I0428 22:28:40.373223 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0428 22:28:40.373340 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0428 22:28:40.373406 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 22:28:40.378415 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0428 22:28:40.378888 1 controller.go:156] "cert-manager/controller: starting leader election" I0428 22:28:40.378893 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0428 22:28:40.378952 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0428 22:28:40.382928 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 22:28:40.402262 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0428 22:28:40.402531 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0428 22:28:40.407315 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0428 22:28:40.411043 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0428 22:28:40.413678 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0428 22:28:40.416061 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0428 22:28:40.418318 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0428 22:28:40.418447 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0428 22:28:40.420235 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0428 22:28:40.422191 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0428 22:28:40.427747 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0428 22:28:40.427849 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0428 22:28:40.431988 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0428 22:28:40.434445 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0428 22:28:40.436978 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0428 22:28:40.439800 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0428 22:28:40.441495 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0428 22:28:40.443556 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0428 22:28:40.445352 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0428 22:28:40.447057 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0428 22:28:40.447083 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0428 22:28:40.447091 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0428 22:28:40.447509 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0428 22:28:40.452323 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0428 22:28:40.454822 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0428 22:28:53.098120 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 22:28:53.098080118 +0000 UTC m=+12.758424095 I0428 22:28:53.794797 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:28:53.794853 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 22:28:53.794842437 +0000 UTC m=+13.455186404 I0428 22:28:53.794953 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:28:53.794931569 +0000 UTC m=+13.455275576 E0428 22:28:53.807417 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:28:53.807510 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 22:28:53.807500512 +0000 UTC m=+13.467844489 E0428 22:28:53.807555 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:28:53.814224 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:53.814316 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:28:53.814343 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 22:28:53.814333821 +0000 UTC m=+13.474677798 E0428 22:28:53.826158 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0428 22:28:53.826469 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:28:53.826515 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:28:53.826602 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0428 22:28:53.846295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5l999" condition "Approved" to 2026-04-28 22:28:53.846281806 +0000 UTC m=+13.506625783 I0428 22:28:53.858074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5l999" condition "Ready" to 2026-04-28 22:28:53.858062654 +0000 UTC m=+13.518406601 I0428 22:28:53.879130 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:53.87911791 +0000 UTC m=+13.539461887 I0428 22:28:53.896823 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:53.897245 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:53.897236955 +0000 UTC m=+13.557580982 I0428 22:28:53.909759 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:53.911139 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:28:53.911617 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:53.911585616 +0000 UTC m=+13.571929593 I0428 22:28:58.827137 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:28:58.827123299 +0000 UTC m=+18.487467266 I0428 22:29:18.495540 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:29:18.495679 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 22:29:18.495654863 +0000 UTC m=+38.155998810 I0428 22:29:18.495708 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 22:29:18.495645263 +0000 UTC m=+38.155989240 I0428 22:29:18.513164 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 22:29:18.513152257 +0000 UTC m=+38.173496204 I0428 22:29:18.517652 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:18.517787 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:29:18.517829 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 22:29:18.517819831 +0000 UTC m=+38.178163768 I0428 22:29:18.852077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-89jx2" condition "Approved" to 2026-04-28 22:29:18.852058624 +0000 UTC m=+38.512402591 I0428 22:29:18.887579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-89jx2" condition "Ready" to 2026-04-28 22:29:18.887553341 +0000 UTC m=+38.547897308 I0428 22:29:18.916709 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:29:18.91669501 +0000 UTC m=+38.577038957 I0428 22:29:18.941429 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:18.941905 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:29:18.941896499 +0000 UTC m=+38.602240446 I0428 22:29:18.959180 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:29:18.959844 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:49.636629 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-204-45-49.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:31:49.636631 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-04-28 22:31:49.636590964 +0000 UTC m=+189.296934931 I0428 22:31:49.636674 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Issuing" to 2026-04-28 22:31:49.636663786 +0000 UTC m=+189.297007763 I0428 22:31:49.651811 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:49.651893 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-04-28 22:31:49.651885273 +0000 UTC m=+189.312229230 I0428 22:31:49.933212 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:49.974570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-28hw2" condition "Approved" to 2026-04-28 22:31:49.974546368 +0000 UTC m=+189.634890345 I0428 22:31:50.003434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-28hw2" condition "Ready" to 2026-04-28 22:31:50.003410991 +0000 UTC m=+189.663754958 I0428 22:31:50.031330 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:50.031300755 +0000 UTC m=+189.691644722 I0428 22:31:50.052490 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:50.054016 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:50.054009144 +0000 UTC m=+189.714353081 I0428 22:31:50.071207 