I0402 16:52:29.359067 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 16:52:29.359236 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 16:52:29.359382 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 16:52:29.366780 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 16:52:29.367366 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 16:52:29.367496 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 16:52:29.367580 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 16:52:29.371415 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 16:52:29.387464 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 16:52:29.393268 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 16:52:29.397737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 16:52:29.404158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 16:52:29.408007 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 16:52:29.408050 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 16:52:29.408116 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 16:52:29.410517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 16:52:29.412455 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 16:52:29.414074 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 16:52:29.414165 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 16:52:29.415882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 16:52:29.418554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 16:52:29.424804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 16:52:29.424945 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 16:52:29.427737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 16:52:29.430206 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 16:52:29.432498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 16:52:29.434530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 16:52:29.436425 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 16:52:29.438089 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 16:52:29.439840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 16:52:29.442713 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 16:52:29.442773 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 16:52:29.444064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 16:52:29.446406 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.448433 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.449082 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.449367 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.449591 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.449857 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.450300 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.450306 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.450625 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:29.535848 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:52:42.278025 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 16:52:42.27801342 +0000 UTC m=+12.952939224 I0402 16:52:42.965205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:52:42.965115 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 16:52:42.965100259 +0000 UTC m=+13.640026083 I0402 16:52:42.965250 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 16:52:42.965242962 +0000 UTC m=+13.640168756 E0402 16:52:42.980545 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:52:42.980669 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 16:52:42.980657069 +0000 UTC m=+13.655582903 E0402 16:52:42.980706 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:52:42.981256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:42.981370 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:52:42.981416 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 16:52:42.981404029 +0000 UTC m=+13.656329883 E0402 16:52:42.990250 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 16:52:42.990400 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:52:42.990458 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:52:42.990508 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 16:52:43.030075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:43.034770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w7gg5" condition "Approved" to 2026-04-02 16:52:43.034753729 +0000 UTC m=+13.709679573 I0402 16:52:43.049675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w7gg5" condition "Ready" to 2026-04-02 16:52:43.049661893 +0000 UTC m=+13.724587727 I0402 16:52:43.073930 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:52:43.073917113 +0000 UTC m=+13.748842927 I0402 16:52:43.093279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:47.990783 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:52:47.990768771 +0000 UTC m=+18.665694605 I0402 16:53:12.366582 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 16:53:12.366564149 +0000 UTC m=+43.041490013 I0402 16:53:12.366865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:53:12.366977 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 16:53:12.366966949 +0000 UTC m=+43.041892753 I0402 16:53:12.396866 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 16:53:12.396839959 +0000 UTC m=+43.071765923 I0402 16:53:12.400138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:12.400712 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 16:53:12.400704306 +0000 UTC m=+43.075630120 I0402 16:53:12.505794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:12.546697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-thc4w" condition "Approved" to 2026-04-02 16:53:12.546680533 +0000 UTC m=+43.221606337 I0402 16:53:12.583058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-thc4w" condition "Ready" to 2026-04-02 16:53:12.583042386 +0000 UTC m=+43.257968190 I0402 16:53:12.619771 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:53:12.619756339 +0000 UTC m=+43.294682153 I0402 16:53:12.643280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:12.644514 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:53:12.64450445 +0000 UTC m=+43.319430254 I0402 16:53:12.655145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:12.668514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:38.073319 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-02 16:55:38.073275888 +0000 UTC m=+188.748201702 I0402 16:55:38.073415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:55:38.073488 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 16:55:38.073481203 +0000 UTC m=+188.748407027 E0402 16:55:38.087023 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 16:55:38.087092 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-02 16:55:38.087086386 +0000 UTC m=+188.762012190 I0402 16:55:38.087109 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 16:55:38.090325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:38.090381 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:55:38.090402 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 16:55:38.090398499 +0000 UTC m=+188.765324293 E0402 16:55:38.097194 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0402 16:55:38.097766 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 16:55:38.097821 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 16:55:38.097871 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0402 16:55:38.103937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:55:38.103971 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-02 16:55:38.1039627 +0000 UTC m=+188.778888514 I0402 16:55:38.104441 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 16:55:38.104435332 +0000 UTC m=+188.779361136 I0402 