I0428 03:24:02.853171       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0428 03:24:02.853342       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0428 03:24:02.853479       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0428 03:24:02.857057       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0428 03:24:02.857509       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0428 03:24:02.857595       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0428 03:24:02.857665       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0428 03:24:02.860058       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0428 03:24:02.878562       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0428 03:24:02.882854       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0428 03:24:02.889599       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0428 03:24:02.893681       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0428 03:24:02.893707       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0428 03:24:02.893710       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0428 03:24:02.893732       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0428 03:24:02.896243       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0428 03:24:02.896363       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0428 03:24:02.898968       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0428 03:24:02.901551       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0428 03:24:02.903932       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0428 03:24:02.903999       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0428 03:24:02.907914       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0428 03:24:02.913441       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0428 03:24:02.920110       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0428 03:24:02.925701       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0428 03:24:02.925905       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0428 03:24:02.928085       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0428 03:24:02.931302       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0428 03:24:02.933137       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0428 03:24:02.935668       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0428 03:24:02.938193       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0428 03:24:02.943919       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0428 03:24:02.948044       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0428 03:24:02.950904       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:02.951388       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:02.951739       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:02.969357       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:02.984553       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:03.017236       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:03.029900       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:03.049543       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:03.060067       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:03.069245       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 03:24:15.977580       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 03:24:15.977563692 +0000 UTC m=+13.161919550
I0428 03:24:16.705275       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 03:24:16.705256416 +0000 UTC m=+13.889612304
I0428 03:24:16.706942       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:24:16.706990       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 03:24:16.706980856 +0000 UTC m=+13.891336724
E0428 03:24:16.720061       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 03:24:16.720143       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 03:24:16.720136651 +0000 UTC m=+13.904492489
E0428 03:24:16.720168       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 03:24:16.723858       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:24:16.723944       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:24:16.723991       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 03:24:16.72398173 +0000 UTC m=+13.908337588
E0428 03:24:16.730019       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0428 03:24:16.730387       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 03:24:16.730479       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 03:24:16.730520       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0428 03:24:16.758387       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:24:16.764295       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xr4xw" condition "Approved" to 2026-04-28 03:24:16.764280466 +0000 UTC m=+13.948636324
I0428 03:24:16.775772       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xr4xw" condition "Ready" to 2026-04-28 03:24:16.775754011 +0000 UTC m=+13.960109869
I0428 03:24:16.797254       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:16.79724414 +0000 UTC m=+13.981599968
I0428 03:24:16.811528       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:24:21.731034       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:21.731020483 +0000 UTC m=+18.915376341
I0428 03:24:40.932035       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:24:40.932116       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:24:40.932107525 +0000 UTC m=+38.116463363
I0428 03:24:40.932628       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 03:24:40.932606947 +0000 UTC m=+38.116962785
I0428 03:24:40.951924       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 03:24:40.951904795 +0000 UTC m=+38.136260643
I0428 03:24:40.959556       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:24:40.959663       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:24:40.959699       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:24:40.959690155 +0000 UTC m=+38.144045993
I0428 03:24:41.226370       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:24:41.234441       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jph25" condition "Approved" to 2026-04-28 03:24:41.234427709 +0000 UTC m=+38.418783537
I0428 03:24:41.269336       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jph25" condition "Ready" to 2026-04-28 03:24:41.269324789 +0000 UTC m=+38.453680617
I0428 03:24:41.294152       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:41.294130015 +0000 UTC m=+38.478485883
I0428 03:24:41.316327       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:24:41.316710       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:41.316701029 +0000 UTC m=+38.501056867
I0428 03:24:41.345216       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:29:08.309892       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-04-28 03:29:08.309855386 +0000 UTC m=+305.494211244
I0428 03:29:08.310770       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:29:08.310795       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-28 03:29:08.310789957 +0000 UTC m=+305.495145795
I0428 03:29:08.330163       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:29:08.330351       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:29:08.330378       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-28 03:29:08.330369332 +0000 UTC m=+305.514725170
I0428 03:29:08.730096       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-9whxp" condition "Approved" to 2026-04-28 03:29:08.730064864 +0000 UTC m=+305.914420742