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:50.073736 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:50.074219 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:50.074209272 +0000 UTC m=+189.734553219 I0428 22:32:51.306404 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:51.306584 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 22:32:51.306530772 +0000 UTC m=+250.966874719 I0428 22:32:51.307066 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 22:32:51.306432841 +0000 UTC m=+250.966776788 E0428 22:32:51.318427 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:32:51.318510 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 22:32:51.318496234 +0000 UTC m=+250.978840211 E0428 22:32:51.318683 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:32:51.319767 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:51.319834 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:51.319855 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 22:32:51.319850782 +0000 UTC m=+250.980194729 E0428 22:32:51.329075 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0428 22:32:51.329167 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:32:51.329195 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:32:51.329227 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0428 22:32:51.355919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d9m9d" condition "Approved" to 2026-04-28 22:32:51.355895671 +0000 UTC m=+251.016239638 I0428 22:32:51.366282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-d9m9d" condition "Ready" to 2026-04-28 22:32:51.36626989 +0000 UTC m=+251.026613837 I0428 22:32:51.384480 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:51.384467208 +0000 UTC m=+251.044811155 I0428 22:32:51.402680 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:51.403035 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:51.403025994 +0000 UTC m=+251.063369941 I0428 22:32:51.420763 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:56.329699 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:56.329681518 +0000 UTC m=+255.990025505 I0428 22:33:32.611606 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 22:33:32.611583717 +0000 UTC m=+292.271927674 I0428 22:33:32.611697 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:32.611733 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 22:33:32.611726709 +0000 UTC m=+292.272070646 I0428 22:33:32.611780 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 22:33:32.6117612 +0000 UTC m=+292.272105137 I0428 22:33:32.611803 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:32.611831 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 22:33:32.611823661 +0000 UTC m=+292.272167598 I0428 22:33:32.611912 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 22:33:32.611908533 +0000 UTC m=+292.272252470 I0428 22:33:32.612053 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:32.612062 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 22:33:32.612059636 +0000 UTC m=+292.272403573 I0428 22:33:32.652964 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:32.653055 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:32.653081 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 22:33:32.653073194 +0000 UTC m=+292.313417141 I0428 22:33:32.653819 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:32.653976 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 22:33:32.653967382 +0000 UTC m=+292.314311329 I0428 22:33:32.654388 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:32.654982 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 22:33:32.654974982 +0000 UTC m=+292.315318929 I0428 22:33:32.884440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b4cth" condition "Approved" to 2026-04-28 22:33:32.884417555 +0000 UTC m=+292.544761522 I0428 22:33:32.904847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-b4cth" condition "Ready" to 2026-04-28 22:33:32.904835917 +0000 UTC m=+292.565179864 I0428 22:33:32.941558 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:32.941548559 +0000 UTC m=+292.601892496 I0428 22:33:32.944894 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:32.956620 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:32.958635 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:32.959066 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:32.959061622 +0000 UTC m=+292.619405559 I0428 22:33:32.978481 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:32.990170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f8wq7" condition "Approved" to 2026-04-28 22:33:32.990138129 +0000 UTC m=+292.650482096 I0428 22:33:32.996595 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:33.004924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sk5qh" condition "Approved" to 2026-04-28 22:33:33.004918418 +0000 UTC m=+292.665262355 I0428 22:33:33.007137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f8wq7" condition "Ready" to 2026-04-28 22:33:33.007125832 +0000 UTC m=+292.667469769 I0428 22:33:33.261781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-sk5qh" condition "Ready" to 2026-04-28 22:33:33.261768464 +0000 UTC m=+292.922112421 I0428 22:33:33.722955 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:33.722929384 +0000 UTC m=+293.383273361 I0428 22:33:33.794904 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:33.794886907 +0000 UTC m=+293.455230854 I0428 22:33:33.899750 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:33.900517 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:33.90050736 +0000 UTC m=+293.560851327 I0428 22:33:34.002208 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:34.002986 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:34.002977498 +0000 UTC m=+293.663321455 I0428 22:33:34.298609 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:34.396774 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:41.359543 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" condition "Ready" to 2026-04-28 22:33:41.359524388 +0000 UTC m=+301.019868355 I0428 22:33:41.360097 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:41.360122 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" condition "Issuing" to 2026-04-28 22:33:41.360116551 +0000 UTC m=+301.020460518 I0428 22:33:41.375147 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:41.375254 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:33:41.375277 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" condition "Issuing" to 2026-04-28 22:33:41.375270796 +0000 UTC m=+301.035614753 I0428 22:33:41.740014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jkt7f-mf2h6" condition "Approved" to 2026-04-28 22:33:41.74000174 +0000 UTC m=+301.400345687 I0428 22:33:41.755498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jkt7f-mf2h6" condition "Ready" to 2026-04-28 22:33:41.755483923 +0000 UTC m=+301.415827880 I0428 22:33:41.783433 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:41.783421657 +0000 UTC m=+301.443765604 I0428 22:33:41.802945 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:33:41.803486 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:33:41.803477022 +0000 UTC m=+301.463820959 I0428 22:33:41.818334 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jkt7f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:34:02.868533 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:34:02.868567 