16:55:38.119211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:38.119393 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 16:55:38.119380148 +0000 UTC m=+188.794306002 I0402 16:55:38.257911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:38.278859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:38.286636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2t2x4" condition "Approved" to 2026-04-02 16:55:38.286625736 +0000 UTC m=+188.961551540 I0402 16:55:38.290058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r6ng4" condition "Approved" to 2026-04-02 16:55:38.290032792 +0000 UTC m=+188.964958586 I0402 16:55:38.306419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2t2x4" condition "Ready" to 2026-04-02 16:55:38.306406234 +0000 UTC m=+188.981332038 I0402 16:55:38.318497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r6ng4" condition "Ready" to 2026-04-02 16:55:38.318486578 +0000 UTC m=+188.993412382 I0402 16:55:38.343729 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:38.343714692 +0000 UTC m=+189.018640526 I0402 16:55:38.359363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:38.359705 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:38.359697465 +0000 UTC m=+189.034623269 I0402 16:55:38.377425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:43.098413 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:43.098398703 +0000 UTC m=+193.773324537 I0402 16:55:43.113275 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-2t2x4" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:43.113267757 +0000 UTC m=+193.788193561 I0402 16:55:43.149529 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:43.149511299 +0000 UTC m=+193.824437133 I0402 16:55:43.166345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:43.166786 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:55:43.166775903 +0000 UTC m=+193.841701737 I0402 16:55:43.185090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:55:43.186627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:29.740213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:58:29.740209 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-02 16:58:29.740156154 +0000 UTC m=+360.415081988 I0402 16:58:29.740279 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-02 16:58:29.740268547 +0000 UTC m=+360.415194361 I0402 16:58:29.760126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:29.760213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:58:29.760236 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-02 16:58:29.760230599 +0000 UTC m=+360.435156393 I0402 16:58:29.909754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:29.915588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-bvrzc" condition "Approved" to 2026-04-02 16:58:29.915572285 +0000 UTC m=+360.590498089 I0402 16:58:29.930270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-bvrzc" condition "Ready" to 2026-04-02 16:58:29.930260774 +0000 UTC m=+360.605186578 I0402 16:58:29.952479 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:58:29.952468172 +0000 UTC m=+360.627393976 I0402 16:58:29.972860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:29.973140 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:58:29.973133671 +0000 UTC m=+360.648059475 I0402 16:58:29.984072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:29.992658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:59:41.208917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:59:41.208900 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 16:59:41.208858593 +0000 UTC m=+431.883784427 I0402 16:59:41.208962 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 16:59:41.208954876 +0000 UTC m=+431.883880700 E0402 16:59:41.220016 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:59:41.220059 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 16:59:41.220051285 +0000 UTC m=+431.894977119 E0402 16:59:41.220110 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:59:41.222541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:59:41.222625 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 16:59:41.222616129 +0000 UTC m=+431.897541963 E0402 16:59:41.234669 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 16:59:41.234743 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:59:41.234765 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:59:41.234791 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 16:59:41.239066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:59:41.260593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zzvnb" condition "Approved" to 2026-04-02 16:59:41.260583315 +0000 UTC m=+431.935509119 I0402 16:59:41.272330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zzvnb" condition "Ready" to 2026-04-02 16:59:41.27231772 +0000 UTC m=+431.947243524 I0402 16:59:41.293864 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:59:41.29384618 +0000 UTC m=+431.968771974 I0402 16:59:41.320819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:59:41.321240 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:59:41.321229789 +0000 UTC m=+431.996155623 I0402 16:59:41.322842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:59:41.340992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:59:41.341168 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:59:41.34115667 +0000 UTC m=+432.016082464 I0402 16:59:46.235501 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:59:46.235481162 +0000 UTC m=+436.910406986 I0402 17:00:24.773008 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 17:00:24.772989957 +0000 UTC m=+475.447915771 I0402 17:00:24.773422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:24.773446 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 17:00:24.773440388 +0000 UTC m=+475.448366212 I0402 17:00:24.774599 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 17:00:24.774594568 +0000 UTC m=+475.449520362 I0402 17:00:24.774785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:24.774796 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 17:00:24.774793183 +0000 UTC m=+475.449718977 I0402 17:00:24.775069 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 17:00:24.775064399 +0000 UTC m=+475.449990193 I0402 17:00:24.775226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:24.775234 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 17:00:24.775231563 +0000 UTC m=+475.450157357 I0402 17:00:24.819093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:24.819211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:24.819246 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 17:00:24.819238772 +0000 UTC m=+475.494164576 I0402 17:00:24.821361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:24.821453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:24.821479 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 17:00:24.821472807 +0000 UTC m=+475.496398601 I0402 17:00:24.832038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:24.832125 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 17:00:24.832114946 +0000 UTC m=+475.507040750 I0402 17:00:25.168183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:25.195088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-29wff" condition "Approved" to 2026-04-02 17:00:25.195069716 +0000 UTC m=+475.869995550 I0402 17:00:25.196813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5w2b2" condition "Approved" to 2026-04-02 17:00:25.196799119 +0000 UTC m=+475.871724913 I0402 17:00:25.210435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-29wff" condition "Ready" to 2026-04-02 17:00:25.210421602 +0000 UTC m=+475.885347406 I0402 