I0416 09:32:35.705947 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0416 09:32:35.706120 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0416 09:32:35.706222 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 09:32:35.710186 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0416 09:32:35.710637 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0416 09:32:35.710781 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0416 09:32:35.710790 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0416 09:32:35.713492 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 09:32:35.732257 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0416 09:32:35.732804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0416 09:32:35.732845 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0416 09:32:35.738254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0416 09:32:35.743665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0416 09:32:35.746439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0416 09:32:35.748955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0416 09:32:35.751318 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0416 09:32:35.753734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0416 09:32:35.756148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0416 09:32:35.758603 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0416 09:32:35.758627 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0416 09:32:35.758922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0416 09:32:35.762729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0416 09:32:35.766324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0416 09:32:35.769090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0416 09:32:35.771698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0416 09:32:35.774576 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0416 09:32:35.774625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0416 09:32:35.777137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0416 09:32:35.779465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0416 09:32:35.781783 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0416 09:32:35.781848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0416 09:32:35.783868 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0416 09:32:35.786136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0416 09:32:35.789204 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.792612 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.793788 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.793897 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.811989 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.824551 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.843790 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.863661 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.881971 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:32:35.907701 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 09:33:04.831705 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 09:33:04.83168369 +0000 UTC m=+29.163225689 I0416 09:33:05.722212 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 09:33:05.722196944 +0000 UTC m=+30.053738913 I0416 09:33:05.722302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:33:05.722343 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 09:33:05.722334837 +0000 UTC m=+30.053876796 E0416 09:33:05.749525 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 09:33:05.749636 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 09:33:05.749624988 +0000 UTC m=+30.081166987 E0416 09:33:05.749670 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 09:33:05.754433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:05.754530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:33:05.754555 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 09:33:05.75454745 +0000 UTC m=+30.086089409 E0416 09:33:05.771342 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0416 09:33:05.771495 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 09:33:05.771549 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 09:33:05.771601 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0416 09:33:06.739293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r8p24" condition "Approved" to 2026-04-16 09:33:06.739279374 +0000 UTC m=+31.070821343 I0416 09:33:06.761424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r8p24" condition "Ready" to 2026-04-16 09:33:06.761406379 +0000 UTC m=+31.092948358 I0416 09:33:06.792885 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:06.792868134 +0000 UTC m=+31.124410103 I0416 09:33:06.826836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:06.893867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:06.926863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:10.772337 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:10.772315058 +0000 UTC m=+35.103857057 I0416 09:33:11.491847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:33:11.491898 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 09:33:11.491879551 +0000 UTC m=+35.823421520 I0416 09:33:11.491939 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 09:33:11.491926563 +0000 UTC m=+35.823468542 I0416 09:33:11.517693 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 09:33:11.51697531 +0000 UTC m=+35.848517279 I0416 09:33:11.541655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:11.541748 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 09:33:11.54173992 +0000 UTC m=+35.873281879 I0416 09:33:11.792465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:11.832460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j2zjq" condition "Approved" to 2026-04-16 09:33:11.8324462 +0000 UTC m=+36.163988169 I0416 09:33:11.869856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j2zjq" condition "Ready" to 2026-04-16 09:33:11.869840971 +0000 UTC m=+36.201382940 I0416 09:33:11.912991 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:11.912962244 +0000 UTC m=+36.244504243 I0416 09:33:11.970816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:11.971271 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:11.971259579 +0000 UTC m=+36.302801548 I0416 09:33:11.999297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:12.005543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.010586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:33:18.010639 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-16 09:33:18.01062777 +0000 UTC m=+42.342169739 I0416 09:33:18.011201 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-16 09:33:18.011195224 +0000 UTC m=+42.342737193 E0416 09:33:18.032865 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 09:33:18.032933 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-16 09:33:18.032921849 +0000 UTC m=+42.364463848 I0416 09:33:18.032999 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 09:33:18.036967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.037073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:33:18.037107 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-16 09:33:18.037098163 +0000 UTC m=+42.368640162 E0416 09:33:18.048015 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0416 09:33:18.048228 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 09:33:18.048276 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0416 09:33:18.048322 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0416 09:33:18.049276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:33:18.049310 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-16 09:33:18.049300143 +0000 UTC m=+42.380842132 I0416 09:33:18.049729 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-16 09:33:18.049720693 +0000 UTC m=+42.381262682 I0416 09:33:18.071094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.075027 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-16 09:33:18.075014926 +0000 UTC m=+42.406556905 I0416 09:33:18.219538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.254977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6rfjb" condition "Approved" to 2026-04-16 09:33:18.254957358 +0000 UTC m=+42.586499327 I0416 09:33:18.281420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6rfjb" condition "Ready" to 2026-04-16 09:33:18.28140196 +0000 UTC m=+42.612943959 I0416 09:33:18.407550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.424004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-879qj" condition "Approved" to 2026-04-16 09:33:18.423989772 +0000 UTC m=+42.755531741 I0416 09:33:18.458901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-879qj" condition "Ready" to 2026-04-16 09:33:18.458884591 +0000 UTC m=+42.790426580 I0416 09:33:18.504346 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:18.50432751 +0000 UTC m=+42.835869479 I0416 09:33:18.522818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.523605 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:18.523593635 +0000 UTC m=+42.855135634 I0416 09:33:18.556660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.737105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:33:18.737156 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-16 09:33:18.737143335 +0000 UTC m=+43.068685334 I0416 09:33:18.737801 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-16 09:33:18.737792831 +0000 UTC m=+43.069334820 I0416 09:33:18.754728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.754938 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-16 09:33:18.754925843 +0000 UTC m=+43.086467812 I0416 09:33:18.769625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:18.769752 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-16 09:33:18.769735007 +0000 UTC m=+43.101276976 I0416 09:33:18.773935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xm7f2" condition "Approved" to 2026-04-16 09:33:18.77390975 +0000 UTC m=+43.105451739 I0416 09:33:18.790257 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-16 09:33:18.790242373 +0000 UTC m=+43.121784342 I0416 09:33:18.799709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xm7f2" condition "Ready" to 2026-04-16 09:33:18.799695465 +0000 UTC m=+43.131237434 I0416 09:33:18.921978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:19.125804 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:19.125785697 +0000 UTC m=+43.457327686 I0416 09:33:19.221133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:19.576707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:33:19.576750 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-16 09:33:19.576739704 +0000 UTC m=+43.908281703 I0416 09:33:19.577008 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-16 09:33:19.576976959 +0000 UTC m=+43.908518948 I0416 09:33:19.608069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:19.608211 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-16 09:33:19.608195448 +0000 UTC m=+43.939737407 I0416 09:33:19.782497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:19.932683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-8lvk2" condition "Approved" to 2026-04-16 09:33:19.93266367 +0000 UTC m=+44.264205629 I0416 09:33:19.983391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-8lvk2" condition "Ready" to 2026-04-16 09:33:19.983374829 +0000 UTC m=+44.314916798 I0416 09:33:20.459419 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-16 09:33:20.459404224 +0000 UTC m=+44.790946193 I0416 09:33:20.471827 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:20.47180724 +0000 UTC m=+44.803349239 I0416 09:33:20.685009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:20.685453 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:20.685440871 +0000 UTC m=+45.016982860 I0416 09:33:20.931048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:21.261854 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-16 09:33:21.261831988 +0000 UTC m=+45.593373987 I0416 09:33:23.050990 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:23.050970885 +0000 UTC m=+47.382512854 I0416 09:33:23.068854 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-6rfjb" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:23.068835805 +0000 UTC m=+47.400377764 I0416 09:33:23.111002 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:23.110987593 +0000 UTC m=+47.442529562 I0416 09:33:23.136024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:23.136333 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:23.136325967 +0000 UTC m=+47.467867936 I0416 09:33:23.156478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:33:23.156836 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:33:23.156826992 +0000 UTC m=+47.488368961 I0416 09:33:23.159907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:38:10.668252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:38:10.668336 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-04-16 09:38:10.668319179 +0000 UTC m=+334.999861148 I0416 09:38:10.668385 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-04-16 09:38:10.668368191 +0000 UTC m=+334.999910160 I0416 09:38:10.686384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:38:10.686441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:38:10.686525 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-04-16 09:38:10.686520374 +0000 UTC m=+335.018062323 I0416 09:38:10.851203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-ghk7b" condition "Approved" to 2026-04-16 09:38:10.851188006 +0000 UTC m=+335.182729985 I0416 09:38:10.869852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-ghk7b" condition "Ready" to 2026-04-16 09:38:10.869840981 +0000 UTC m=+335.201382940 I0416 09:38:10.897877 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:38:10.897865251 +0000 UTC m=+335.229407210 I0416 09:38:10.925606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:38:10.925893 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:38:10.92588778 +0000 UTC m=+335.257429739 I0416 09:38:10.949582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:38:10.952113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:38:10.953721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:38:10.954014 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:38:10.954005783 +0000 UTC m=+335.285547752 I0416 09:39:27.372985 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 09:39:27.372969457 +0000 UTC m=+411.704511416 I0416 09:39:27.373007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:39:27.373087 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 09:39:27.373076989 +0000 UTC m=+411.704618958 E0416 09:39:27.386159 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 09:39:27.386262 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 09:39:27.386253102 +0000 UTC m=+411.717795071 E0416 09:39:27.386297 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 09:39:27.389979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:39:27.390113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:39:27.390154 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 09:39:27.390144738 +0000 UTC m=+411.721686737 E0416 09:39:27.397476 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0416 09:39:27.398240 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 09:39:27.398326 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 