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 22:34:02.868556649 +0000 UTC m=+322.528900596 I0428 22:34:02.869467 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 22:34:02.869448087 +0000 UTC m=+322.529792034 I0428 22:34:02.888298 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:34:02.888362 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 22:34:02.888354819 +0000 UTC m=+322.548698766 I0428 22:34:03.083093 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:34:03.114652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2jhhz" condition "Approved" to 2026-04-28 22:34:03.114632127 +0000 UTC m=+322.774976104 I0428 22:34:03.134067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2jhhz" condition "Ready" to 2026-04-28 22:34:03.134055339 +0000 UTC m=+322.794399286 I0428 22:34:03.162734 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:34:03.162724549 +0000 UTC m=+322.823068486 I0428 22:34:03.181941 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:34:03.182445 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:34:03.182440267 +0000 UTC m=+322.842784214 I0428 22:34:03.191246 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:34:03.202800 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:37:19.551917 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:37:19.551958 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 22:37:19.551910733 +0000 UTC m=+519.212254700 I0428 22:37:19.552016 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 22:37:19.552003995 +0000 UTC m=+519.212347972 I0428 22:37:19.568878 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:37:19.568946 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:37:19.568970 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 22:37:19.568962811 +0000 UTC m=+519.229306758 I0428 22:37:19.763360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lkcnm" condition "Approved" to 2026-04-28 22:37:19.763348419 +0000 UTC m=+519.423692366 I0428 22:37:19.779872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lkcnm" condition "Ready" to 2026-04-28 22:37:19.779860107 +0000 UTC m=+519.440204044 I0428 22:37:19.809184 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:37:19.80916143 +0000 UTC m=+519.469505377 I0428 22:37:19.831590 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:37:19.832136 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:37:19.832127612 +0000 UTC m=+519.492471559 I0428 22:37:19.853868 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:40.704498 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:39:40.704616 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 22:39:40.704599175 +0000 UTC m=+660.364943152 I0428 22:39:40.704622 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 22:39:40.704577635 +0000 UTC m=+660.364921582 I0428 22:39:40.722221 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:40.722377 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 22:39:40.722363016 +0000 UTC m=+660.382706983 I0428 22:39:41.023964 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:41.052529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-r8hkf" condition "Approved" to 2026-04-28 22:39:41.052512095 +0000 UTC m=+660.712856052 I0428 22:39:41.070857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-r8hkf" condition "Ready" to 2026-04-28 22:39:41.070840586 +0000 UTC m=+660.731184553 I0428 22:39:41.101502 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:39:41.101484668 +0000 UTC m=+660.761828615 I0428 22:39:41.127220 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:41.128025 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:39:41.127992507 +0000 UTC m=+660.788336454 I0428 22:39:41.135222 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:41.150180 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:41.151536 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:39:41.151517643 +0000 UTC m=+660.811861590 I0428 22:39:41.155843 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:40:38.242382 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:40:38.242458 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 22:40:38.242448368 +0000 UTC m=+717.902792335 I0428 22:40:38.243060 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 22:40:38.24303617 +0000 UTC m=+717.903380157 I0428 22:40:38.268248 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:40:38.268336 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:40:38.268365 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 22:40:38.268356433 +0000 UTC m=+717.928700410 I0428 22:40:38.623281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mj9w2" condition "Approved" to 2026-04-28 22:40:38.623247584 +0000 UTC m=+718.283591551 I0428 22:40:38.645299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mj9w2" condition "Ready" to 2026-04-28 22:40:38.645284221 +0000 UTC m=+718.305628168 I0428 22:40:38.696620 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:40:38.696604582 +0000 UTC m=+718.356948519 I0428 22:40:38.722469 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:40:38.723024 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:40:38.723016437 +0000 UTC m=+718.383360384 I0428 22:40:38.745284 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:40:38.745331 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:43:34.932245 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:43:34.932390 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 22:43:34.932377751 +0000 UTC m=+894.592721718 I0428 22:43:34.932298 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 22:43:34.932264499 +0000 UTC m=+894.592608446 I0428 22:43:34.950064 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:43:34.950158 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 22:43:34.950149728 +0000 UTC m=+894.610493685 I0428 22:43:35.229785 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:43:35.259480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4zzns" condition "Approved" to 2026-04-28 22:43:35.259468698 +0000 UTC m=+894.919812645 I0428 22:43:35.279736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4zzns" condition "Ready" to 2026-04-28 22:43:35.279722834 +0000 UTC m=+894.940066781 I0428 22:43:35.321831 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:43:35.321812158 +0000 UTC m=+894.982156095 I0428 22:43:35.343015 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:43:35.394394 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:49:51.077727 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-28 22:49:51.077698421 +0000 UTC m=+1270.738042368 I0428 22:49:51.078036 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:49:51.078105 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 22:49:51.078097599 +0000 UTC m=+1270.738441546 I0428 22:49:51.095562 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:49:51.095811 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:49:51.095848 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 22:49:51.095837695 +0000 UTC m=+1270.756181662 I0428 22:49:51.242811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-xmjrq" condition "Approved" to 2026-04-28 22:49:51.242773651 +0000 UTC m=+1270.903117628 I0428 22:49:51.264844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-xmjrq" condition "Ready" to 2026-04-28 22:49:51.264831584 +0000 UTC m=+1270.925175531 I0428 22:49:51.293615 