17:00:25.212591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5w2b2" condition "Ready" to 2026-04-02 17:00:25.212585236 +0000 UTC m=+475.887511040 I0402 17:00:25.289208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:25.289252 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 17:00:25.289243047 +0000 UTC m=+475.964168851 I0402 17:00:25.293610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:25.293636 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 17:00:25.293631177 +0000 UTC m=+475.968556981 I0402 17:00:25.295271 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:25.295264228 +0000 UTC m=+475.970190032 I0402 17:00:25.296216 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:25.296208632 +0000 UTC m=+475.971134416 I0402 17:00:25.324096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:25.324496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:25.324808 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:25.324800192 +0000 UTC m=+475.999725986 I0402 17:00:25.326025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:25.326278 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:25.32627437 +0000 UTC m=+476.001200164 I0402 17:00:25.327940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:25.699190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mgb56" condition "Approved" to 2026-04-02 17:00:25.69917571 +0000 UTC m=+476.374101504 E0402 17:00:25.791800 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-wslh4\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0402 17:00:25.845572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ftdt4" condition "Approved" to 2026-04-02 17:00:25.845555965 +0000 UTC m=+476.520481789 I0402 17:00:26.006546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mgb56" condition "Ready" to 2026-04-02 17:00:26.006528389 +0000 UTC m=+476.681454223 I0402 17:00:26.356657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ftdt4" condition "Ready" to 2026-04-02 17:00:26.356637235 +0000 UTC m=+477.031563069 I0402 17:00:26.842003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:26.899280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lmp9w" condition "Approved" to 2026-04-02 17:00:26.89926649 +0000 UTC m=+477.574192314 I0402 17:00:27.479687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lmp9w" condition "Ready" to 2026-04-02 17:00:27.479662685 +0000 UTC m=+478.154588489 I0402 17:00:27.543836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:27.700205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:28.149353 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:28.149340708 +0000 UTC m=+478.824266512 I0402 17:00:28.192255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:28.244159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:28.442028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:28.442501 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:28.442490661 +0000 UTC m=+479.117416495 I0402 17:00:28.892763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:28.943317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:41.773188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:41.773196 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" condition "Ready" to 2026-04-02 17:00:41.773167836 +0000 UTC m=+492.448093640 I0402 17:00:41.773231 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" condition "Issuing" to 2026-04-02 17:00:41.773221598 +0000 UTC m=+492.448147402 I0402 17:00:41.792568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-twp9j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:41.792657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:41.792681 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" condition "Issuing" to 2026-04-02 17:00:41.792671367 +0000 UTC m=+492.467597201 I0402 17:00:41.927820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-twp9j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:42.001899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-twp9j-2rr4l" condition "Approved" to 2026-04-02 17:00:42.001863515 +0000 UTC m=+492.676789379 I0402 17:00:42.066369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-twp9j-2rr4l" condition "Ready" to 2026-04-02 17:00:42.066354389 +0000 UTC m=+492.741280193 I0402 17:00:42.120310 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:42.120295397 +0000 UTC m=+492.795221201 I0402 17:00:42.139116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-twp9j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:42.140271 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:42.140263351 +0000 UTC m=+492.815189145 I0402 17:00:42.160680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-twp9j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:42.167248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-twp9j-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-twp9j-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:01:28.854374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:01:28.854409 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 17:01:28.854401382 +0000 UTC m=+539.529327186 I0402 17:01:28.854411 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 17:01:28.854395962 +0000 UTC m=+539.529321766 I0402 17:01:28.873130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:01:28.873227 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 17:01:28.873216666 +0000 UTC m=+539.548142500 I0402 17:01:29.186714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:01:29.217238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vqqzh" condition "Approved" to 2026-04-02 17:01:29.217222579 +0000 UTC m=+539.892148413 I0402 17:01:29.231663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vqqzh" condition "Ready" to 2026-04-02 17:01:29.231653234 +0000 UTC m=+539.906579028 I0402 17:01:29.259607 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:01:29.259595907 +0000 UTC m=+539.934521701 I0402 17:01:29.277449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:01:29.277875 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:01:29.277866357 +0000 UTC m=+539.952792191 I0402 17:01:29.300728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:05:07.682115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:05:07.682169 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 17:05:07.68216328 +0000 UTC m=+758.357089064 I0402 17:05:07.682325 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 17:05:07.682307874 +0000 UTC m=+758.357233708 I0402 17:05:07.698552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:05:07.698627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:05:07.698657 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 17:05:07.698649907 +0000 UTC m=+758.373575711 I0402 17:05:07.938426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:05:07.950530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4jj65" condition "Approved" to 2026-04-02 17:05:07.950513672 +0000 UTC m=+758.625439496 I0402 17:05:07.969596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4jj65" condition "Ready" to 2026-04-02 17:05:07.969580764 +0000 UTC m=+758.644506588 I0402 17:05:07.993802 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:05:07.993792084 +0000 UTC m=+758.668717888 I0402 17:05:08.012532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:05:08.012786 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:05:08.012779693 +0000 UTC m=+758.687705497 I0402 17:05:08.037084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:05:08.044224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:33.131851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:07:33.131894 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 17:07:33.131311634 +0000 