I0428 22:25:30.188674 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 22:25:30.188783 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 22:25:30.189563 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 22:25:30.194810 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 22:25:30.195236 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 22:25:30.195350 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 22:25:30.195435 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 22:25:30.197720 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 22:25:30.213946 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 22:25:30.221547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 22:25:30.224707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 22:25:30.226817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 22:25:30.229188 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 22:25:30.231337 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 22:25:30.235196 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 22:25:30.240691 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 22:25:30.240731 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 22:25:30.240768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 22:25:30.240819 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 22:25:30.243483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 22:25:30.245776 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 22:25:30.247992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 22:25:30.251274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 22:25:30.253472 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 22:25:30.253610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 22:25:30.255478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 22:25:30.257597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 22:25:30.263711 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 22:25:30.266952 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 22:25:30.266971 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 22:25:30.267071 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 22:25:30.268895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 22:25:30.270900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 22:25:30.274036 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.274135 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.274674 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.296760 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.311314 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.327806 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.341837 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.355549 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.360354 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:30.370973 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 22:25:42.924824 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 22:25:42.924806612 +0000 UTC m=+12.767468182 I0428 22:25:43.625602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:25:43.625698 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 22:25:43.625688772 +0000 UTC m=+13.468350332 I0428 22:25:43.625807 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:25:43.625783724 +0000 UTC m=+13.468445294 E0428 22:25:43.641809 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:25:43.641937 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 22:25:43.641925618 +0000 UTC m=+13.484587188 E0428 22:25:43.641981 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:25:43.645558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:43.645677 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:25:43.645666547 +0000 UTC m=+13.488328127 E0428 22:25:43.653445 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 22:25:43.653701 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:25:43.653767 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:25:43.653804 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 22:25:43.659838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:43.659913 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:25:43.659906611 +0000 UTC m=+13.502568151 I0428 22:25:43.669063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-plg6p" condition "Approved" to 2026-04-28 22:25:43.669050306 +0000 UTC m=+13.511711886 I0428 22:25:43.672452 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 22:25:43.672443308 +0000 UTC m=+13.515104868 I0428 22:25:43.680570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:43.681285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-plg6p" condition "Ready" to 2026-04-28 22:25:43.681273187 +0000 UTC m=+13.523934727 I0428 22:25:43.703885 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:25:43.703872208 +0000 UTC m=+13.546533768 I0428 22:25:43.728633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:43.729124 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:25:43.729113975 +0000 UTC m=+13.571775535 I0428 22:25:43.743426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:43.743704 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:25:43.743696156 +0000 UTC m=+13.586357716 I0428 22:25:43.746074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:25:48.654648 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:25:48.654638562 +0000 UTC m=+18.497300112 I0428 22:26:06.574431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:26:06.574469 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 22:26:06.574460458 +0000 UTC m=+36.417122018 I0428 22:26:06.574487 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 22:26:06.574469539 +0000 UTC m=+36.417131079 I0428 22:26:06.586725 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 22:26:06.586713379 +0000 UTC m=+36.429374919 I0428 22:26:06.595290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:06.595359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:26:06.595390 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 22:26:06.595384874 +0000 UTC m=+36.438046414 I0428 22:26:06.765664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:06.774148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9w6nn" condition "Approved" to 2026-04-28 22:26:06.774140716 +0000 UTC m=+36.616802256 I0428 22:26:06.803332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9w6nn" condition "Ready" to 