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:49:51.293600663 +0000 UTC m=+1270.953944600 I0428 22:49:51.344424 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:49:51.344849 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:49:51.344843834 +0000 UTC m=+1271.005187761 I0428 22:49:51.368920 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:25.227752 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:51:25.227815 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 22:51:25.227807804 +0000 UTC m=+1364.888151751 I0428 22:51:25.227844 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 22:51:25.227836265 +0000 UTC m=+1364.888180222 I0428 22:51:25.245875 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:25.245990 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:51:25.246026 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 22:51:25.246017912 +0000 UTC m=+1364.906361899 I0428 22:51:25.467705 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:25.474250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wqzr7" condition "Approved" to 2026-04-28 22:51:25.474239643 +0000 UTC m=+1365.134583590 I0428 22:51:25.499573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wqzr7" condition "Ready" to 2026-04-28 22:51:25.499560064 +0000 UTC m=+1365.159904011 I0428 22:51:25.536353 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:51:25.536332945 +0000 UTC m=+1365.196676912 I0428 22:51:25.556018 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:25.558979 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:51:25.558969392 +0000 UTC m=+1365.219313339 I0428 22:51:25.559483 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:25.574450 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:25.575496 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:51:25.575486985 +0000 UTC m=+1365.235830932 I0428 22:52:20.430001 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:52:20.430071 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 22:52:20.430034896 +0000 UTC m=+1420.090378863 I0428 22:52:20.430237 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 22:52:20.430212569 +0000 UTC m=+1420.090556546 I0428 22:52:20.455723 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:52:20.455799 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 22:52:20.455792215 +0000 UTC m=+1420.116136162 I0428 22:52:20.478034 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:52:20.503840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8pwmb" condition "Approved" to 2026-04-28 22:52:20.503823044 +0000 UTC m=+1420.164166991 I0428 22:52:20.516888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8pwmb" condition "Ready" to 2026-04-28 22:52:20.516875547 +0000 UTC m=+1420.177219494 I0428 22:52:20.547334 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:52:20.547318471 +0000 UTC m=+1420.207662448 I0428 22:52:20.570652 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:52:20.571049 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:52:20.571039569 +0000 UTC m=+1420.231383546 I0428 22:52:20.587411 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:52:21.041249 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 22:52:21.0412213 +0000 UTC m=+1420.701565247 I0428 22:52:21.041290 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:52:21.041329 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 22:52:21.041318762 +0000 UTC m=+1420.701662729 I0428 22:52:21.062605 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:52:21.062695 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:52:21.062717 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 22:52:21.062711134 +0000 UTC m=+1420.723055081 I0428 22:52:21.102703 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:52:21.109356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-6qnbj" condition "Approved" to 2026-04-28 22:52:21.109342704 +0000 UTC m=+1420.769686651 I0428 22:52:21.124106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-6qnbj" condition "Ready" to 2026-04-28 22:52:21.124093751 +0000 UTC m=+1420.784437688 I0428 22:52:21.149420 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:52:21.149402432 +0000 UTC m=+1420.809746409 I0428 22:52:21.167487 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:52:21.679366 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-28 22:52:21.679347698 +0000 UTC m=+1421.339691675 I0428 22:52:22.278785 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-28 22:52:22.278770016 +0000 UTC m=+1421.939113993 I0428 22:53:03.343594 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:53:03.343631 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 22:53:03.34362381 +0000 UTC m=+1463.003967757 I0428 22:53:03.345763 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 22:53:03.345745731 +0000 UTC m=+1463.006089668 I0428 22:53:03.376173 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:03.376245 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:53:03.376260 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 22:53:03.376255764 +0000 UTC m=+1463.036599701 I0428 22:53:07.297435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-gpn4f" condition "Approved" to 2026-04-28 22:53:07.297416646 +0000 UTC m=+1466.957760583 I0428 22:53:07.317553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-gpn4f" condition "Ready" to 2026-04-28 22:53:07.3175341 +0000 UTC m=+1466.977878077 I0428 22:53:07.349370 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:53:07.349357648 +0000 UTC m=+1467.009701585 I0428 22:53:07.375976 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:07.376961 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:53:07.376955892 +0000 UTC m=+1467.037299829 I0428 22:53:07.382716 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:07.393085 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:07.395262 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:53:07.395253209 +0000 UTC m=+1467.055597176 I0428 22:55:23.375295 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:55:23.375424 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 22:55:23.375391371 +0000 UTC m=+1603.035735348 I0428 22:55:23.375554 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-28 22:55:23.375520174 +0000 UTC m=+1603.035864111 I0428 22:55:23.397678 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:55:23.397895 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:55:23.398024 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 22:55:23.397929073 +0000 UTC m=+1603.058273050 I0428 22:55:23.639202 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:55:23.646508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-k5bbs" condition "Approved" to 2026-04-28 22:55:23.646496235 +0000 UTC m=+1603.306840172 I0428 22:55:23.666871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-k5bbs" condition "Ready" to 2026-04-28 22:55:23.666856613 +0000 UTC m=+1603.327200560 I0428 22:55:23.696598 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:55:23.696582787 +0000 UTC m=+1603.356926734 I0428 22:55:23.718375 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:55:23.719858 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:55:23.719852022 +0000 UTC m=+1603.380195959 I0428 22:55:23.737223 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:55:23.748060 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:55:24.786583 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 