UTC m=+903.806237428 I0402 17:07:33.131963 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 17:07:33.13194845 +0000 UTC m=+903.806874304 I0402 17:07:33.148143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:33.148299 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 17:07:33.148288613 +0000 UTC m=+903.823214417 I0402 17:07:33.346119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:33.380002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-f4q25" condition "Approved" to 2026-04-02 17:07:33.379978738 +0000 UTC m=+904.054904572 I0402 17:07:33.400433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-f4q25" condition "Ready" to 2026-04-02 17:07:33.400418824 +0000 UTC m=+904.075344628 I0402 17:07:33.430402 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:07:33.430389302 +0000 UTC m=+904.105315106 I0402 17:07:33.458238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:33.458599 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:07:33.458590634 +0000 UTC m=+904.133516438 I0402 17:07:33.465021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:33.479436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:07:33.479899 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:07:33.479886012 +0000 UTC m=+904.154811846 I0402 17:08:52.669244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:08:52.669326 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 17:08:52.669315567 +0000 UTC m=+983.344241391 I0402 17:08:52.669941 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 17:08:52.669931842 +0000 UTC m=+983.344857666 I0402 17:08:52.693140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:08:52.693280 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 17:08:52.693268262 +0000 UTC m=+983.368194096 I0402 17:08:52.859337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:08:52.899676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hfhwn" condition "Approved" to 2026-04-02 17:08:52.899660677 +0000 UTC m=+983.574586501 I0402 17:08:52.921708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hfhwn" condition "Ready" to 2026-04-02 17:08:52.921690554 +0000 UTC m=+983.596616388 I0402 17:08:52.948426 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:08:52.948408079 +0000 UTC m=+983.623333883 I0402 17:08:52.973226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:11:56.551109 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 17:11:56.551069055 +0000 UTC m=+1167.225994859 I0402 17:11:56.551316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:11:56.551372 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 17:11:56.551366472 +0000 UTC m=+1167.226292266 I0402 17:11:56.575928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:11:56.576105 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 17:11:56.576012325 +0000 UTC m=+1167.250938149 I0402 17:11:56.667471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:11:56.717382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-nqdp8" condition "Approved" to 2026-04-02 17:11:56.717372187 +0000 UTC m=+1167.392297991 I0402 17:11:56.745692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-nqdp8" condition "Ready" to 2026-04-02 17:11:56.745679873 +0000 UTC m=+1167.420605677 I0402 17:11:56.774478 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:11:56.774469401 +0000 UTC m=+1167.449395205 I0402 17:11:56.793837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:18:06.575767 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-02 17:18:06.575071913 +0000 UTC m=+1537.249997727 I0402 17:18:06.582346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:18:06.582409 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-02 17:18:06.582402908 +0000 UTC m=+1537.257328692 I0402 17:18:06.607143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:18:06.607353 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-02 17:18:06.607344689 +0000 UTC m=+1537.282270503 I0402 17:18:06.732687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:18:06.767409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-98q6k" condition "Approved" to 2026-04-02 17:18:06.767397324 +0000 UTC m=+1537.442323118 I0402 17:18:06.791592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-98q6k" condition "Ready" to 2026-04-02 17:18:06.791582375 +0000 UTC m=+1537.466508179 I0402 17:18:06.822777 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:18:06.822759303 +0000 UTC m=+1537.497685117 I0402 17:18:06.840965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:35.721676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:19:35.721727 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-02 17:19:35.721714204 +0000 UTC m=+1626.396640008 I0402 17:19:35.721823 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-02 17:19:35.721811796 +0000 UTC m=+1626.396737620 I0402 17:19:35.738261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:35.738320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:19:35.738338 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-02 17:19:35.738334334 +0000 UTC m=+1626.413260128 I0402 17:19:36.137776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-7ndqq" condition "Approved" to 2026-04-02 17:19:36.137761981 +0000 UTC m=+1626.812687815 I0402 17:19:36.161660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-7ndqq" condition "Ready" to 2026-04-02 17:19:36.161650255 +0000 UTC m=+1626.836576049 I0402 17:19:36.192878 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:19:36.192870003 +0000 UTC m=+1626.867795797 I0402 17:19:36.212954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:36.213283 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:19:36.213276639 +0000 UTC m=+1626.888202433 I0402 17:19:36.232991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.191538 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-02 17:20:57.191495902 +0000 UTC m=+1707.866421756 I0402 17:20:57.191649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:20:57.191683 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-02 17:20:57.191672986 +0000 UTC m=+1707.866598810 I0402 17:20:57.207172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.207261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:20:57.207290 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-02 17:20:57.20728114 +0000 UTC m=+1707.882206974 I0402 17:20:57.248894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.254699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-vwhbb" condition "Approved" to 2026-04-02 17:20:57.254681837 +0000 UTC m=+1707.929607671 I0402 17:20:57.268088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-vwhbb" condition "Ready" to 2026-04-02 17:20:57.268080866 +0000 UTC m=+1707.943006660 I0402 17:20:57.293521 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:20:57.293504538 +0000 UTC m=+1707.968430372 I0402 17:20:57.312802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.365214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.853930 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-02 17:20:57.853911641 +0000 UTC m=+1708.528837465 I0402 17:20:57.854409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:20:57.854451 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-02 17:20:57.854444435 +0000 UTC m=+1708.529370269 I0402 17:20:57.870271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.870335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:20:57.870365 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-02 17:20:57.870359137 +0000 UTC m=+1708.545284931 I0402 17:20:57.915484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qn77n" condition "Approved" to 2026-04-02 17:20:57.915472206 +0000 UTC m=+1708.590398010 