09:39:27.398375 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0416 09:39:27.433357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:39:27.436757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nm5rc" condition "Approved" to 2026-04-16 09:39:27.436730308 +0000 UTC m=+411.768272277 I0416 09:39:27.453837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nm5rc" condition "Ready" to 2026-04-16 09:39:27.453819106 +0000 UTC m=+411.785361095 I0416 09:39:27.480781 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:39:27.480761556 +0000 UTC m=+411.812303525 I0416 09:39:27.498306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:39:27.498638 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:39:27.498631223 +0000 UTC m=+411.830173192 I0416 09:39:27.513208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:39:27.517866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:39:32.398699 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:39:32.398683378 +0000 UTC m=+416.730225367 I0416 09:40:16.639224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:40:16.639255 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 09:40:16.63924975 +0000 UTC m=+460.970791709 I0416 09:40:16.639585 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 09:40:16.639581008 +0000 UTC m=+460.971122967 I0416 09:40:16.650563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:40:16.650607 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 09:40:16.650597388 +0000 UTC m=+460.982139767 I0416 09:40:16.650685 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 09:40:16.65066977 +0000 UTC m=+460.982211729 I0416 09:40:16.651041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:40:16.651053 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 09:40:16.651047789 +0000 UTC m=+460.982589748 I0416 09:40:16.651061 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 09:40:16.651058309 +0000 UTC m=+460.982600258 I0416 09:40:16.670459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:16.670581 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 09:40:16.670568137 +0000 UTC m=+461.002110086 I0416 09:40:16.682971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:16.683067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:40:16.683187 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 09:40:16.683177616 +0000 UTC m=+461.014719585 I0416 09:40:16.684597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:16.684695 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 09:40:16.684685582 +0000 UTC m=+461.016227541 I0416 09:40:16.788689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:16.825047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gn866" condition "Approved" to 2026-04-16 09:40:16.825030938 +0000 UTC m=+461.156572927 I0416 09:40:16.843755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gn866" condition "Ready" to 2026-04-16 09:40:16.843738897 +0000 UTC m=+461.175280896 I0416 09:40:16.882448 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:16.882430914 +0000 UTC m=+461.213972893 I0416 09:40:16.899808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:16.900158 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:16.900150178 +0000 UTC m=+461.231692147 I0416 09:40:16.923510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9knfb" condition "Approved" to 2026-04-16 09:40:16.923495789 +0000 UTC m=+461.255037748 E0416 09:40:16.940449 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-wf8tw\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0416 09:40:16.942087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:16.947049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:16.947580 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:16.947569919 +0000 UTC m=+461.279111888 I0416 09:40:16.953701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9knfb" condition "Ready" to 2026-04-16 09:40:16.953685568 +0000 UTC m=+461.285227567 I0416 09:40:17.188002 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:17.187983444 +0000 UTC m=+461.519525433 I0416 09:40:17.389893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:17.489746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9vsnj" condition "Approved" to 2026-04-16 09:40:17.489728641 +0000 UTC m=+461.821270630 I0416 09:40:17.792427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9vsnj" condition "Ready" to 2026-04-16 09:40:17.792412102 +0000 UTC m=+462.123954081 I0416 09:40:18.202318 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-9vsnj" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-s4wg7" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0416 09:40:18.504753 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-s4wg7\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0416 09:40:18.538654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-h4gk8" condition "Approved" to 2026-04-16 09:40:18.538634692 +0000 UTC m=+462.870176681 I0416 09:40:18.579668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:18.944087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-h4gk8" condition "Ready" to 2026-04-16 09:40:18.944074628 +0000 UTC m=+463.275616597 I0416 09:40:19.132644 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:19.132620254 +0000 UTC m=+463.464162243 I0416 09:40:19.455311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:19.532686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:24.327978 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" condition "Ready" to 2026-04-16 09:40:24.327958497 +0000 UTC m=+468.659500456 I0416 09:40:24.328676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:40:24.328700 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" condition "Issuing" to 2026-04-16 09:40:24.328696065 +0000 UTC m=+468.660238034 I0416 09:40:24.341988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:24.342091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:40:24.342116 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" condition "Issuing" to 2026-04-16 09:40:24.342110263 +0000 UTC m=+468.673652222 I0416 09:40:25.288681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:25.300766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2bcwc-kbm8n" condition "Approved" to 2026-04-16 09:40:25.300751954 +0000 UTC m=+469.632293913 I0416 09:40:25.322632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2bcwc-kbm8n" condition "Ready" to 2026-04-16 09:40:25.322622819 +0000 UTC m=+469.654164778 I0416 09:40:25.359047 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:25.359035621 +0000 UTC m=+469.690577600 I0416 09:40:25.379260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:25.379720 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:25.379708737 +0000 UTC m=+469.711250736 I0416 09:40:25.403855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2bcwc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:41.132329 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:40:41.132363 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 09:40:41.132356354 +0000 UTC m=+485.463898313 I0416 09:40:41.132717 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 09:40:41.132713263 +0000 UTC m=+485.464255232 I0416 09:40:41.153674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:41.153911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 09:40:41.153778558 +0000 UTC m=+485.485320557 I0416 09:40:41.338475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:41.371552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5cmnj" condition "Approved" to 2026-04-16 09:40:41.371534197 +0000 UTC m=+485.703076156 I0416 09:40:41.391724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5cmnj" condition "Ready" to 2026-04-16 09:40:41.391706692 +0000 UTC m=+485.723248661 I0416 09:40:41.436214 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:41.43620052 +0000 UTC m=+485.767742479 I0416 09:40:41.456759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:41.457957 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:41.457941812 +0000 UTC m=+485.789483801 I0416 09:40:41.483823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:40:41.484228 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:40:41.484216496 +0000 UTC m=+485.815758455 I0416 09:41:47.848218 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 09:41:47.848200455 +0000 UTC m=+552.179742454 I0416 09:41:47.848239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:41:47.848294 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 09:41:47.848282357 +0000 UTC m=+552.179824346 I0416 09:41:47.866641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:41:47.866782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:41:47.867008 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 09:41:47.866996209 +0000 UTC m=+552.198538238 I0416 09:41:48.032356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8gx7h" condition "Approved" to 2026-04-16 09:41:48.032338887 +0000 UTC m=+552.363880856 I0416 09:41:48.055382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8gx7h" condition "Ready" to 2026-04-16 09:41:48.055359524 +0000 UTC m=+552.386901513 I0416 09:41:48.089778 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:41:48.089758074 +0000 UTC m=+552.421300043 I0416 09:41:48.115564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:41:48.115864 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:41:48.115858107 +0000 UTC m=+552.447400076 I0416 09:41:48.123353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:41:48.136319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:41:48.136774 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:41:48.136761302 +0000 UTC m=+552.468303281 I0416 09:42:40.093697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:42:40.093732 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-16 09:42:40.093723911 +0000 UTC m=+604.425265880 I0416 09:42:40.093922 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 09:42:40.093915136 +0000 UTC m=+604.425457105 I0416 09:42:40.115454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:42:40.115520 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-16 09:42:40.115511431 +0000 UTC m=+604.447053400 I0416 09:42:40.343516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:42:40.380469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jhj4j" condition "Approved" to 2026-04-16 09:42:40.38044892 +0000 UTC m=+604.711990869 I0416 09:42:40.402317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jhj4j" condition "Ready" to 2026-04-16 09:42:40.402303591 +0000 UTC m=+604.733845550 I0416 09:42:40.443071 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:42:40.44305712 +0000 UTC m=+604.774599079 I0416 09:42:40.464702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:42:40.465204 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:42:40.465191958 +0000 UTC m=+604.796733917 I0416 09:42:40.488145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:43:46.824099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:43:46.824136 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-16 09:43:46.824130094 +0000 UTC m=+671.155672043 I0416 09:43:46.824587 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-16 09:43:46.824556055 +0000 UTC m=+671.156098054 I0416 09:43:46.845012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:43:46.845152 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-16 09:43:46.845142248 +0000 UTC m=+671.176684207 I0416 09:43:47.230915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:43:47.265437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-rd7nz" condition "Approved" to 2026-04-16 09:43:47.265418809 +0000 UTC m=+671.596960778 I0416 09:43:47.285181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-rd7nz" condition "Ready" to 2026-04-16 09:43:47.285162272 +0000 UTC m=+671.616704241 I0416 09:43:47.322271 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:43:47.322244237 +0000 UTC m=+671.653786236 I0416 09:43:47.349691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:43:47.350132 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:43:47.350122042 +0000 UTC m=+671.681664031 I0416 09:43:47.362885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:43:47.385559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:44:53.707910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:44:53.707956 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-16 09:44:53.70793528 +0000 UTC m=+738.039477269 I0416 09:44:53.707971 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-16 09:44:53.707960871 +0000 UTC m=+738.039502830 I0416 09:44:53.724169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:44:53.724273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:44:53.724314 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-16 09:44:53.724302639 +0000 UTC m=+738.055844628 I0416 09:44:53.938951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-d7rdh" condition "Approved" to 2026-04-16 09:44:53.938937637 +0000 UTC m=+738.270479596 I0416 09:44:53.961911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-d7rdh" condition "Ready" to 2026-04-16 09:44:53.9619002 +0000 UTC m=+738.293442169 I0416 09:44:53.991627 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:44:53.991602391 +0000 UTC m=+738.323144350 I0416 09:44:54.019398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:44:54.122983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:45:22.189232 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-16 09:45:22.18921902 +0000 UTC m=+766.520760989 I0416 09:45:22.189363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:45:22.189394 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-16 09:45:22.189388914 +0000 UTC m=+766.520930883 I0416 09:45:22.205860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:45:22.205957 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-16 09:45:22.205946888 +0000 UTC m=+766.537488887 I0416 09:45:22.367414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:45:22.398717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pvp47" condition "Approved" to 2026-04-16 09:45:22.39870088 +0000 UTC m=+766.730242869 I0416 09:45:22.421857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pvp47" condition "Ready" to 2026-04-16 09:45:22.421845177 +0000 UTC m=+766.753387166 I0416 09:45:22.453518 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:45:22.453504877 +0000 UTC m=+766.785046836 I0416 09:45:22.491492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:45:22.562550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:46:23.079629 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-16 09:46:23.079615816 +0000 UTC m=+827.411157785 I0416 09:46:23.080168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:46:23.080220 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-16 09:46:23.080210931 +0000 UTC m=+827.411752900 I0416 09:46:23.097654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:46:23.097720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:46:23.097738 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-16 09:46:23.097731578 +0000 UTC m=+827.429273547 I0416 09:46:23.335850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-tczzq" condition "Approved" to 2026-04-16 09:46:23.335819881 +0000 UTC m=+827.667361850 I0416 09:46:23.356319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-tczzq" condition "Ready" to 2026-04-16 09:46:23.356303193 +0000 UTC m=+827.687845162 I0416 09:46:23.389143 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:46:23.389129282 +0000 UTC m=+827.720671251 I0416 09:46:23.412948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:46:24.423227 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-16 09:46:24.423209805 +0000 UTC m=+828.754751794 I0416 09:46:24.423301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:46:24.423328 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-16 09:46:24.423320778 +0000 UTC m=+828.754862767 I0416 09:46:24.448898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:46:24.448969 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-16 09:46:24.448961768 +0000 UTC m=+828.780503767 I0416 09:46:24.615659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:46:24.659200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-dhp9q" condition "Approved" to 2026-04-16 09:46:24.659183785 +0000 UTC m=+828.990725784 I0416 09:46:24.678761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-dhp9q" condition "Ready" to 2026-04-16 09:46:24.678750984 +0000 UTC m=+829.010292943 I0416 09:46:24.706952 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:46:24.706937457 +0000 UTC m=+829.038479426 I0416 09:46:24.726841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:46:24.727338 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:46:24.727326186 +0000 UTC m=+829.058868175 I0416 09:46:24.734295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:46:24.751136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:46:24.751370 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:46:24.751364837 +0000 UTC m=+829.082906806 I0416 09:47:22.910934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:47:22.910980 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-16 09:47:22.910973102 +0000 UTC m=+887.242515071 I0416 09:47:22.911322 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-16 09:47:22.911317021 +0000 UTC m=+887.242858990 I0416 09:47:22.926629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:47:22.926700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:47:22.926714 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-16 09:47:22.926710465 +0000 UTC m=+887.258252424 I0416 09:47:23.081493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-f7qnc" condition "Approved" to 2026-04-16 09:47:23.081476724 +0000 UTC m=+887.413018713 I0416 09:47:23.105843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-f7qnc" condition "Ready" to 2026-04-16 09:47:23.105830642 +0000 UTC m=+887.437372601 I0416 09:47:23.144998 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:47:23.1449795 +0000 UTC m=+887.476521459 I0416 09:47:23.168947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:47:23.228454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:48:12.942224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:48:12.942296 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-16 09:48:12.942284381 +0000 UTC m=+937.273826340 I0416 09:48:12.943393 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-16 09:48:12.943371818 +0000 UTC m=+937.274913787 I0416 09:48:12.972223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:48:12.972358 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-16 09:48:12.972346892 +0000 UTC m=+937.303888871 I0416 09:48:14.902866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:48:14.953290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-62zhr" condition "Approved" to 2026-04-16 09:48:14.953276284 +0000 UTC m=+939.284818253 I0416 09:48:14.977165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-62zhr" condition "Ready" to 2026-04-16 09:48:14.977150291 +0000 UTC m=+939.308692260 I0416 09:48:15.019928 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:48:15.019904309 +0000 UTC m=+939.351446268 I0416 09:48:15.047500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:48:15.048107 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:48:15.048099804 +0000 UTC m=+939.379641763 I0416 09:48:15.076399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:48:15.077139 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:48:15.077127789 +0000 UTC m=+939.408669758 I0416 09:48:24.569933 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-16 09:48:24.569911633 +0000 UTC m=+948.901453622 I0416 09:48:24.570031 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:48:24.570075 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-16 09:48:24.570065367 +0000 UTC m=+948.901607366 I0416 09:48:24.589948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:48:24.590043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:48:24.590085 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-16 09:48:24.590075337 +0000 UTC m=+948.921617336 I0416 09:48:24.958265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-z6rdz" condition "Approved" to 2026-04-16 09:48:24.95825119 +0000 UTC m=+949.289793159 I0416 09:48:24.978485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-z6rdz" condition "Ready" to 2026-04-16 09:48:24.978470475 +0000 UTC m=+949.310012464 I0416 09:48:25.016683 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:48:25.016667509 +0000 UTC m=+949.348209478 I0416 09:48:25.037413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:48:25.037811 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:48:25.037772807 +0000 UTC m=+949.369314776 I0416 09:48:25.055276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:48:25.056346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:06.702504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:51:06.702537 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-16 09:51:06.702530058 +0000 UTC m=+1111.034072007 I0416 09:51:06.702538 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-16 09:51:06.702516218 +0000 UTC m=+1111.034058207 I0416 09:51:06.724502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:06.724635 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-16 09:51:06.72462201 +0000 UTC m=+1111.056164009 I0416 09:51:06.978124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:07.016505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-mh5dm" condition "Approved" to 2026-04-16 09:51:07.016475953 +0000 UTC m=+1111.348017952 I0416 09:51:07.035842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-mh5dm" condition "Ready" to 2026-04-16 09:51:07.035827856 +0000 UTC m=+1111.367369825 I0416 09:51:07.065745 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:51:07.065725513 +0000 UTC m=+1111.397267472 I0416 09:51:07.091096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:07.145734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:08.053569 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-16 09:51:08.053551606 +0000 UTC m=+1112.385093595 I0416 09:51:08.054228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:51:08.054323 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-16 09:51:08.054272634 +0000 UTC m=+1112.385814633 I0416 09:51:08.071127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:08.071319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:51:08.071354 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-16 09:51:08.07134509 +0000 UTC m=+1112.402887089 I0416 09:51:08.493524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:08.504478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-57gnf" condition "Approved" to 2026-04-16 09:51:08.504463639 +0000 UTC m=+1112.836005608 I0416 09:51:08.534628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-57gnf" condition "Ready" to 2026-04-16 09:51:08.534619332 +0000 UTC m=+1112.866161291 I0416 