22:55:24.786553472 +0000 UTC m=+1604.446897449 I0428 22:55:24.787573 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:55:24.787619 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-28 22:55:24.787606054 +0000 UTC m=+1604.447950001 I0428 22:55:24.801478 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:55:24.801579 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 22:55:24.801569904 +0000 UTC m=+1604.461913851 I0428 22:55:24.966293 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:55:25.008660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-mr5wp" condition "Approved" to 2026-04-28 22:55:25.008637376 +0000 UTC m=+1604.668981313 I0428 22:55:25.028008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-mr5wp" condition "Ready" to 2026-04-28 22:55:25.027987772 +0000 UTC m=+1604.688331749 I0428 22:55:25.070529 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:55:25.070489043 +0000 UTC m=+1604.730832990 I0428 22:55:25.096187 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:43.069727 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tp6kf-vnc" condition "Ready" to 2026-04-28 22:57:43.069675961 +0000 UTC m=+1742.730019938 I0428 22:57:43.070355 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-tp6kf-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:57:43.070385 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tp6kf-vnc" condition "Issuing" to 2026-04-28 22:57:43.070379315 +0000 UTC m=+1742.730723282 I0428 22:57:43.070726 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tp6kf-api" condition "Ready" to 2026-04-28 22:57:43.070717762 +0000 UTC m=+1742.731061739 I0428 22:57:43.071051 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-tp6kf-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:57:43.071074 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tp6kf-api" condition "Issuing" to 2026-04-28 22:57:43.07106871 +0000 UTC m=+1742.731412687 I0428 22:57:43.099953 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-tp6kf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tp6kf-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:43.100008 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-tp6kf-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:57:43.100020 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tp6kf-api" condition "Issuing" to 2026-04-28 22:57:43.100015559 +0000 UTC m=+1742.760359496 I0428 22:57:43.101360 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-tp6kf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tp6kf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:43.101609 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-tp6kf-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:57:43.101647 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tp6kf-vnc" condition "Issuing" to 2026-04-28 22:57:43.101639221 +0000 UTC m=+1742.761983148 I0428 22:57:43.277629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tp6kf-vnc-jk4b5" condition "Approved" to 2026-04-28 22:57:43.277598785 +0000 UTC m=+1742.937942722 I0428 22:57:43.296914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tp6kf-vnc-jk4b5" condition "Ready" to 2026-04-28 22:57:43.296894082 +0000 UTC m=+1742.957238029 I0428 22:57:43.334023 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tp6kf-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:57:43.334001885 +0000 UTC m=+1742.994345832 I0428 22:57:43.350641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tp6kf-api-bpgbf" condition "Approved" to 2026-04-28 22:57:43.350620678 +0000 UTC m=+1743.010964605 I0428 22:57:43.354212 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-tp6kf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tp6kf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:43.355171 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tp6kf-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:57:43.355159969 +0000 UTC m=+1743.015503936 I0428 22:57:43.368756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tp6kf-api-bpgbf" condition "Ready" to 2026-04-28 22:57:43.368742671 +0000 UTC m=+1743.029086618 I0428 22:57:43.373804 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-tp6kf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tp6kf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:43.378368 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-tp6kf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tp6kf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:43.412171 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tp6kf-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:57:43.41214778 +0000 UTC m=+1743.072491707 I0428 22:57:43.431371 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-tp6kf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tp6kf-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:43.432055 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tp6kf-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:57:43.432047778 +0000 UTC m=+1743.092391725 I0428 22:57:43.456806 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-tp6kf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tp6kf-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:43.457535 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tp6kf-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:57:43.457521618 +0000 UTC m=+1743.117865565 I0428 22:58:17.039760 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:58:17.039809 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-28 22:58:17.039798857 +0000 UTC m=+1776.700142814 I0428 22:58:17.040586 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 22:58:17.040577444 +0000 UTC m=+1776.700921401 I0428 22:58:17.055819 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:58:17.055943 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 22:58:17.055929307 +0000 UTC m=+1776.716273294 I0428 22:58:17.518240 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:58:17.549802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lhc6b" condition "Approved" to 2026-04-28 22:58:17.549784516 +0000 UTC m=+1777.210128463 I0428 22:58:17.571123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lhc6b" condition "Ready" to 2026-04-28 22:58:17.571110552 +0000 UTC m=+1777.231454499 I0428 22:58:17.605363 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:58:17.605352213 +0000 UTC m=+1777.265696140 I0428 22:58:17.624957 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:58:17.625887 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:58:17.625880063 +0000 UTC m=+1777.286224010 I0428 22:58:17.647936 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:00:55.699731 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:00:55.699819 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-28 23:00:55.699787192 +0000 UTC m=+1935.360131169 I0428 23:00:55.699914 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-28 23:00:55.699892924 +0000 UTC m=+1935.360236901 I0428 23:00:55.715062 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:00:55.715160 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:00:55.715180 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-28 23:00:55.715174431 +0000 UTC m=+1935.375518378 I0428 23:00:56.114879 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:00:56.124228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-xbq5n" condition "Approved" to 