I0402 17:20:57.928665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qn77n" condition "Ready" to 2026-04-02 17:20:57.928654109 +0000 UTC m=+1708.603579933 I0402 17:20:57.950821 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:20:57.950807829 +0000 UTC m=+1708.625733633 I0402 17:20:57.973192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.974728 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:20:57.974711152 +0000 UTC m=+1708.649636986 I0402 17:20:57.987147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.989578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.992841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:57.993181 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:20:57.993170269 +0000 UTC m=+1708.668096103 I0402 17:20:58.525815 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-02 17:20:58.525803371 +0000 UTC m=+1709.200729175 I0402 17:20:59.210907 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-02 17:20:59.210892224 +0000 UTC m=+1709.885818048 I0402 17:21:44.350712 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-02 17:21:44.350691489 +0000 UTC m=+1755.025617303 I0402 17:21:44.352730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:21:44.352762 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-02 17:21:44.352756462 +0000 UTC m=+1755.027682256 I0402 17:21:44.379676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:21:44.379784 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:21:44.379811 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-02 17:21:44.379805024 +0000 UTC m=+1755.054730818 I0402 17:21:45.613881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-9c82t" condition "Approved" to 2026-04-02 17:21:45.613863492 +0000 UTC m=+1756.288789316 I0402 17:21:45.648556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-9c82t" condition "Ready" to 2026-04-02 17:21:45.648543888 +0000 UTC m=+1756.323469692 I0402 17:21:45.696655 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:21:45.696647043 +0000 UTC m=+1756.371572837 I0402 17:21:45.719475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:21:45.720188 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:21:45.720182048 +0000 UTC m=+1756.395107842 I0402 17:21:45.754700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:21:45.773393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:21:45.774213 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:21:45.774204322 +0000 UTC m=+1756.449130126 I0402 17:24:35.880360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:24:35.880432 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-02 17:24:35.880422913 +0000 UTC m=+1926.555348757 I0402 17:24:35.881031 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-02 17:24:35.881024459 +0000 UTC m=+1926.555950263 I0402 17:24:35.897757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:24:35.897890 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-02 17:24:35.897878804 +0000 UTC m=+1926.572804638 I0402 17:24:36.410877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:24:36.446003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-pf5l4" condition "Approved" to 2026-04-02 17:24:36.445984244 +0000 UTC m=+1927.120910038 I0402 17:24:36.462988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-pf5l4" condition "Ready" to 2026-04-02 17:24:36.462979413 +0000 UTC m=+1927.137905207 I0402 17:24:36.495368 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:24:36.49535303 +0000 UTC m=+1927.170278854 I0402 17:24:36.515500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:24:36.516712 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:24:36.516704028 +0000 UTC m=+1927.191629822 I0402 17:24:36.535759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:24:36.536841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:24:36.537428 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:24:36.537415512 +0000 UTC m=+1927.212341316 I0402 17:24:37.392894 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-02 17:24:37.392874468 +0000 UTC m=+1928.067800302 I0402 17:24:37.393118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:24:37.393202 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-02 17:24:37.393171035 +0000 UTC m=+1928.068096869 I0402 17:24:37.413670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:24:37.413892 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-02 17:24:37.413876368 +0000 UTC m=+1928.088802222 I0402 17:24:37.520231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:24:37.553574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-brr4d" condition "Approved" to 2026-04-02 17:24:37.553554693 +0000 UTC m=+1928.228480507 I0402 17:24:37.569419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-brr4d" condition "Ready" to 2026-04-02 17:24:37.569407912 +0000 UTC m=+1928.244333716 I0402 17:24:37.623591 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:24:37.62357958 +0000 UTC m=+1928.298505374 I0402 17:24:37.649378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:24:37.649632 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:24:37.649625687 +0000 UTC m=+1928.324551481 I0402 17:24:37.674567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:27:45.485060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:27:45.485082 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-02 17:27:45.485065756 +0000 UTC m=+2116.159991560 I0402 17:27:45.485158 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-02 17:27:45.485147948 +0000 UTC m=+2116.160073772 I0402 17:27:45.505899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:27:45.505995 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-02 17:27:45.505986103 +0000 UTC m=+2116.180911927 I0402 17:27:45.652810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:27:45.683532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-6j62h" condition "Approved" to 2026-04-02 17:27:45.683521985 +0000 UTC m=+2116.358447789 I0402 17:27:45.703914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-6j62h" condition "Ready" to 2026-04-02 17:27:45.703906688 +0000 UTC m=+2116.378832472 I0402 17:27:45.738670 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:27:45.738655343 +0000 UTC m=+2116.413581147 I0402 17:27:45.765397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:27:45.765737 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:27:45.765731366 +0000 UTC m=+2116.440657160 I0402 17:27:45.785643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:45.358991 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zjstm-api" condition "Ready" to 2026-04-02 17:28:45.358975659 +0000 UTC m=+2176.033901453 I0402 17:28:45.359000 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zjstm-vnc" condition "Ready" to 2026-04-02 17:28:45.358965849 +0000 UTC m=+2176.033891643 I0402 17:28:45.359137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zjstm-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:45.359174 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zjstm-vnc" condition "Issuing" to 2026-04-02 17:28:45.359163104 +0000 UTC m=+2176.034088918 I0402 17:28:45.359443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zjstm-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:45.359464 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zjstm-api" condition "Issuing" to 2026-04-02 17:28:45.359458851 +0000 UTC m=+2176.034384645 I0402 17:28:45.413776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zjstm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zjstm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:45.413851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zjstm-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:45.413866 