2026-04-28 22:26:06.803316429 +0000 UTC m=+36.645977989 I0428 22:26:06.834583 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:26:06.834565985 +0000 UTC m=+36.677227525 I0428 22:26:06.854893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:26:06.855288 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:26:06.855281086 +0000 UTC m=+36.697942626 I0428 22:26:06.874468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:14.924581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:30:14.924632 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready" to 2026-04-28 22:30:14.924620095 +0000 UTC m=+284.767281635 I0428 22:30:14.924633 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-28 22:30:14.924622055 +0000 UTC m=+284.767283615 I0428 22:30:14.939100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:14.939171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:30:14.939192 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Issuing" to 2026-04-28 22:30:14.939184355 +0000 UTC m=+284.781845895 I0428 22:30:15.137541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:15.147493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-dqqhb" condition "Approved" to 2026-04-28 22:30:15.147470654 +0000 UTC m=+284.990132194 I0428 22:30:15.175078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-129.nip.io-tls-dqqhb" condition "Ready" to 2026-04-28 22:30:15.175064351 +0000 UTC m=+285.017725911 I0428 22:30:15.206554 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:30:15.206539343 +0000 UTC m=+285.049200903 I0428 22:30:15.231730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:30:15.232246 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:30:15.23223745 +0000 UTC m=+285.074899010 I0428 22:30:15.251196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:19.667401 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 22:31:19.667382353 +0000 UTC m=+349.510043913 I0428 22:31:19.667482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:31:19.667527 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 22:31:19.667515745 +0000 UTC m=+349.510177305 E0428 22:31:19.681164 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:31:19.681207 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 22:31:19.681199788 +0000 UTC m=+349.523861328 E0428 22:31:19.681251 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 22:31:19.682175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:19.682272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:31:19.682301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 22:31:19.6822925 +0000 UTC m=+349.524954050 E0428 22:31:19.694405 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 22:31:19.694841 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:31:19.694889 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 22:31:19.694961 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 22:31:19.720548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:19.724795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nmkz9" condition "Approved" to 2026-04-28 22:31:19.724774368 +0000 UTC m=+349.567435898 I0428 22:31:19.737038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-nmkz9" condition "Ready" to 2026-04-28 22:31:19.73702333 +0000 UTC m=+349.579684860 I0428 22:31:19.759670 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:19.759651912 +0000 UTC m=+349.602313462 I0428 22:31:19.778607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:19.779827 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:19.779805733 +0000 UTC m=+349.622467303 I0428 22:31:19.782868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:19.795661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:31:19.795896 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:19.795884736 +0000 UTC m=+349.638546276 I0428 22:31:24.695859 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:31:24.695845122 +0000 UTC m=+354.538506682 I0428 22:32:00.799025 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 22:32:00.798996094 +0000 UTC m=+390.641657644 I0428 22:32:00.799062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:00.799104 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 22:32:00.799096766 +0000 UTC m=+390.641758306 I0428 22:32:00.799239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:00.799298 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 22:32:00.79928819 +0000 UTC m=+390.641949740 I0428 22:32:00.799334 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 22:32:00.799329321 +0000 UTC m=+390.641990861 I0428 22:32:00.824797 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 22:32:00.824785893 +0000 UTC m=+390.667447423 I0428 22:32:00.825079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:00.825102 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 22:32:00.825098659 +0000 UTC m=+390.667760189 I0428 22:32:00.831491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:00.831560 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 22:32:00.831551277 +0000 UTC m=+390.674212817 I0428 22:32:00.839261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:00.839456 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 22:32:00.839447335 +0000 UTC m=+390.682108885 I0428 22:32:00.855996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:00.856068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:00.856122 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 22:32:00.856116319 +0000 UTC m=+390.698777859 I0428 22:32:00.984724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:01.011556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:01.014636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-frkdj" condition "Approved" to 2026-04-28 22:32:01.014619514 +0000 UTC m=+390.857281084 I0428 22:32:01.018468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-thfxv" condition "Approved" to 2026-04-28 22:32:01.018457405 +0000 UTC m=+390.861118945 I0428 22:32:01.034181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-thfxv" condition "Ready" to 2026-04-28 22:32:01.03417249 +0000 UTC m=+390.876834040 I0428 22:32:01.036658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-frkdj" condition "Ready" to 2026-04-28 22:32:01.036652603 +0000 UTC m=+390.879314143 I0428 22:32:01.058775 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:01.058766224 +0000 UTC m=+390.901427764 I0428 22:32:01.066358 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:01.066346615 +0000 UTC m=+390.909008185 I0428 22:32:01.120679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:01.120690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:01.122841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:01.901327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bc7t9" condition "Approved" to 2026-04-28 22:32:01.901305439 +0000 UTC m=+391.743966999 I0428 22:32:02.304136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bc7t9" condition "Ready" to 2026-04-28 22:32:02.304113763 +0000 UTC m=+392.146775333 I0428 22:32:02.508816 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-bc7t9" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-75bht" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0428 22:32:02.647309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-65lhk" condition "Approved" to 2026-04-28 22:32:02.647285419 +0000 UTC m=+392.489946979 I0428 22:32:03.034795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-65lhk" condition "Ready" to 2026-04-28 22:32:03.034775857 +0000 UTC m=+392.877437427 I0428 22:32:03.199532 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:03.199513464 +0000 UTC m=+393.042175024 I0428 22:32:03.293456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:03.293967 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:03.293957164 +0000 UTC m=+393.136618724 I0428 22:32:03.542109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:03.594729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:08.850246 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" condition "Ready" to 2026-04-28 22:32:08.850231961 +0000 UTC m=+398.692893501 I0428 22:32:08.850366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:08.850442 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" condition "Issuing" to 2026-04-28 22:32:08.850406965 +0000 UTC m=+398.693068525 I0428 22:32:08.868685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sk96b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:08.868770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:08.868796 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" condition "Issuing" to 2026-04-28 22:32:08.868788756 +0000 UTC m=+398.711450326 I0428 22:32:09.057275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sk96b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:09.066297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sk96b-r6frs" condition "Approved" to 2026-04-28 22:32:09.06627968 +0000 UTC m=+398.908941220 I0428 22:32:09.085915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sk96b-r6frs" condition "Ready" to 2026-04-28 22:32:09.085902468 +0000 UTC m=+398.928564008 I0428 22:32:09.112680 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:09.112668888 +0000 UTC m=+398.955330428 I0428 22:32:09.136600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sk96b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:09.189082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sk96b-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sk96b-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:42.627120 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 22:32:42.62710589 +0000 UTC m=+432.469767430 I0428 22:32:42.627174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:42.627371 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 22:32:42.627361535 +0000 UTC m=+432.470023075 I0428 22:32:42.647500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:42.647601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:32:42.647627 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 22:32:42.647617336 +0000 UTC m=+432.490278906 I0428 22:32:43.080440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:43.093280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vfsnz" condition "Approved" to 2026-04-28 22:32:43.093267644 +0000 UTC m=+432.935929184 I0428 22:32:43.110790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vfsnz" condition "Ready" to 2026-04-28 22:32:43.110780756 +0000 UTC m=+432.953442296 I0428 22:32:43.138382 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:43.138370463 +0000 UTC m=+432.981032003 I0428 22:32:43.152670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:43.152953 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:43.152944092 +0000 UTC m=+432.995605632 I0428 22:32:43.167417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:32:43.167959 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:32:43.167949511 +0000 UTC m=+433.010611051 I0428 22:32:43.169285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:35:56.970486 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 22:35:56.970457845 +0000 UTC m=+626.813119385 I0428 22:35:56.970520 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:35:56.970557 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 22:35:56.970547696 +0000 UTC m=+626.813209256 I0428 22:35:56.987394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:35:56.987475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:35:56.987496 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 22:35:56.987487227 +0000 UTC m=+626.830148767 I0428 22:35:57.187718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:35:57.202641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ldhsm" condition "Approved" to 2026-04-28 22:35:57.20262552 +0000 UTC m=+627.045287060 I0428 22:35:57.220701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ldhsm" condition "Ready" to 2026-04-28 22:35:57.220689965 +0000 UTC m=+627.063351505 I0428 22:35:57.261755 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:35:57.261739327 +0000 UTC m=+627.104400907 I0428 22:35:57.281533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:35:57.282131 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:35:57.282123511 +0000 UTC m=+627.124785051 I0428 22:35:57.287329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:35:57.306969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:35:57.307277 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:35:57.307266595 +0000 UTC m=+627.149928135 I0428 22:35:57.315796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:38:17.107480 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 22:38:17.107466057 +0000 UTC m=+766.950127597 I0428 22:38:17.107557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:38:17.107629 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 