09:51:08.569046 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:51:08.56902968 +0000 UTC m=+1112.900571649 I0416 09:51:08.589044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:08.589365 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:51:08.589355918 +0000 UTC m=+1112.920897887 I0416 09:51:08.608703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:51:08.610794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:54:32.230282 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-16 09:54:32.230265259 +0000 UTC m=+1316.561807218 I0416 09:54:32.230493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:54:32.230624 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-16 09:54:32.230609648 +0000 UTC m=+1316.562151657 I0416 09:54:32.248464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:54:32.248651 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-16 09:54:32.248636135 +0000 UTC m=+1316.580178114 I0416 09:54:32.389173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:54:32.429092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-56zz6" condition "Approved" to 2026-04-16 09:54:32.429081986 +0000 UTC m=+1316.760623945 I0416 09:54:32.451514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-56zz6" condition "Ready" to 2026-04-16 09:54:32.451495982 +0000 UTC m=+1316.783037971 I0416 09:54:32.482007 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:54:32.48199558 +0000 UTC m=+1316.813537539 I0416 09:54:32.504321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:54:32.575931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:55:31.541138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7lqd9-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:55:31.541178 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7lqd9-api" condition "Issuing" to 2026-04-16 09:55:31.541168761 +0000 UTC m=+1375.872710720 I0416 09:55:31.541700 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7lqd9-api" condition "Ready" to 2026-04-16 09:55:31.541695414 +0000 UTC m=+1375.873237383 I0416 09:55:31.685934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7lqd9-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:55:31.685985 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7lqd9-vnc" condition "Issuing" to 2026-04-16 09:55:31.685973584 +0000 UTC m=+1376.017515573 I0416 09:55:31.686580 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7lqd9-vnc" condition "Ready" to 2026-04-16 09:55:31.68657108 +0000 UTC m=+1376.018113069 I0416 09:55:31.728244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7lqd9-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7lqd9-api\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:55:31.733332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7lqd9-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7lqd9-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:55:31.733440 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7lqd9-api" condition "Ready" to 2026-04-16 09:55:31.733420922 +0000 UTC m=+1376.064962891 I0416 09:55:31.733709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7lqd9-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:55:31.733747 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7lqd9-vnc" condition "Issuing" to 2026-04-16 09:55:31.733736549 +0000 UTC m=+1376.065278518 I0416 09:55:31.993806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7lqd9-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7lqd9-api\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:55:32.113941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7lqd9-api-69j24" condition "Approved" to 2026-04-16 09:55:32.113923293 +0000 UTC m=+1376.445465292 I0416 09:55:32.372230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7lqd9-api-69j24" condition "Ready" to 2026-04-16 09:55:32.372214416 +0000 UTC m=+1376.703756405 I0416 09:55:32.424780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7lqd9-vnc-n6mzj" condition "Approved" to 2026-04-16 09:55:32.424762911 +0000 UTC m=+1376.756304880 I0416 09:55:32.517684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7lqd9-vnc-n6mzj" condition "Ready" to 2026-04-16 09:55:32.517672456 +0000 UTC m=+1376.849214425 I0416 09:55:32.589275 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7lqd9-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:55:32.589257208 +0000 UTC m=+1376.920799167 I0416 09:55:32.650213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7lqd9-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7lqd9-api\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:55:32.650900 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7lqd9-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:55:32.65089282 +0000 UTC m=+1376.982434779 I0416 09:55:32.669586 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7lqd9-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:55:32.669569237 +0000 UTC m=+1377.001111206 I0416 09:55:32.674293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7lqd9-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7lqd9-api\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:55:32.712251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7lqd9-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7lqd9-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:55:32.713967 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7lqd9-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:55:32.713953938 +0000 UTC m=+1377.045495927 I0416 09:55:32.760597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-7lqd9-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7lqd9-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:55:32.764756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7lqd9-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7lqd9-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:57:59.938834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:57:59.938885 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-16 09:57:59.938878618 +0000 UTC m=+1524.270420577 I0416 09:57:59.938908 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-16 09:57:59.938883428 +0000 UTC m=+1524.270425417 E0416 09:57:59.954121 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 09:57:59.954234 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-16 09:57:59.954222471 +0000 UTC m=+1524.285764460 I0416 09:57:59.954261 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 09:57:59.965347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:57:59.965435 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-16 09:57:59.965424842 +0000 UTC m=+1524.296966811 E0416 09:57:59.968810 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0416 09:57:59.968909 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 09:57:59.970289 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0416 09:57:59.970336 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0416 09:57:59.982109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:57:59.982182 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-16 09:57:59.982177231 +0000 UTC m=+1524.313719200 I0416 09:57:59.984410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:57:59.989978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-w6pz8" condition "Approved" to 2026-04-16 09:57:59.989963776 +0000 UTC m=+1524.321505745 I0416 09:57:59.993847 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-16 09:57:59.993841852 +0000 UTC m=+1524.325383821 I0416 09:58:00.006429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:00.011481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-w6pz8" condition "Ready" to 2026-04-16 09:58:00.011463944 +0000 UTC m=+1524.343005933 I0416 