I0428 03:29:08.756992       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-9whxp" condition "Ready" to 2026-04-28 03:29:08.75697816 +0000 UTC m=+305.941334018
I0428 03:29:08.782074       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:08.782061473 +0000 UTC m=+305.966417331
I0428 03:29:08.810781       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:14.934877       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:30:14.934829173 +0000 UTC m=+372.119185041
I0428 03:30:14.934895       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:30:14.934997       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 03:30:14.934985617 +0000 UTC m=+372.119341475
E0428 03:30:14.948311       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 03:30:14.948362       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 03:30:14.948353928 +0000 UTC m=+372.132709756
E0428 03:30:14.948411       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 03:30:14.954014       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:14.954133       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:30:14.954119652 +0000 UTC m=+372.138475530
E0428 03:30:14.962101       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0428 03:30:14.962310       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 03:30:14.962385       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 03:30:14.962471       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0428 03:30:14.969730       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:14.969918       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:30:14.969904118 +0000 UTC m=+372.154259956
I0428 03:30:14.973008       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-g4gld" condition "Approved" to 2026-04-28 03:30:14.97299589 +0000 UTC m=+372.157351758
I0428 03:30:14.985069       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-g4gld" condition "Ready" to 2026-04-28 03:30:14.985054861 +0000 UTC m=+372.169410699
I0428 03:30:15.008156       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:15.008142758 +0000 UTC m=+372.192498616
I0428 03:30:15.023959       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:15.024464       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:15.024454917 +0000 UTC m=+372.208810775
I0428 03:30:15.042985       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:15.043720       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:19.962813       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:19.962798418 +0000 UTC m=+377.147154276
I0428 03:30:57.043884       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 03:30:57.043855242 +0000 UTC m=+414.228211070
I0428 03:30:57.044427       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:30:57.044461       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 03:30:57.044456306 +0000 UTC m=+414.228812124
I0428 03:30:57.044993       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 03:30:57.044975778 +0000 UTC m=+414.229331616
I0428 03:30:57.045472       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:30:57.045508       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 03:30:57.04550278 +0000 UTC m=+414.229858628
I0428 03:30:57.048006       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 03:30:57.047999839 +0000 UTC m=+414.232355667
I0428 03:30:57.048386       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:30:57.048407       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 03:30:57.048403738 +0000 UTC m=+414.232759566
I0428 03:30:57.124889       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:57.125003       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:30:57.125055       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 03:30:57.125044176 +0000 UTC m=+414.309400044
I0428 03:30:57.126582       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:57.128559       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:57.132766       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 03:30:57.132749896 +0000 UTC m=+414.317105754
I0428 03:30:57.132916       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:30:57.132951       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 03:30:57.13294418 +0000 UTC m=+414.317300018
I0428 03:30:57.283154       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nwhtq" condition "Approved" to 2026-04-28 03:30:57.283134784 +0000 UTC m=+414.467490612
I0428 03:30:57.305456       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nwhtq" condition "Ready" to 2026-04-28 03:30:57.305436984 +0000 UTC m=+414.489792852
I0428 03:30:57.309961       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:57.353107       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-n7mlq" condition "Approved" to 2026-04-28 03:30:57.353079645 +0000 UTC m=+414.537435513
I0428 03:30:57.354558       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:57.35454312 +0000 UTC m=+414.538898958
I0428 03:30:57.354861       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:57.369120       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ftcd5" condition "Approved" to 2026-04-28 03:30:57.369101899 +0000 UTC m=+414.553457717
I0428 03:30:57.374616       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-n7mlq" condition "Ready" to 2026-04-28 03:30:57.374602727 +0000 UTC m=+414.558958565
I0428 03:30:57.374797       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:57.375252       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:57.375235082 +0000 UTC m=+414.559590950
I0428 03:30:57.390880       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ftcd5" condition "Ready" to 2026-04-28 03:30:57.390857877 +0000 UTC m=+414.575213755
I0428 03:30:57.933198       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:57.982964       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:57.982942117 +0000 UTC m=+415.167297975
I0428 03:30:58.128161       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:58.128145605 +0000 UTC m=+415.312501443
I0428 03:30:58.232695       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:58.233200       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:58.233189785 +0000 UTC m=+415.417545643
I0428 03:30:58.332089       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:58.332748       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:58.332738037 +0000 UTC m=+415.517093895
I0428 03:30:58.630037       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:30:58.732726       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:31:05.961220       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:31:05.961260       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" condition "Issuing" to 2026-04-28 03:31:05.96125077 +0000 UTC m=+423.145606608
I0428 03:31:05.961252       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" condition "Ready" to 2026-04-28 03:31:05.96123148 +0000 UTC m=+423.145587348
I0428 03:31:05.974967       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:31:05.975044       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:31:05.975066       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" condition "Issuing" to 2026-04-28 03:31:05.975057122 +0000 UTC m=+423.159412970
I0428 03:31:06.294636       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pp5kv-8lcvz" condition "Approved" to 2026-04-28 03:31:06.294620007 +0000 UTC m=+423.478975875
I0428 03:31:06.312140       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pp5kv-8lcvz" condition "Ready" to 2026-04-28 03:31:06.312128705 +0000 UTC m=+423.496484543