2026-04-28 23:00:56.124202286 +0000 UTC m=+1935.784546263 I0428 23:00:56.142067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-xbq5n" condition "Ready" to 2026-04-28 23:00:56.142052998 +0000 UTC m=+1935.802396975 I0428 23:00:56.175296 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:00:56.175282169 +0000 UTC m=+1935.835626116 I0428 23:00:56.196239 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:00:56.197390 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:00:56.197380149 +0000 UTC m=+1935.857724116 I0428 23:00:56.199685 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:00:56.213715 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:00:56.214449 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:00:56.214442594 +0000 UTC m=+1935.874786541 I0428 23:04:27.428057 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:04:27.428136 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-28 23:04:27.428107767 +0000 UTC m=+2147.088451734 I0428 23:04:27.428140 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 23:04:27.428116507 +0000 UTC m=+2147.088460474 I0428 23:04:27.444224 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:04:27.444466 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 23:04:27.444451695 +0000 UTC m=+2147.104795702 I0428 23:04:27.533901 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:04:27.566530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-rbffn" condition "Approved" to 2026-04-28 23:04:27.566517734 +0000 UTC m=+2147.226861691 I0428 23:04:27.590348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-rbffn" condition "Ready" to 2026-04-28 23:04:27.590332081 +0000 UTC m=+2147.250676058 I0428 23:04:27.623135 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:04:27.623114859 +0000 UTC m=+2147.283458836 I0428 23:04:27.647371 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:04:27.647974 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:04:27.647965358 +0000 UTC m=+2147.308309295 I0428 23:04:27.671475 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:04:27.672305 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:04:27.672293946 +0000 UTC m=+2147.332637923 I0428 23:04:28.909225 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:04:28.909252 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 23:04:28.909235336 +0000 UTC m=+2148.569579283 I0428 23:04:28.909262 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 23:04:28.909254607 +0000 UTC m=+2148.569598554 I0428 23:04:28.923067 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:04:28.923184 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 23:04:28.923178016 +0000 UTC m=+2148.583521963 I0428 23:04:29.167848 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:04:29.196606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5jx4f" condition "Approved" to 2026-04-28 23:04:29.196584471 +0000 UTC m=+2148.856928468 I0428 23:04:29.218343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5jx4f" condition "Ready" to 2026-04-28 23:04:29.218325596 +0000 UTC m=+2148.878669543 I0428 23:04:29.245468 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:04:29.245454001 +0000 UTC m=+2148.905797938 I0428 23:04:29.264383 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:32.854386 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:06:32.854454 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 23:06:32.854418676 +0000 UTC m=+2272.514762653 I0428 23:06:32.854700 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-28 23:06:32.854412945 +0000 UTC m=+2272.514756912 E0428 23:06:32.871746 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:06:32.871833 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-28 23:06:32.871785774 +0000 UTC m=+2272.532129741 I0428 23:06:32.871930 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:06:32.883777 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:32.883892 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-28 23:06:32.883884576 +0000 UTC m=+2272.544228523 E0428 23:06:32.888426 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client" E0428 23:06:32.888500 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:06:32.888519 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 23:06:32.888544 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client" I0428 23:06:32.905847 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:32.933779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-jjpd4" condition "Approved" to 2026-04-28 23:06:32.933061362 +0000 UTC m=+2272.593405309 I0428 23:06:32.949493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-jjpd4" condition "Ready" to 2026-04-28 23:06:32.949477672 +0000 UTC m=+2272.609821629 I0428 23:06:32.972977 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:06:32.972965572 +0000 UTC m=+2272.633309519 I0428 23:06:32.999163 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:32.999852 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:06:32.999842682 +0000 UTC m=+2272.660186639 I0428 23:06:33.024488 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:33.029234 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:33.535152 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:06:33.535196 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-28 23:06:33.535188646 +0000 UTC m=+2273.195532583 I0428 23:06:33.535238 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 23:06:33.535214506 +0000 UTC m=+2273.195558493 E0428 23:06:33.550891 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:06:33.550935 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-28 23:06:33.550925611 +0000 UTC m=+2273.211269568 I0428 23:06:33.551048 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:06:33.555079 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:33.555145 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 23:06:33.555139296 +0000 UTC m=+2273.215483233 E0428 23:06:33.563599 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server" E0428 23:06:33.563666 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:06:33.563686 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 23:06:33.563829 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server" I0428 23:06:33.576255 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:33.603707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-29487" condition "Approved" to 2026-04-28 23:06:33.603690019 +0000 UTC m=+2273.264033966 I0428 23:06:33.622111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-29487" condition "Ready" to 2026-04-28 23:06:33.622096088 +0000 UTC m=+2273.282440055 I0428 23:06:33.647106 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:06:33.64709174 +0000 UTC m=+2273.307435687 I0428 23:06:33.671504 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:34.232781 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:06:34.232813 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-28 23:06:34.232805634 +0000 UTC m=+2273.893149581 I0428 23:06:34.233293 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 23:06:34.233288083 +0000 UTC m=+2273.893632040 I0428 23:06:34.263297 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:34.263435 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 23:06:34.263424228 +0000 UTC m=+2273.923768205 I0428 23:06:34.283477 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:34.308328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-n8hph" condition "Approved" to 2026-04-28 23:06:34.308311128 +0000 UTC m=+2273.968655065 I0428 23:06:34.320921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-n8hph" condition "Ready" to 2026-04-28 23:06:34.32090957 +0000 UTC m=+2273.981253517 I0428 23:06:37.889331 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:06:37.889315815 +0000 UTC m=+2277.549659762 I0428 23:06:37.901262 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-n8hph" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:06:37.901245134 +0000 UTC m=+2277.561589101 I0428 23:06:37.927429 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:06:37.92741357 +0000 UTC m=+2277.587757507 I0428 23:06:37.962734 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:38.007359 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:06:38.564459 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:06:38.564445243 +0000 UTC m=+2278.224789190 I0428 23:08:38.527140 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-28 23:08:38.527121897 +0000 UTC m=+2398.187465874 I0428 23:08:38.527352 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:38.527409 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 23:08:38.527396272 +0000 UTC m=+2398.187740249 I0428 23:08:38.546965 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:38.547098 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:38.547159 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 23:08:38.547151599 +0000 UTC m=+2398.207495566 I0428 23:08:38.728439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-jsk2q" condition "Approved" to 2026-04-28 23:08:38.72842022 +0000 UTC m=+2398.388764187 I0428 23:08:38.760918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-jsk2q" condition "Ready" to 2026-04-28 23:08:38.760904572 +0000 UTC m=+2398.421248539 I0428 23:08:38.795933 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:38.795921596 +0000 UTC m=+2398.456265543 I0428 23:08:38.818984 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:24.236373 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-28 23:09:24.236346976 +0000 UTC m=+2443.896690943 I0428 23:09:24.253866 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 23:09:24.253847666 +0000 UTC m=+2443.914191643 I0428 23:09:24.254361 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:09:24.254392 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 23:09:24.254385316 +0000 UTC m=+2443.914729293 E0428 23:09:24.306314 1 controller.go:134] "cert-manager/issuers: issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" E0428 23:09:24.313538 1 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18aaa80a1ab77275", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"318ea0e4-04c2-43cd-b796-6e2a2539ea1c", APIVersion:"cert-manager.io/v1", ResourceVersion:"25019", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.April, 28, 23, 9, 24, 302451317, time.Local), LastTimestamp:time.Date(2026, time.April, 28, 23, 9, 24, 302451317, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18aaa80a1ab77275" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0428 23:09:24.318115 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:24.318171 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 23:09:24.318164602 +0000 UTC m=+2443.978508539 E0428 23:09:24.339887 1 controller.go:167] "cert-manager/certificates-readiness: re-queuing item due to error processing" err="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": StorageError: invalid object, Code: 4, Key: /registry/cert-manager.io/certificates/cert-manager-test/selfsigned-cert, ResourceVersion: 0, AdditionalErrorMsg: Precondition failed: UID in precondition: 318ea0e4-04c2-43cd-b796-6e2a2539ea1c, UID in object meta: " key="cert-manager-test/selfsigned-cert" I0428 23:09:24.371664 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-28 23:09:24.371652091 +0000 UTC m=+2444.031996038 I0428 23:09:24.393814 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 23:09:24.393802384 +0000 UTC m=+2444.054146331 I0428 23:09:24.394146 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:09:24.394165 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-28 23:09:24.394161361 +0000 UTC m=+2444.054505308 I0428 23:09:24.415264 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:24.415507 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 23:09:24.415493108 +0000 UTC m=+2444.075837075 E0428 23:09:24.540658 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" key="cert-manager-test/selfsigned-cert" I0428 23:09:24.542564 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:24.584819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-c4bsm" condition "Approved" to 2026-04-28 23:09:24.584794583 +0000 UTC m=+2444.245138530 I0428 23:09:24.613500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-c4bsm" condition "Ready" to 2026-04-28 23:09:24.613485176 +0000 UTC m=+2444.273829123 I0428 23:09:24.653029 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:09:24.653011397 +0000 UTC m=+2444.313355344 I0428 23:09:24.677033 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:24.677374 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:09:24.677367684 +0000 UTC m=+2444.337711621 I0428 23:09:24.721848 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:25.182993 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-28 23:09:25.182975015 +0000 UTC m=+2444.843318962 I0428 23:09:25.201601 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-28 23:09:25.201590946 +0000 UTC m=+2444.861934883 I0428 23:09:25.201741 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:09:25.201792 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 23:09:25.20178039 +0000 UTC m=+2444.862124357 I0428 23:09:25.223163 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:25.223239 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:09:25.223261 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 23:09:25.223251729 +0000 UTC m=+2444.883595676 I0428 23:09:25.450877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-48wtb" condition "Approved" to 2026-04-28 23:09:25.45086076 +0000 UTC m=+2445.111204697 I0428 23:09:25.475048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-48wtb" condition "Ready" to 2026-04-28 23:09:25.475030564 +0000 UTC m=+2445.135374511 I0428 23:09:25.545535 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:09:25.545504883 +0000 UTC m=+2445.205848820 I0428 23:09:25.593201 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:25.659499 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-28 23:09:25.659485422 +0000 UTC m=+2445.319829369 I0428 23:09:25.665855 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:25.690462 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 23:09:25.690441781 +0000 UTC m=+2445.350785718 I0428 23:09:25.690819 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:09:25.690832 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 23:09:25.690828749 +0000 UTC m=+2445.351172736 I0428 23:09:25.709727 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:25.709808 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 23:09:25.709798819 +0000 UTC m=+2445.370142766 I0428 23:09:25.943969 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:26.000159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lqv4b" condition "Approved" to 2026-04-28 23:09:26.000148274 +0000 UTC m=+2445.660492211 