09:58:00.041859 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:00.041846044 +0000 UTC m=+1524.373388013 I0416 09:58:00.073177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:00.702708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:58:00.702754 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-16 09:58:00.702742102 +0000 UTC m=+1525.034284091 I0416 09:58:00.703009 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-16 09:58:00.702979599 +0000 UTC m=+1525.034521598 I0416 09:58:00.717772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" E0416 09:58:00.717855 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 09:58:00.717869 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-16 09:58:00.71786085 +0000 UTC m=+1525.049402819 I0416 09:58:00.717885 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-16 09:58:00.717878581 +0000 UTC m=+1525.049420550 I0416 09:58:00.717923 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0416 09:58:00.727741 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0416 09:58:00.727805 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 09:58:00.727824 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0416 09:58:00.727856 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0416 09:58:00.737454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:00.737581 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-16 09:58:00.737522943 +0000 UTC m=+1525.069064912 I0416 09:58:00.744842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:00.745629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-lwgfv" condition "Approved" to 2026-04-16 09:58:00.745620945 +0000 UTC m=+1525.077162904 I0416 09:58:00.758104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-lwgfv" condition "Ready" to 2026-04-16 09:58:00.758097467 +0000 UTC m=+1525.089639436 I0416 09:58:00.782260 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:00.782239242 +0000 UTC m=+1525.113781231 I0416 09:58:00.802381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:00.803574 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:00.803564075 +0000 UTC m=+1525.135106044 I0416 09:58:00.808594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:00.848763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:00.849005 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:00.848997432 +0000 UTC m=+1525.180539391 I0416 09:58:01.542109 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-16 09:58:01.542084646 +0000 UTC m=+1525.873626635 I0416 09:58:01.542170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:58:01.542222 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-16 09:58:01.542207939 +0000 UTC m=+1525.873749928 I0416 09:58:01.559988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:01.561617 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-16 09:58:01.560080375 +0000 UTC m=+1525.891622374 I0416 09:58:01.579592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:01.605490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-5zc6k" condition "Approved" to 2026-04-16 09:58:01.605474772 +0000 UTC m=+1525.937016741 I0416 09:58:01.658340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-5zc6k" condition "Ready" to 2026-04-16 09:58:01.658321844 +0000 UTC m=+1525.989863793 I0416 09:58:04.971268 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:04.971251785 +0000 UTC m=+1529.302793754 I0416 09:58:04.987782 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-5zc6k" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:04.987770409 +0000 UTC m=+1529.319312368 I0416 09:58:05.026367 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:05.026345894 +0000 UTC m=+1529.357887863 I0416 09:58:05.051398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:05.051873 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:05.051853412 +0000 UTC m=+1529.383395401 I0416 09:58:05.071359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:05.073907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:58:05.728778 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:58:05.728760961 +0000 UTC m=+1530.060302960 I0416 09:59:39.269781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 09:59:39.269837 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-16 09:59:39.26982808 +0000 UTC m=+1623.601370049 I0416 09:59:39.269848 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-16 09:59:39.26982504 +0000 UTC m=+1623.601367039 I0416 09:59:39.288007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:59:39.288120 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-16 09:59:39.288109817 +0000 UTC m=+1623.619651786 I0416 09:59:39.360560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 09:59:39.400906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-jg4j7" condition "Approved" to 2026-04-16 09:59:39.400889809 +0000 UTC m=+1623.732431768 I0416 09:59:39.422675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-jg4j7" condition "Ready" to 2026-04-16 09:59:39.422662854 +0000 UTC m=+1623.754204823 I0416 09:59:39.450356 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 09:59:39.450337987 +0000 UTC m=+1623.781879946 I0416 09:59:39.481185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:00:31.092162 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-16 10:00:31.092150966 +0000 UTC m=+1675.423692935 I0416 10:00:31.092688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:00:31.092710 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-16 10:00:31.09270581 +0000 UTC m=+1675.424247779 I0416 10:00:31.108082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:00:31.108293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:00:31.108344 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-16 10:00:31.108335721 +0000 UTC m=+1675.439877690 I0416 10:00:31.329586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:00:31.341979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-sf7zj" condition "Approved" to 2026-04-16 10:00:31.341962517 +0000 UTC m=+1675.673504486 I0416 10:00:31.364911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-sf7zj" condition "Ready" to 2026-04-16 10:00:31.364895611 +0000 UTC m=+1675.696437580 I0416 10:00:31.405749 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:00:31.405725362 +0000 UTC m=+1675.737267361 I0416 10:00:31.426221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:00:31.426543 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:00:31.426535503 +0000 UTC m=+1675.758077472 I0416 10:00:31.450502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:25.483130 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-16 10:01:25.483112104 +0000 UTC m=+1729.814654103 I0416 10:01:25.505586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:01:25.505651 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-16 10:01:25.505643818 +0000 UTC m=+1729.837185767 I0416 10:01:25.505604 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-16 10:01:25.505583727 +0000 UTC m=+1729.837125736 I0416 10:01:25.518809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:25.518888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:01:25.518915 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-16 10:01:25.518906921 +0000 UTC m=+1729.850448890 E0416 10:01:25.536899 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0416 10:01:25.599890 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-16 10:01:25.599867856 +0000 UTC m=+1729.931409855 I0416 10:01:25.621326 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-16 10:01:25.621308854 +0000 UTC m=+1729.952850853 I0416 10:01:25.621351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:01:25.621690 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-16 