I0428 03:31:06.339072       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:31:06.339058964 +0000 UTC m=+423.523414802
I0428 03:31:06.359546       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:31:06.409600       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pp5kv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:31:41.098076       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 03:31:41.098041188 +0000 UTC m=+458.282397016
I0428 03:31:41.098507       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:31:41.098523       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 03:31:41.098519749 +0000 UTC m=+458.282875577
I0428 03:31:41.110779       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:31:41.110997       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 03:31:41.11098674 +0000 UTC m=+458.295342578
I0428 03:31:41.391733       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:31:41.433536       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fkf2v" condition "Approved" to 2026-04-28 03:31:41.433518054 +0000 UTC m=+458.617873922
I0428 03:31:41.451316       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fkf2v" condition "Ready" to 2026-04-28 03:31:41.45130264 +0000 UTC m=+458.635658478
I0428 03:31:41.485283       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:31:41.485266305 +0000 UTC m=+458.669622143
I0428 03:31:41.506656       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:31:41.559609       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:35:00.186753       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 03:35:00.186705118 +0000 UTC m=+657.371060986
I0428 03:35:00.186775       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:35:00.186830       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 03:35:00.186823651 +0000 UTC m=+657.371179489
I0428 03:35:00.204918       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:35:00.205011       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 03:35:00.205001887 +0000 UTC m=+657.389357725
I0428 03:35:00.526780       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:35:00.558165       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5fhcz" condition "Approved" to 2026-04-28 03:35:00.558134562 +0000 UTC m=+657.742490420
I0428 03:35:00.582860       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5fhcz" condition "Ready" to 2026-04-28 03:35:00.58284761 +0000 UTC m=+657.767203478
I0428 03:35:00.607605       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:35:00.607589689 +0000 UTC m=+657.791945527
I0428 03:35:00.637278       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:35:00.637715       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:35:00.637707194 +0000 UTC m=+657.822063032
I0428 03:35:00.657680       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:35:00.658083       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:35:00.65807017 +0000 UTC m=+657.842426028
I0428 03:37:20.416285       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 03:37:20.416238338 +0000 UTC m=+797.600594206
I0428 03:37:20.416286       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:37:20.416401       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 03:37:20.416389922 +0000 UTC m=+797.600745790
I0428 03:37:20.434613       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:37:20.434742       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:37:20.434791       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 03:37:20.434778422 +0000 UTC m=+797.619134290
I0428 03:37:20.581135       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-76gj8" condition "Approved" to 2026-04-28 03:37:20.581113619 +0000 UTC m=+797.765469487
I0428 03:37:20.599329       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-76gj8" condition "Ready" to 2026-04-28 03:37:20.599314615 +0000 UTC m=+797.783670483
I0428 03:37:20.627885       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:37:20.627870304 +0000 UTC m=+797.812226142
I0428 03:37:20.656345       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:37:20.656633       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:37:20.656625517 +0000 UTC m=+797.840981355
I0428 03:37:20.669098       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:37:20.683460       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:37:20.686162       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:37:20.686530       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:37:20.686517747 +0000 UTC m=+797.870873575
I0428 03:38:19.564702       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 03:38:19.564672782 +0000 UTC m=+856.749028640
I0428 03:38:19.565267       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:38:19.565357       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 03:38:19.565343577 +0000 UTC m=+856.749699445
I0428 03:38:19.582780       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:38:19.582882       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 03:38:19.582871268 +0000 UTC m=+856.767227096
I0428 03:38:19.744840       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:38:19.773988       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-s4hks" condition "Approved" to 2026-04-28 03:38:19.773973513 +0000 UTC m=+856.958329341
I0428 03:38:19.799524       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-s4hks" condition "Ready" to 2026-04-28 03:38:19.79951113 +0000 UTC m=+856.983866958
I0428 03:38:19.829168       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:38:19.829152265 +0000 UTC m=+857.013508103
I0428 03:38:19.850902       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:38:19.851505       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:38:19.851490448 +0000 UTC m=+857.035846316
I0428 03:38:19.867307       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:38:19.873168       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:41:18.589665       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:41:18.589742       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 03:41:18.589732551 +0000 UTC m=+1035.774088419
I0428 03:41:18.590010       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 03:41:18.589994667 +0000 UTC m=+1035.774350495
I0428 03:41:18.611666       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:41:18.611824       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:41:18.611865       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 03:41:18.611858479 +0000 UTC m=+1035.796214317
I0428 03:41:19.140869       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mzfkw" condition "Approved" to 2026-04-28 03:41:19.140852814 +0000 UTC m=+1036.325208672
I0428 03:41:19.162270       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mzfkw" condition "Ready" to 2026-04-28 03:41:19.162263676 +0000 UTC m=+1036.346619514
I0428 03:41:19.190036       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:41:19.190028367 +0000 UTC m=+1036.374384215
I0428 03:41:19.209906       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:41:19.210347       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:41:19.210338452 +0000 UTC m=+1036.394694290
I0428 03:41:19.218090       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:41:19.237813       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:47:31.766106       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:47:31.766165       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 03:47:31.766158228 +0000 UTC m=+1408.950514066