I0428 23:09:26.065840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lqv4b" condition "Ready" to 2026-04-28 23:09:26.065829858 +0000 UTC m=+2445.726173795 I0428 23:09:26.112937 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:09:26.112918659 +0000 UTC m=+2445.773262606 I0428 23:09:26.151568 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:26.155970 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:09:26.155948369 +0000 UTC m=+2445.816292296 I0428 23:09:26.186071 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-28 23:09:26.186053291 +0000 UTC m=+2445.846397248 I0428 23:09:26.194641 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:26.195410 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:09:26.195398638 +0000 UTC m=+2445.855742585 I0428 23:09:26.214612 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-28 23:09:26.214589392 +0000 UTC m=+2445.874933339 I0428 23:09:26.215176 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:09:26.215341 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 23:09:26.215259225 +0000 UTC m=+2445.875603172 I0428 23:09:26.396088 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:26.396208 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:09:26.396248 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 23:09:26.396240924 +0000 UTC m=+2446.056584871 I0428 23:09:26.810063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-24n7w" condition "Approved" to 2026-04-28 23:09:26.810034047 +0000 UTC m=+2446.470377994 I0428 23:09:26.832914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-24n7w" condition "Ready" to 2026-04-28 23:09:26.832898055 +0000 UTC m=+2446.493242002 I0428 23:09:27.252355 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:09:27.252337982 +0000 UTC m=+2446.912681949 I0428 23:09:27.448033 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:09:27.448686 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:09:27.448672777 +0000 UTC m=+2447.109016724 I0428 23:09:27.694976 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:12:40.049053 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-28 23:12:40.049021105 +0000 UTC m=+2639.709365072 I0428 23:12:40.049558 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:12:40.049621 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-28 23:12:40.049608376 +0000 UTC m=+2639.709952343 I0428 23:12:40.089693 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:12:40.089768 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:12:40.089785 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-28 23:12:40.089777441 +0000 UTC m=+2639.750121388 I0428 23:12:40.353451 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:12:40.365534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-vlvn4" condition "Approved" to 2026-04-28 23:12:40.36551591 +0000 UTC m=+2640.025859847 I0428 23:12:40.453723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-vlvn4" condition "Ready" to 2026-04-28 23:12:40.453705068 +0000 UTC m=+2640.114049025 I0428 23:12:40.586343 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:12:40.586322646 +0000 UTC m=+2640.246666593 I0428 23:12:40.625127 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:12:40.625658 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:12:40.625651366 +0000 UTC m=+2640.285995313 I0428 23:12:40.671311 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:12:40.672092 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:12:43.102566 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:12:43.102596 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-28 23:12:43.102589069 +0000 UTC m=+2642.762933006 I0428 23:12:43.103007 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-28 23:12:43.103002777 +0000 UTC m=+2642.763346714 I0428 23:12:43.118254 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:12:43.118304 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:12:43.118314 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-28 23:12:43.118310523 +0000 UTC m=+2642.778654460 I0428 23:12:43.555274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-rj2hq" condition "Approved" to 2026-04-28 23:12:43.555259194 +0000 UTC m=+2643.215603141 I0428 23:12:43.575364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-rj2hq" condition "Ready" to 2026-04-28 23:12:43.575350137 +0000 UTC m=+2643.235694104 I0428 23:12:43.598463 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:12:43.598452121 +0000 UTC m=+2643.258796058 I0428 23:12:43.625245 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:51.145436 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 23:16:51.145371867 +0000 UTC m=+2890.805715844 I0428 23:16:51.145580 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:16:51.145677 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-28 23:16:51.145666252 +0000 UTC m=+2890.806010219 I0428 23:16:51.165919 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:51.166109 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 23:16:51.166099483 +0000 UTC m=+2890.826443430 I0428 23:16:51.358104 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:51.393832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-trrj7" condition "Approved" to 2026-04-28 23:16:51.393822362 +0000 UTC m=+2891.054166309 I0428 23:16:51.416304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-trrj7" condition "Ready" to 2026-04-28 23:16:51.416295202 +0000 UTC m=+2891.076639149 I0428 23:16:51.466334 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:16:51.466319346 +0000 UTC m=+2891.126663283 I0428 23:16:51.492473 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:51.493100 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:16:51.493094263 +0000 UTC m=+2891.153438220 I0428 23:16:51.498092 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:51.517254 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:51.517634 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:51.518398 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:16:51.51838632 +0000 UTC m=+2891.178730267 I0428 23:17:24.747530 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 23:17:24.747505514 +0000 UTC m=+2924.407849471 I0428 23:17:24.747570 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:17:24.747597 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 23:17:24.747589975 +0000 UTC m=+2924.407933942 I0428 23:17:24.762875 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:17:24.762959 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:17:24.762982 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 23:17:24.762977095 +0000 UTC m=+2924.423321042 I0428 23:17:24.939099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mmgw6" condition "Approved" to 2026-04-28 23:17:24.939086248 +0000 UTC m=+2924.599430195 I0428 23:17:24.973743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mmgw6" condition "Ready" to 2026-04-28 23:17:24.973727713 +0000 UTC m=+2924.634071680 I0428 23:17:25.001747 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:17:25.001732445 +0000 UTC m=+2924.662076412 I0428 23:17:25.026987 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:17:25.027701 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:17:25.027692465 +0000 UTC m=+2924.688036412 I0428 23:17:25.044557 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:17:25.048672 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"