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zjstm-vnc" condition "Issuing" to 2026-04-02 17:28:45.413860262 +0000 UTC m=+2176.088786056 I0402 17:28:45.420002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zjstm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zjstm-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:45.420092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zjstm-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:45.420113 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zjstm-api" condition "Issuing" to 2026-04-02 17:28:45.420107119 +0000 UTC m=+2176.095032923 I0402 17:28:45.653668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-zjstm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zjstm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:45.656178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-zjstm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zjstm-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:45.665251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zjstm-api-jcknl" condition "Approved" to 2026-04-02 17:28:45.665242613 +0000 UTC m=+2176.340168397 I0402 17:28:45.667656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zjstm-vnc-87k5c" condition "Approved" to 2026-04-02 17:28:45.667652094 +0000 UTC m=+2176.342577888 I0402 17:28:45.682857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zjstm-api-jcknl" condition "Ready" to 2026-04-02 17:28:45.682846107 +0000 UTC m=+2176.357771911 I0402 17:28:45.689312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zjstm-vnc-87k5c" condition "Ready" to 2026-04-02 17:28:45.6893 +0000 UTC m=+2176.364225794 I0402 17:28:45.721680 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zjstm-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:45.721670244 +0000 UTC m=+2176.396596058 I0402 17:28:45.727032 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zjstm-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:45.727018899 +0000 UTC m=+2176.401944693 I0402 17:28:45.746886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-zjstm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zjstm-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:45.747304 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zjstm-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:45.747295851 +0000 UTC m=+2176.422221655 I0402 17:28:45.747854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-zjstm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zjstm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:45.748222 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zjstm-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:45.748217123 +0000 UTC m=+2176.423142927 I0402 17:28:45.772268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-zjstm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zjstm-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:45.775159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-zjstm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zjstm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:32:24.211802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:32:24.211841 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-02 17:32:24.211831555 +0000 UTC m=+2394.886757379 I0402 17:32:24.212219 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-02 17:32:24.212198794 +0000 UTC m=+2394.887124648 I0402 17:32:24.262729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:32:24.262847 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-02 17:32:24.262836499 +0000 UTC m=+2394.937762323 I0402 17:32:24.596331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:32:24.714463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-kxlgh" condition "Approved" to 2026-04-02 17:32:24.714448675 +0000 UTC m=+2395.389374509 I0402 17:32:24.803254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-kxlgh" condition "Ready" to 2026-04-02 17:32:24.80323429 +0000 UTC m=+2395.478160114 I0402 17:32:24.912235 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:32:24.912221556 +0000 UTC m=+2395.587147350 I0402 17:32:25.012180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:32:25.012413 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:32:25.012407339 +0000 UTC m=+2395.687333133 I0402 17:32:25.065095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:32:25.885671 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-02 17:32:25.885656964 +0000 UTC m=+2396.560582768 I0402 17:32:25.885732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:32:25.885780 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-02 17:32:25.885772147 +0000 UTC m=+2396.560697951 I0402 17:32:25.923431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:32:25.923508 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-02 17:32:25.923501127 +0000 UTC m=+2396.598426931 I0402 17:32:26.183230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:32:26.870696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-mk2nr" condition "Approved" to 2026-04-02 17:32:26.870677263 +0000 UTC m=+2397.545603087 I0402 17:32:26.907579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-mk2nr" condition "Ready" to 2026-04-02 17:32:26.907569192 +0000 UTC m=+2397.582494986 I0402 17:32:27.183758 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:32:27.183742118 +0000 UTC m=+2397.858667942 I0402 17:32:27.244426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:45.567885 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-02 17:36:45.567837958 +0000 UTC m=+2656.242763772 I0402 17:36:45.568614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:36:45.568635 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-02 17:36:45.568630938 +0000 UTC m=+2656.243556752 E0402 17:36:45.589748 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:36:45.589793 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-02 17:36:45.58978788 +0000 UTC m=+2656.264713674 I0402 17:36:45.589807 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:36:45.591503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:45.591786 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-02 17:36:45.591775501 +0000 UTC m=+2656.266701325 E0402 17:36:45.603057 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0402 17:36:45.603893 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:36:45.603959 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 17:36:45.603992 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0402 17:36:45.615407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:45.639732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-tsdr2" condition "Approved" to 2026-04-02 17:36:45.639720339 +0000 UTC m=+2656.314646143 I0402 17:36:45.663401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-tsdr2" condition "Ready" to 2026-04-02 17:36:45.663387936 +0000 UTC m=+2656.338313740 I0402 17:36:45.690065 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:36:45.690054297 +0000 UTC m=+2656.364980101 I0402 17:36:45.711761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:46.286945 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-02 17:36:46.286925457 +0000 UTC m=+2656.961851291 I0402 17:36:46.286973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:36:46.287013 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-02 17:36:46.287005049 +0000 UTC m=+2656.961930853 E0402 17:36:46.322574 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:36:46.322645 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-02 17:36:46.322638537 +0000 UTC m=+2656.997564341 I0402 17:36:46.322666 