I0428 03:47:31.766184       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-28 03:47:31.766155188 +0000 UTC m=+1408.950511016
I0428 03:47:31.781141       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:47:31.781269       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:47:31.781299       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 03:47:31.781291644 +0000 UTC m=+1408.965647472
I0428 03:47:32.023403       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:47:32.031199       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-krkk5" condition "Approved" to 2026-04-28 03:47:32.031178664 +0000 UTC m=+1409.215534512
I0428 03:47:32.048368       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-krkk5" condition "Ready" to 2026-04-28 03:47:32.048354499 +0000 UTC m=+1409.232710327
I0428 03:47:32.077497       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:47:32.077476734 +0000 UTC m=+1409.261832592
I0428 03:47:32.101721       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:47:32.102182       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:47:32.102172055 +0000 UTC m=+1409.286527903
I0428 03:47:32.117701       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:47:32.118275       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:47:32.118694       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:47:32.118685864 +0000 UTC m=+1409.303041712
I0428 03:48:53.867434       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:48:53.867465       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 03:48:53.867458613 +0000 UTC m=+1491.051814451
I0428 03:48:53.867496       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 03:48:53.867474583 +0000 UTC m=+1491.051830441
I0428 03:48:53.885592       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:48:53.885670       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 03:48:53.885662761 +0000 UTC m=+1491.070018619
I0428 03:48:54.166076       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:48:54.205451       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-w24rn" condition "Approved" to 2026-04-28 03:48:54.205413146 +0000 UTC m=+1491.389769014
I0428 03:48:54.233279       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-w24rn" condition "Ready" to 2026-04-28 03:48:54.233251701 +0000 UTC m=+1491.417607529
I0428 03:48:54.265201       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:48:54.265184612 +0000 UTC m=+1491.449540450
I0428 03:48:54.286656       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:49.572867       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:49:49.572939       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 03:49:49.572909573 +0000 UTC m=+1546.757265451
I0428 03:49:49.572966       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 03:49:49.572951874 +0000 UTC m=+1546.757307742
I0428 03:49:49.592369       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:49.592472       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 03:49:49.592459813 +0000 UTC m=+1546.776815681
I0428 03:49:49.618927       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:49.619069       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 03:49:49.619061909 +0000 UTC m=+1546.803417737
I0428 03:49:49.624168       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:49.630724       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-vvfzb" condition "Approved" to 2026-04-28 03:49:49.630712923 +0000 UTC m=+1546.815068751
I0428 03:49:49.650524       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-vvfzb" condition "Ready" to 2026-04-28 03:49:49.650507249 +0000 UTC m=+1546.834863087
I0428 03:49:49.681682       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:49:49.681665042 +0000 UTC m=+1546.866020880
I0428 03:49:49.699360       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:49.700009       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:49:49.699999554 +0000 UTC m=+1546.884355392
I0428 03:49:49.715966       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:49.716220       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:49:49.716209255 +0000 UTC m=+1546.900565093
I0428 03:49:49.718617       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:50.207473       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:49:50.207825       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 03:49:50.207806634 +0000 UTC m=+1547.392162502
I0428 03:49:50.207637       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 03:49:50.207614629 +0000 UTC m=+1547.391970487
I0428 03:49:50.226052       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:50.226165       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:49:50.226190       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 03:49:50.226183226 +0000 UTC m=+1547.410539064
I0428 03:49:50.270838       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-4cmdq" condition "Approved" to 2026-04-28 03:49:50.270816426 +0000 UTC m=+1547.455172294
I0428 03:49:50.292190       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-4cmdq" condition "Ready" to 2026-04-28 03:49:50.292173769 +0000 UTC m=+1547.476529607
I0428 03:49:50.323328       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:49:50.323308211 +0000 UTC m=+1547.507664069
I0428 03:49:50.342696       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:50.343139       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:49:50.343129468 +0000 UTC m=+1547.527485336
I0428 03:49:50.349448       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:50.365148       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:49:50.905355       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-28 03:49:50.905341888 +0000 UTC m=+1548.089697726
I0428 03:49:51.690089       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-28 03:49:51.690072204 +0000 UTC m=+1548.874428062
I0428 03:50:36.203075       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:50:36.203136       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 03:50:36.20312856 +0000 UTC m=+1593.387484378
I0428 03:50:36.203853       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 03:50:36.203837377 +0000 UTC m=+1593.388193215
I0428 03:50:36.239464       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:50:36.239534       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:50:36.239553       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 03:50:36.23954603 +0000 UTC m=+1593.423901858
I0428 03:50:40.387888       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:50:40.408366       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-xfrbg" condition "Approved" to 2026-04-28 03:50:40.408315982 +0000 UTC m=+1597.592671850
I0428 03:50:40.430863       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-xfrbg" condition "Ready" to 2026-04-28 03:50:40.430844484 +0000 UTC m=+1597.615200322
I0428 03:50:40.460723       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:50:40.460704749 +0000 UTC m=+1597.645060567
I0428 03:50:40.481490       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:50:40.482209       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:50:40.482199906 +0000 UTC m=+1597.666555744
I0428 03:50:40.506885       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:53:19.518810       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-28 03:53:19.518763373 +0000 UTC m=+1756.703119231
I0428 03:53:19.519126       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:53:19.519261       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 03:53:19.519247225 +0000 UTC m=+1756.703603113
