:43.646390554 +0000 UTC m=+2645.013963064
I0519 20:02:43.678417       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:43.821114       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-19 20:02:43.821091971 +0000 UTC m=+2645.188664451
I0519 20:02:43.848724       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0519 20:02:43.848773       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-19 20:02:43.848762327 +0000 UTC m=+2645.216334807
I0519 20:02:43.848851       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-19 20:02:43.848830548 +0000 UTC m=+2645.216403018
I0519 20:02:43.895806       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:43.895900       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-19 20:02:43.895892515 +0000 UTC m=+2645.263464985
I0519 20:02:44.098083       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:44.308977       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rcbqk" condition "Approved" to 2026-05-19 20:02:44.308955901 +0000 UTC m=+2645.676528411
I0519 20:02:44.507794       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rcbqk" condition "Ready" to 2026-05-19 20:02:44.507783547 +0000 UTC m=+2645.875356037
I0519 20:02:44.844799       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 20:02:44.844783835 +0000 UTC m=+2646.212356315
I0519 20:02:44.943417       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:44.943818       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 20:02:44.94380875 +0000 UTC m=+2646.311381230
I0519 20:02:45.196032       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0519 20:02:45.242350       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
E0519 20:03:35.977487       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out
E0519 20:04:03.982964       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out
E0519 20:04:06.913616       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded
I0519 20:04:06.913679       1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition
E0519 20:04:13.920029       1 leaderelection.go:308] Failed to release lock: etcdserver: request timed out
I0519 20:04:13.920179       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault"
I0519 20:04:13.920231       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager"
I0519 20:04:13.920251       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca"
I0519 20:04:13.920274       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics"
I0519 20:04:13.920300       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders"
I0519 20:04:13.920328       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver"
I0519 20:04:13.920209       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers"
I0519 20:04:13.920259       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim"
I0519 20:04:13.920375       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned"
I0519 20:04:13.920388       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger"
I0519 20:04:13.920476       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager"
I0519 20:04:13.920507       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness"
I0519 20:04:13.920594       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme"
I0519 20:04:13.920620       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers"
I0519 20:04:13.920646       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager"
I0519 20:04:13.920654       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing"
I0519 20:04:13.920650       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges"
I0519 20:04:13.921015       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi"
E0519 20:04:13.922151       1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"