10:01:25.621635142 +0000 UTC m=+1729.953177141 I0416 10:01:25.636794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:25.636889 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-16 10:01:25.636881262 +0000 UTC m=+1729.968423231 E0416 10:01:25.811276 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0416 10:01:25.897203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:25.941371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-j4bzp" condition "Approved" to 2026-04-16 10:01:25.941355372 +0000 UTC m=+1730.272897341 I0416 10:01:25.964842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-j4bzp" condition "Ready" to 2026-04-16 10:01:25.964829869 +0000 UTC m=+1730.296371838 I0416 10:01:25.995119 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:01:25.995102046 +0000 UTC m=+1730.326644015 I0416 10:01:26.016668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:26.017098 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:01:26.017086277 +0000 UTC m=+1730.348628276 I0416 10:01:26.053764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:26.391465 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-16 10:01:26.391445145 +0000 UTC m=+1730.722987144 I0416 10:01:26.411251 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-16 10:01:26.41124296 +0000 UTC m=+1730.742784929 I0416 10:01:26.411594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:01:26.411615 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-16 10:01:26.411611819 +0000 UTC m=+1730.743153788 I0416 10:01:26.436592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:26.436649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:01:26.436680 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-16 10:01:26.436673876 +0000 UTC m=+1730.768215845 I0416 10:01:26.757496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:26.781841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lrk44" condition "Approved" to 2026-04-16 10:01:26.781827773 +0000 UTC m=+1731.113369732 I0416 10:01:26.802920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lrk44" condition "Ready" to 2026-04-16 10:01:26.80290984 +0000 UTC m=+1731.134451799 I0416 10:01:26.835409 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:01:26.835389563 +0000 UTC m=+1731.166931562 I0416 10:01:26.852594 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-16 10:01:26.852574903 +0000 UTC m=+1731.184116882 I0416 10:01:26.861048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:26.876512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:01:26.876522 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-16 10:01:26.876505753 +0000 UTC m=+1731.208047722 I0416 10:01:26.876557 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-16 10:01:26.876548164 +0000 UTC m=+1731.208090133 I0416 10:01:26.895491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:26.895624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:01:26.895685 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-16 10:01:26.895642971 +0000 UTC m=+1731.227184930 I0416 10:01:26.924422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:27.170504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-v8cxx" condition "Approved" to 2026-04-16 10:01:27.170489879 +0000 UTC m=+1731.502031828 I0416 10:01:27.200714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-v8cxx" condition "Ready" to 2026-04-16 10:01:27.200702234 +0000 UTC m=+1731.532244203 I0416 10:01:27.249528 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:01:27.249511666 +0000 UTC m=+1731.581053635 I0416 10:01:27.325890 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-16 10:01:27.325870767 +0000 UTC m=+1731.657412736 I0416 10:01:27.341775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:27.342086 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:01:27.342079843 +0000 UTC m=+1731.673621812 I0416 10:01:27.348511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:01:27.348559 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-16 10:01:27.348545404 +0000 UTC m=+1731.680087403 I0416 10:01:27.348712 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-16 10:01:27.348703648 +0000 UTC m=+1731.680245617 I0416 10:01:27.712553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:27.712635 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-16 10:01:27.712628604 +0000 UTC m=+1732.044170563 I0416 10:01:27.790691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:27.799443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:28.045286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:28.199782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-j47x9" condition "Approved" to 2026-04-16 10:01:28.199770255 +0000 UTC m=+1732.531312214 I0416 10:01:28.304111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-j47x9" condition "Ready" to 2026-04-16 10:01:28.304095085 +0000 UTC m=+1732.635637054 I0416 10:01:28.748270 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:01:28.74825663 +0000 UTC m=+1733.079798619 I0416 10:01:28.891631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:28.892483 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:01:28.892472848 +0000 UTC m=+1733.224014817 I0416 10:01:29.144971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:01:29.197854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:05:42.202643 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-16 10:05:42.202631778 +0000 UTC m=+1986.534173747 I0416 10:05:42.203010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:05:42.203126 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-16 10:05:42.20311539 +0000 UTC m=+1986.534657389 I0416 10:05:42.246494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:05:42.246645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:05:42.246694 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-16 10:05:42.246686575 +0000 UTC m=+1986.578228554 I0416 10:05:42.489960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-s9jkd" condition "Approved" to 2026-04-16 10:05:42.489943889 +0000 UTC m=+1986.821485848 I0416 10:05:42.518530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-s9jkd" condition "Ready" to 2026-04-16 10:05:42.518512804 +0000 UTC m=+1986.850054803 I0416 10:05:42.553237 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:05:42.553217021 +0000 UTC m=+1986.884758990 I0416 10:05:42.576144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:05:42.576627 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:05:42.576617958 +0000 UTC m=+1986.908159927 I0416 10:05:42.600837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:05:44.966351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 10:05:44.966396 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-16 10:05:44.96638668 +0000 UTC m=+1989.297928669 I0416 10:05:44.967238 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-16 10:05:44.967229751 +0000 UTC m=+1989.298771740 I0416 10:05:44.989708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:05:44.989934 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-16 10:05:44.989922261 +0000 UTC m=+1989.321464250 I0416 10:05:45.374391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 10:05:45.417498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-f2v6w" condition "Approved" to 2026-04-16 10:05:45.417488543 +0000 UTC m=+1989.749030502 I0416 10:05:45.469060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-f2v6w" condition "Ready" to 2026-04-16 10:05:45.469049446 +0000 UTC m=+1989.800591415 I0416 10:05:45.503697 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 10:05:45.503683511 +0000 UTC m=+1989.835225470 I0416 10:05:45.537543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"