I0428 03:53:19.535267       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:53:19.535393       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:53:19.535426       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 03:53:19.535416896 +0000 UTC m=+1756.719772754
I0428 03:53:19.871174       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:53:19.881230       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-gk4mw" condition "Approved" to 2026-04-28 03:53:19.881211986 +0000 UTC m=+1757.065567824
I0428 03:53:19.901776       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-gk4mw" condition "Ready" to 2026-04-28 03:53:19.901763711 +0000 UTC m=+1757.086119549
I0428 03:53:19.928019       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:53:19.92800477 +0000 UTC m=+1757.112360608
I0428 03:53:19.944142       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:53:19.944491       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:53:19.944483759 +0000 UTC m=+1757.128839607
I0428 03:53:19.962507       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:53:20.885977       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:53:20.886017       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-28 03:53:20.886008236 +0000 UTC m=+1758.070364074
I0428 03:53:20.886360       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 03:53:20.886353744 +0000 UTC m=+1758.070709592
I0428 03:53:20.899792       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:53:20.899924       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 03:53:20.899914434 +0000 UTC m=+1758.084270282
I0428 03:53:20.982334       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:53:21.011717       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-77jzd" condition "Approved" to 2026-04-28 03:53:21.011700002 +0000 UTC m=+1758.196055870
I0428 03:53:21.043535       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-77jzd" condition "Ready" to 2026-04-28 03:53:21.043522403 +0000 UTC m=+1758.227878241
I0428 03:53:21.069248       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:53:21.06923259 +0000 UTC m=+1758.253588428
I0428 03:53:21.089378       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:56:10.963543       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:56:10.963580       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-28 03:56:10.963572073 +0000 UTC m=+1928.147927901
I0428 03:56:10.963569       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 03:56:10.963550792 +0000 UTC m=+1928.147906670
I0428 03:56:10.985250       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:56:10.985426       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 03:56:10.98541228 +0000 UTC m=+1928.169768148
I0428 03:56:11.053376       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:56:11.079053       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-z62k2" condition "Approved" to 2026-04-28 03:56:11.079036859 +0000 UTC m=+1928.263392687
I0428 03:56:11.098209       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-z62k2" condition "Ready" to 2026-04-28 03:56:11.098192353 +0000 UTC m=+1928.282548191
I0428 03:56:11.125388       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:56:11.125365707 +0000 UTC m=+1928.309721575
I0428 03:56:11.156834       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:56:11.157184       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:56:11.157174762 +0000 UTC m=+1928.341530590
I0428 03:56:11.177212       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:16.669265       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-x5tcl-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:57:16.669331       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x5tcl-vnc" condition "Issuing" to 2026-04-28 03:57:16.669310845 +0000 UTC m=+1993.853666703
I0428 03:57:16.669386       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x5tcl-vnc" condition "Ready" to 2026-04-28 03:57:16.669373546 +0000 UTC m=+1993.853729384
I0428 03:57:16.672171       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x5tcl-api" condition "Ready" to 2026-04-28 03:57:16.672155852 +0000 UTC m=+1993.856511690
I0428 03:57:16.672501       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-x5tcl-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:57:16.672523       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x5tcl-api" condition "Issuing" to 2026-04-28 03:57:16.672519121 +0000 UTC m=+1993.856874959
I0428 03:57:16.683179       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-x5tcl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-api\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:16.683265       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x5tcl-api" condition "Ready" to 2026-04-28 03:57:16.683259365 +0000 UTC m=+1993.867615193
I0428 03:57:16.688496       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-x5tcl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:16.688554       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-x5tcl-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:57:16.688571       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x5tcl-vnc" condition "Issuing" to 2026-04-28 03:57:16.688567471 +0000 UTC m=+1993.872923299
I0428 03:57:16.858667       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-x5tcl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:16.860349       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-x5tcl-vnc-764hb" condition "Approved" to 2026-04-28 03:57:16.860331303 +0000 UTC m=+1994.044687171
I0428 03:57:16.879372       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-x5tcl-vnc-764hb" condition "Ready" to 2026-04-28 03:57:16.879362644 +0000 UTC m=+1994.063718462
I0428 03:57:16.887385       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-x5tcl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-api\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:16.901732       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-x5tcl-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:57:16.901717203 +0000 UTC m=+1994.086073041
I0428 03:57:16.917432       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-x5tcl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:16.919864       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-x5tcl-api-fwm82" condition "Approved" to 2026-04-28 03:57:16.919852033 +0000 UTC m=+1994.104207871
I0428 03:57:16.931950       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-x5tcl-api-fwm82" condition "Ready" to 2026-04-28 03:57:16.93193988 +0000 UTC m=+1994.116295718
I0428 03:57:16.966147       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-x5tcl-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:57:16.966132081 +0000 UTC m=+1994.150487919
I0428 03:57:16.978332       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-x5tcl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:16.984571       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-x5tcl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-api\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:16.984939       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-x5tcl-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:57:16.984932666 +0000 UTC m=+1994.169288504