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:36:46.328166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:46.328292 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-02 17:36:46.32828361 +0000 UTC m=+2657.003209404 E0402 17:36:46.339786 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0402 17:36:46.339897 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:36:46.339937 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 17:36:46.339986 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0402 17:36:46.351879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:46.352038 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-02 17:36:46.352025689 +0000 UTC m=+2657.026951513 I0402 17:36:46.359071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-hcvrg" condition "Approved" to 2026-04-02 17:36:46.359059555 +0000 UTC m=+2657.033985339 I0402 17:36:46.366910 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-02 17:36:46.366899773 +0000 UTC m=+2657.041825587 I0402 17:36:46.373100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-hcvrg" condition "Ready" to 2026-04-02 17:36:46.373088369 +0000 UTC m=+2657.048014163 I0402 17:36:46.374319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:46.407600 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:36:46.407577678 +0000 UTC m=+2657.082503512 I0402 17:36:46.428603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:46.428828 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:36:46.428819203 +0000 UTC m=+2657.103744997 I0402 17:36:46.444862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:46.453926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:47.005150 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-02 17:36:47.005131356 +0000 UTC m=+2657.680057180 I0402 17:36:47.005562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:36:47.005594 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-02 17:36:47.005590978 +0000 UTC m=+2657.680516782 I0402 17:36:47.019476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:47.019534 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:36:47.019548 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-02 17:36:47.019543419 +0000 UTC m=+2657.694469213 I0402 17:36:47.073153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-gdlrx" condition "Approved" to 2026-04-02 17:36:47.073132979 +0000 UTC m=+2657.748058783 I0402 17:36:47.088417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-gdlrx" condition "Ready" to 2026-04-02 17:36:47.088405074 +0000 UTC m=+2657.763330878 I0402 17:36:50.603927 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:36:50.603911491 +0000 UTC m=+2661.278837295 I0402 17:36:50.616697 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-gdlrx" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:36:50.616683523 +0000 UTC m=+2661.291609327 I0402 17:36:50.645958 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:36:50.64594591 +0000 UTC m=+2661.320871724 I0402 17:36:50.665187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:50.665472 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:36:50.665464602 +0000 UTC m=+2661.340390406 I0402 17:36:50.687737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:36:51.340886 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:36:51.340872981 +0000 UTC m=+2662.015798775 I0402 17:39:18.999936 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-02 17:39:18.999885935 +0000 UTC m=+2809.674811759 I0402 17:39:19.000227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:39:19.000279 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-02 17:39:19.000266485 +0000 UTC m=+2809.675192359 I0402 17:39:19.017108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:39:19.017357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:39:19.017507 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-02 17:39:19.017389176 +0000 UTC m=+2809.692315020 I0402 17:39:19.188142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:39:19.203344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-rt5pj" condition "Approved" to 2026-04-02 17:39:19.203333931 +0000 UTC m=+2809.878259725 I0402 17:39:19.222735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-rt5pj" condition "Ready" to 2026-04-02 17:39:19.22272095 +0000 UTC m=+2809.897646774 I0402 17:39:19.267175 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:39:19.2671616 +0000 UTC m=+2809.942087414 I0402 17:39:19.286394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:39:19.286878 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:39:19.286868346 +0000 UTC m=+2809.961794170 I0402 17:39:19.304812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:05.248732 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-02 17:40:05.248712248 +0000 UTC m=+2855.923638072 I0402 17:40:05.265988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:40:05.266027 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-02 17:40:05.266019484 +0000 UTC m=+2855.940945288 I0402 17:40:05.266617 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-02 17:40:05.266609539 +0000 UTC m=+2855.941535343 I0402 17:40:05.285843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:05.285934 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-02 17:40:05.285925995 +0000 UTC m=+2855.960851799 E0402 17:40:05.295846 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0402 17:40:05.341605 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-02 17:40:05.341593798 +0000 UTC m=+2856.016519592 I0402 17:40:05.363706 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:40:05.363742 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-02 17:40:05.363725116 +0000 UTC m=+2856.038650920 I0402 17:40:05.363754 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-02 17:40:05.363742256 +0000 UTC m=+2856.038668080 I0402 17:40:05.383326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:05.383400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:40:05.383421 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-02 17:40:05.383415802 +0000 UTC m=+2856.058341596 E0402 17:40:05.621079 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0402 17:40:05.780630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:05.792120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vmhg2" condition "Approved" to 2026-04-02 17:40:05.792105661 +0000 UTC m=+2856.467031475 I0402 17:40:05.816864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-vmhg2" condition "Ready" to 2026-04-02 17:40:05.816857214 +0000 UTC m=+2856.491782998 I0402 17:40:05.848189 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:40:05.848173473 +0000 UTC m=+2856.523099267 I0402 17:40:05.877087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:06.169793 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-02 17:40:06.169778728 +0000 UTC m=+2856.844704532 I0402 17:40:06.191380 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-02 17:40:06.191363942 +0000 UTC m=+2856.866289766 I0402 17:40:06.191812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:40:06.191844 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-02 17:40:06.191837254 +0000 UTC m=+2856.866763078 I0402 17:40:06.222586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:06.222699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:40:06.222769 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-02 17:40:06.222735092 +0000 UTC m=+2856.897660926 I0402 17:40:06.403149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-44ntc" condition "Approved" to 2026-04-02 17:40:06.403138058 +0000 UTC m=+2857.078063872 I0402 17:40:06.433000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-44ntc" condition "Ready" to 2026-04-02 17:40:06.43299096 +0000 UTC m=+2857.107916754 I0402 17:40:06.471887 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:40:06.4718725 +0000 UTC m=+2857.146798304 I0402 17:40:06.515308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:06.515695 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:40:06.515687944 +0000 UTC m=+2857.190613748 I0402 17:40:06.520140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:06.558085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:06.558349 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:40:06.558343339 +0000 UTC m=+2857.233269133 I0402 17:40:06.590657 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-02 17:40:06.590640343 +0000 UTC m=+2857.265566147 I0402 17:40:06.608829 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-02 17:40:06.608814771 +0000 UTC m=+2857.283740605 I0402 17:40:06.609216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:40:06.609239 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-02 17:40:06.609233842 +0000 UTC m=+2857.284159666 I0402 17:40:06.629189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:06.629248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:40:06.629267 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-02 17:40:06.629261856 +0000 UTC m=+2857.304187650 I0402 17:40:07.039251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bl6mw" condition "Approved" to 2026-04-02 17:40:07.039242277 +0000 UTC m=+2857.714168071 I0402 17:40:07.071586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bl6mw" condition "Ready" to 2026-04-02 17:40:07.071576962 +0000 UTC m=+2857.746502756 I0402 17:40:07.109394 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-02 17:40:07.109378984 +0000 UTC m=+2857.784304788 I0402 17:40:07.110067 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:40:07.110059612 +0000 UTC m=+2857.784985416 I0402 17:40:07.127696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:40:07.127720 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-02 17:40:07.127715287 +0000 UTC m=+2857.802641091 I0402 17:40:07.127814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:07.127993 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:40:07.127990503 +0000 UTC m=+2857.802916297 I0402 17:40:07.129774 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-02 17:40:07.129766028 +0000 UTC m=+2857.804691832 I0402 17:40:07.274760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:07.410484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:07.410563 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-02 17:40:07.410556424 +0000 UTC m=+2858.085482218 I0402 17:40:07.480532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:08.025716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:08.630398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9phbq" condition "Approved" to 2026-04-02 17:40:08.630383622 +0000 UTC m=+2859.305309446 I0402 17:40:08.662278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9phbq" condition "Ready" to 2026-04-02 17:40:08.662262606 +0000 UTC m=+2859.337188410 I0402 17:40:08.706315 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:40:08.706299785 +0000 UTC m=+2859.381225579 I0402 17:40:08.742266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:40:08.742650 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:40:08.742643051 +0000 UTC m=+2859.417568845 I0402 17:40:08.772419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:44:53.013259 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-02 17:44:53.013235549 +0000 UTC m=+3143.688161353 I0402 17:44:53.013730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:44:53.013751 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-02 17:44:53.013746772 +0000 UTC m=+3143.688672586 I0402 17:44:53.031268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:44:53.031379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:44:53.031402 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-02 17:44:53.031395865 +0000 UTC m=+3143.706321669 I0402 17:44:53.320912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-vthff" condition "Approved" to 2026-04-02 17:44:53.320890255 +0000 UTC m=+3143.995816089 I0402 17:44:53.357006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-vthff" condition "Ready" to 2026-04-02 17:44:53.356994351 +0000 UTC m=+3144.031920165 I0402 17:44:53.392930 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:44:53.392919854 +0000 UTC m=+3144.067845658 I0402 17:44:53.429868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:44:55.506549 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-02 17:44:55.506534294 +0000 UTC m=+3146.181460108 I0402 17:44:55.507166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:44:55.507189 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-02 17:44:55.5071847 +0000 UTC m=+3146.182110494 I0402 17:44:55.569595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:44:55.569706 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-02 17:44:55.569698409 +0000 UTC m=+3146.244624233 I0402 17:44:55.690480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:44:55.744859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-znhcg" condition "Approved" to 2026-04-02 17:44:55.744844288 +0000 UTC m=+3146.419770112 I0402 17:44:55.768708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-znhcg" condition "Ready" to 2026-04-02 17:44:55.768696657 +0000 UTC m=+3146.443622461 I0402 17:44:55.812715 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:44:55.812696542 +0000 UTC m=+3146.487622376 I0402 17:44:55.837911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:44:55.838437 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:44:55.838427669 +0000 UTC m=+3146.513353473 I0402 17:44:55.855755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:44:55.856002 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:44:55.855995079 +0000 UTC m=+3146.530920873 E0402 17:46:01.642810 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0402 17:46:28.163525 1 leaderelection.go:369] Failed to update lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0402 17:46:28.163598 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0402 17:46:35.170380 1 leaderelection.go:308] Failed to release lock: etcdserver: request timed out I0402 17:46:35.170675 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0402 17:46:35.170747 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0402 17:46:35.170786 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0402 17:46:35.170680 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0402 17:46:35.170905 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0402 17:46:35.170926 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0402 17:46:35.170957 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0402 17:46:35.170941 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0402 17:46:35.171037 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0402 17:46:35.171082 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0402 17:46:35.171115 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0402 17:46:35.171152 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0402 17:46:35.171159 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0402 17:46:35.171175 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0402 17:46:35.171188 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0402 17:46:35.171234 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0402 17:46:35.171235 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0402 17:46:35.170993 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" E0402 17:46:35.178542 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"