I0428 03:57:16.991776       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-x5tcl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-api\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:57:17.004587       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-x5tcl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x5tcl-api\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:58:42.629055       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 03:58:42.629100       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-28 03:58:42.629091529 +0000 UTC m=+2079.813447377
I0428 03:58:42.629126       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-28 03:58:42.629106479 +0000 UTC m=+2079.813462337
I0428 03:58:42.653049       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:58:42.653161       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-28 03:58:42.653153809 +0000 UTC m=+2079.837509637
I0428 03:58:42.820123       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:58:42.854039       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-h2w8v" condition "Approved" to 2026-04-28 03:58:42.854026341 +0000 UTC m=+2080.038382169
I0428 03:58:42.876863       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-h2w8v" condition "Ready" to 2026-04-28 03:58:42.876852522 +0000 UTC m=+2080.061208360
I0428 03:58:42.909560       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:58:42.909542837 +0000 UTC m=+2080.093898685
I0428 03:58:42.932041       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:58:42.932326       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:58:42.932317947 +0000 UTC m=+2080.116673765
I0428 03:58:42.942941       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 03:58:42.957550       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:02:15.358594       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:02:15.358714       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-28 04:02:15.358701979 +0000 UTC m=+2292.543057847
I0428 04:02:15.358758       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 04:02:15.35874187 +0000 UTC m=+2292.543097708
I0428 04:02:15.375669       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:02:15.375766       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 04:02:15.375758204 +0000 UTC m=+2292.560114042
I0428 04:02:15.482199       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:02:15.517267       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-45r2h" condition "Approved" to 2026-04-28 04:02:15.51725674 +0000 UTC m=+2292.701612578
I0428 04:02:15.533513       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-45r2h" condition "Ready" to 2026-04-28 04:02:15.533502596 +0000 UTC m=+2292.717858434
I0428 04:02:15.565456       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:02:15.565442313 +0000 UTC m=+2292.749798171
I0428 04:02:15.588651       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:02:16.821908       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 04:02:16.821890423 +0000 UTC m=+2294.006246281
I0428 04:02:16.822274       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:02:16.822302       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 04:02:16.822296103 +0000 UTC m=+2294.006651961
I0428 04:02:16.838246       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:02:16.838317       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:02:16.838336       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 04:02:16.838329233 +0000 UTC m=+2294.022685091
I0428 04:02:16.968238       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-q8sgz" condition "Approved" to 2026-04-28 04:02:16.968229434 +0000 UTC m=+2294.152585252
I0428 04:02:16.985036       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-q8sgz" condition "Ready" to 2026-04-28 04:02:16.985025482 +0000 UTC m=+2294.169381320
I0428 04:02:17.009335       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:02:17.009325988 +0000 UTC m=+2294.193681826
I0428 04:02:17.027719       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:02:17.028149       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:02:17.028140454 +0000 UTC m=+2294.212496302
I0428 04:02:17.036036       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:02:17.053550       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:30.859890       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-28 04:04:30.859846229 +0000 UTC m=+2428.044202067
I0428 04:04:30.860385       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:04:30.860467       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 04:04:30.860452173 +0000 UTC m=+2428.044808001
E0428 04:04:30.879968       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 04:04:30.880072       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-28 04:04:30.880061691 +0000 UTC m=+2428.064417529
I0428 04:04:30.880095       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 04:04:30.883766       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:30.883916       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:04:30.883948       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 04:04:30.883938383 +0000 UTC m=+2428.068294221
E0428 04:04:30.890777       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
E0428 04:04:30.891038       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 04:04:30.891228       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0428 04:04:30.891321       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
I0428 04:04:30.928204       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:30.933295       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-cr5hv" condition "Approved" to 2026-04-28 04:04:30.93327724 +0000 UTC m=+2428.117633078
I0428 04:04:30.958548       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-cr5hv" condition "Ready" to 2026-04-28 04:04:30.958530612 +0000 UTC m=+2428.142886480
I0428 04:04:30.985737       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:30.985721241 +0000 UTC m=+2428.170077059
I0428 04:04:31.005242       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:31.005578       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:31.005570034 +0000 UTC m=+2428.189925882
I0428 04:04:31.025392       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:31.509184       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:04:31.509231       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-28 04:04:31.509220874 +0000 UTC m=+2428.693576742
I0428 04:04:31.509607       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 04:04:31.509590993 +0000 UTC m=+2428.693946851
E0428 04:04:31.529277       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 04:04:31.529312       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-28 04:04:31.529305823 +0000 UTC m=+2428.713661651
I0428 04:04:31.529352       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 04:04:31.534170       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:31.535068       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 04:04:31.53505346 +0000 UTC m=+2428.719409418
E0428 04:04:31.540972       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
E0428 04:04:31.541055       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 04:04:31.541084       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0428 04:04:31.541114       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
I0428 04:04:31.557853       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:31.588038       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-rt925" condition "Approved" to 2026-04-28 04:04:31.588026173 +0000 UTC m=+2428.772382001
I0428 04:04:31.604259       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-rt925" condition "Ready" to 2026-04-28 04:04:31.604248719 +0000 UTC m=+2428.788604547
I0428 04:04:31.626497       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:31.626441999 +0000 UTC m=+2428.810797857
I0428 04:04:31.648050       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:31.648203       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:31.648197148 +0000 UTC m=+2428.832552976
I0428 04:04:31.670947       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:32.215237       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 04:04:32.215217289 +0000 UTC m=+2429.399573157
I0428 04:04:32.215741       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:04:32.215771       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-28 04:04:32.215764282 +0000 UTC m=+2429.400120140
I0428 04:04:32.229612       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:32.229703       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 04:04:32.229695224 +0000 UTC m=+2429.414051092
I0428 04:04:32.248091       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:32.275613       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-4l76n" condition "Approved" to 2026-04-28 04:04:32.275603858 +0000 UTC m=+2429.459959686
I0428 04:04:32.287690       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-4l76n" condition "Ready" to 2026-04-28 04:04:32.287676086 +0000 UTC m=+2429.472031934
I0428 04:04:35.891878       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:35.891859978 +0000 UTC m=+2433.076215836
I0428 04:04:35.904128       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-4l76n" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:35.904119161 +0000 UTC m=+2433.088474999
I0428 04:04:35.931620       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:35.931607626 +0000 UTC m=+2433.115963444
I0428 04:04:35.960222       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:35.960492       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:35.960485894 +0000 UTC m=+2433.144841722
I0428 04:04:35.973660       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:35.988748       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:04:36.541503       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:04:36.541493059 +0000 UTC m=+2433.725848897
I0428 04:06:41.662224       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:06:41.662233       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-28 04:06:41.662221051 +0000 UTC m=+2558.846576889
I0428 04:06:41.662274       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 04:06:41.662264162 +0000 UTC m=+2558.846620020
I0428 04:06:41.678829       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:06:41.678905       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:06:41.678919       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 04:06:41.678914069 +0000 UTC m=+2558.863269907
I0428 04:06:42.148426       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-gbcw6" condition "Approved" to 2026-04-28 04:06:42.148415004 +0000 UTC m=+2559.332770832
I0428 04:06:42.185083       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-gbcw6" condition "Ready" to 2026-04-28 04:06:42.185061257 +0000 UTC m=+2559.369417095
I0428 04:06:42.211805       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:06:42.211790265 +0000 UTC m=+2559.396146093
I0428 04:06:42.228969       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:06:42.229316       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:06:42.229310182 +0000 UTC m=+2559.413666000
I0428 04:06:42.263422       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:28.379679       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-28 04:07:28.379637587 +0000 UTC m=+2605.563993445
I0428 04:07:28.401033       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 04:07:28.401014685 +0000 UTC m=+2605.585370543
I0428 04:07:28.401500       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:07:28.401521       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 04:07:28.401515087 +0000 UTC m=+2605.585870945
I0428 04:07:28.414959       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:28.415020       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 04:07:28.415013858 +0000 UTC m=+2605.599369696
E0428 04:07:28.437004       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers"
I0428 04:07:28.491168       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-28 04:07:28.491149083 +0000 UTC m=+2605.675504921
I0428 04:07:28.511576       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:07:28.511650       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-28 04:07:28.511635801 +0000 UTC m=+2605.695991669
I0428 04:07:28.511710       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 04:07:28.511687812 +0000 UTC m=+2605.696043730
I0428 04:07:28.529839       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:28.529981       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 04:07:28.529968918 +0000 UTC m=+2605.714324786
E0428 04:07:28.638812       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert"
I0428 04:07:28.639058       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:28.673022       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-wp4gs" condition "Approved" to 2026-04-28 04:07:28.673010297 +0000 UTC m=+2605.857366125
I0428 04:07:28.693426       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-wp4gs" condition "Ready" to 2026-04-28 04:07:28.693415193 +0000 UTC m=+2605.877771021
I0428 04:07:28.765566       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:07:28.765553612 +0000 UTC m=+2605.949909440
I0428 04:07:28.808083       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:29.250151       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-28 04:07:29.25013564 +0000 UTC m=+2606.434491488
I0428 04:07:29.273284       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-28 04:07:29.273266371 +0000 UTC m=+2606.457622209
I0428 04:07:29.273683       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:07:29.273714       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 04:07:29.273709652 +0000 UTC m=+2606.458065490
I0428 04:07:29.289906       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:29.289980       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:07:29.290007       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 04:07:29.28999688 +0000 UTC m=+2606.474352708
I0428 04:07:29.504147       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2f9q4" condition "Approved" to 2026-04-28 04:07:29.504130573 +0000 UTC m=+2606.688486401
I0428 04:07:29.533840       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2f9q4" condition "Ready" to 2026-04-28 04:07:29.533828621 +0000 UTC m=+2606.718184459
I0428 04:07:29.564836       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:07:29.564821439 +0000 UTC m=+2606.749177287
I0428 04:07:29.598025       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:29.705135       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-28 04:07:29.705110472 +0000 UTC m=+2606.889466330
I0428 04:07:29.736226       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:07:29.736373       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 04:07:29.736330107 +0000 UTC m=+2606.920685935
I0428 04:07:29.736314       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 04:07:29.736302036 +0000 UTC m=+2606.920657904
I0428 04:07:29.756812       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:29.756899       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:07:29.756937       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 04:07:29.756926267 +0000 UTC m=+2606.941282105
I0428 04:07:30.143046       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-28 04:07:30.143029268 +0000 UTC m=+2607.327385106
I0428 04:07:30.170061       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:07:30.170100       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 04:07:30.170089453 +0000 UTC m=+2607.354445281
I0428 04:07:30.170343       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-28 04:07:30.170322259 +0000 UTC m=+2607.354678077
I0428 04:07:30.192860       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:30.192936       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-28 04:07:30.192928597 +0000 UTC m=+2607.377284435
I0428 04:07:30.221718       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-g67zv" condition "Approved" to 2026-04-28 04:07:30.221706383 +0000 UTC m=+2607.406062211
I0428 04:07:30.253976       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-g67zv" condition "Ready" to 2026-04-28 04:07:30.253956422 +0000 UTC m=+2607.438312260
I0428 04:07:30.295470       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:07:30.295452611 +0000 UTC m=+2607.479808439
I0428 04:07:30.328797       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:30.329031       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:07:30.329026661 +0000 UTC m=+2607.513382489
I0428 04:07:30.495745       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:30.661669       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:30.823792       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-57p9c" condition "Approved" to 2026-04-28 04:07:30.823769361 +0000 UTC m=+2608.008125179
I0428 04:07:30.902289       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-57p9c" condition "Ready" to 2026-04-28 04:07:30.902276302 +0000 UTC m=+2608.086632130
I0428 04:07:31.341576       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:07:31.34155245 +0000 UTC m=+2608.525908308
I0428 04:07:31.490171       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:31.490647       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:07:31.490637562 +0000 UTC m=+2608.674993400
I0428 04:07:31.742922       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:07:31.791588       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:10:58.716960       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-28 04:10:58.71691795 +0000 UTC m=+2815.901273788
I0428 04:10:58.717318       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:10:58.717337       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-28 04:10:58.71733353 +0000 UTC m=+2815.901689368
I0428 04:10:58.737848       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:10:58.737974       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:10:58.738063       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-28 04:10:58.737992642 +0000 UTC m=+2815.922348500
I0428 04:10:59.070644       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-cnkjg" condition "Approved" to 2026-04-28 04:10:59.070625079 +0000 UTC m=+2816.254980907
I0428 04:10:59.098625       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-cnkjg" condition "Ready" to 2026-04-28 04:10:59.098606495 +0000 UTC m=+2816.282962363
I0428 04:10:59.126078       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:10:59.12606413 +0000 UTC m=+2816.310419968
I0428 04:10:59.146755       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:11:01.133200       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-28 04:11:01.133170769 +0000 UTC m=+2818.317526607
I0428 04:11:01.133556       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:11:01.133679       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-28 04:11:01.133588879 +0000 UTC m=+2818.317944717
I0428 04:11:01.155658       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:11:01.155772       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-28 04:11:01.155764308 +0000 UTC m=+2818.340120156
I0428 04:11:01.314828       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:11:01.358731       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-kmnsv" condition "Approved" to 2026-04-28 04:11:01.358713234 +0000 UTC m=+2818.543069092
I0428 04:11:01.377314       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-kmnsv" condition "Ready" to 2026-04-28 04:11:01.377300157 +0000 UTC m=+2818.561655995
I0428 04:11:01.405135       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:11:01.40511712 +0000 UTC m=+2818.589472958
I0428 04:11:01.438381       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:11:01.438834       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:11:01.438815193 +0000 UTC m=+2818.623171031
I0428 04:11:01.450741       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:11:01.464107       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:11:01.464601       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:11:01.464589817 +0000 UTC m=+2818.648945655
I0428 04:15:09.181569       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:15:09.181636       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-28 04:15:09.181628766 +0000 UTC m=+3066.365984624
I0428 04:15:09.181698       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 04:15:09.181678387 +0000 UTC m=+3066.366034235
I0428 04:15:09.197736       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:15:09.197849       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 04:15:09.197839183 +0000 UTC m=+3066.382195051
I0428 04:15:09.279168       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:15:09.308563       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-8tzw7" condition "Approved" to 2026-04-28 04:15:09.308553137 +0000 UTC m=+3066.492908975
I0428 04:15:09.325303       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-8tzw7" condition "Ready" to 2026-04-28 04:15:09.325293387 +0000 UTC m=+3066.509649225
I0428 04:15:09.355924       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:15:09.355912908 +0000 UTC m=+3066.540268746
I0428 04:15:09.375062       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:15:09.413300       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:15:42.631756       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 04:15:42.631827       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 04:15:42.631804532 +0000 UTC m=+3099.816160400
I0428 04:15:42.631804       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 04:15:42.631793672 +0000 UTC m=+3099.816149540
I0428 04:15:42.648900       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:15:42.649029       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 04:15:42.649020954 +0000 UTC m=+3099.833376792
I0428 04:15:42.817512       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:15:42.845955       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-59dnj" condition "Approved" to 2026-04-28 04:15:42.845946186 +0000 UTC m=+3100.030302024
I0428 04:15:42.863444       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-59dnj" condition "Ready" to 2026-04-28 04:15:42.863433594 +0000 UTC m=+3100.047789432
I0428 04:15:42.889074       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:15:42.889056226 +0000 UTC m=+3100.073412084
I0428 04:15:42.907159       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:15:42.907546       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:15:42.907539697 +0000 UTC m=+3100.091895525
I0428 04:15:42.916131       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 04:15:42.927070       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"