22:38:17.107620831 +0000 UTC m=+766.950282371 I0428 22:38:17.130126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:38:17.130188 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 22:38:17.130181411 +0000 UTC m=+766.972842951 I0428 22:38:17.509476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:38:17.542704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-c8t2t" condition "Approved" to 2026-04-28 22:38:17.542682928 +0000 UTC m=+767.385344488 I0428 22:38:17.563671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-c8t2t" condition "Ready" to 2026-04-28 22:38:17.563656285 +0000 UTC m=+767.406317855 I0428 22:38:17.590199 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:38:17.590192219 +0000 UTC m=+767.432853759 I0428 22:38:17.616835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:38:17.678309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:14.489930 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 22:39:14.489899075 +0000 UTC m=+824.332560635 I0428 22:39:14.490093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:39:14.490136 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 22:39:14.49012615 +0000 UTC m=+824.332787690 I0428 22:39:14.510405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:14.510485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:39:14.510506 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 22:39:14.510499423 +0000 UTC m=+824.353160993 I0428 22:39:14.709967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-jvvwg" condition "Approved" to 2026-04-28 22:39:14.709953564 +0000 UTC m=+824.552615094 I0428 22:39:14.737200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-jvvwg" condition "Ready" to 2026-04-28 22:39:14.737185844 +0000 UTC m=+824.579847414 I0428 22:39:14.766597 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:39:14.766583038 +0000 UTC m=+824.609244578 I0428 22:39:14.790611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:14.791048 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:39:14.791039488 +0000 UTC m=+824.633701028 I0428 22:39:14.807722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:39:14.808013 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:39:14.808005519 +0000 UTC m=+824.650667059 I0428 22:42:09.210383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:42:09.210493 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 22:42:09.210479784 +0000 UTC m=+999.053141354 I0428 22:42:09.210567 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 22:42:09.210543356 +0000 UTC m=+999.053204926 I0428 22:42:09.232412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:42:09.232723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:42:09.232769 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 22:42:09.232757169 +0000 UTC m=+999.075418729 I0428 22:42:09.445439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:42:09.459049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9sn78" condition "Approved" to 2026-04-28 22:42:09.459029748 +0000 UTC m=+999.301691318 I0428 22:42:09.478353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9sn78" condition "Ready" to 2026-04-28 22:42:09.478341239 +0000 UTC m=+999.321002769 I0428 22:42:09.507683 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:42:09.507662874 +0000 UTC m=+999.350324424 I0428 22:42:09.532280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:42:09.532920 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:42:09.532907892 +0000 UTC m=+999.375569462 I0428 22:42:09.551280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:48:24.362014 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-28 22:48:24.361995457 +0000 UTC m=+1374.204657017 I0428 22:48:24.362161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:48:24.362184 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 22:48:24.362177411 +0000 UTC m=+1374.204838951 I0428 22:48:24.379122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:48:24.379219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:48:24.379241 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 22:48:24.379236314 +0000 UTC m=+1374.221897854 I0428 22:48:24.514905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:48:24.538846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-96sbn" condition "Approved" to 2026-04-28 22:48:24.538837416 +0000 UTC m=+1374.381498946 I0428 22:48:24.579184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-96sbn" condition "Ready" to 2026-04-28 22:48:24.579175993 +0000 UTC m=+1374.421837523 I0428 22:48:24.612895 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:48:24.612880719 +0000 UTC m=+1374.455542259 I0428 22:48:24.643157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:49:47.415018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:49:47.415051 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 22:49:47.415044868 +0000 UTC m=+1457.257706408 I0428 22:49:47.415384 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 22:49:47.415378265 +0000 UTC m=+1457.258039805 I0428 22:49:47.429204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:49:47.429282 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 22:49:47.429275301 +0000 UTC m=+1457.271936841 I0428 22:49:47.873883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:49:47.907837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-jzwnz" condition "Approved" to 2026-04-28 22:49:47.907820792 +0000 UTC m=+1457.750482332 I0428 22:49:47.929392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-jzwnz" condition "Ready" to 2026-04-28 22:49:47.929321249 +0000 UTC m=+1457.771982789 I0428 22:49:47.955552 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:49:47.955536356 +0000 UTC m=+1457.798197896 I0428 22:49:47.976083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:49:48.072958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:41.207296 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 22:50:41.207259457 +0000 UTC m=+1511.049921027 I0428 22:50:41.207825 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:50:41.207858 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 22:50:41.207851599 +0000 UTC m=+1511.050513169 I0428 22:50:41.225311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:41.225376 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:50:41.225395 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 22:50:41.225388232 +0000 UTC m=+1511.068049802 I0428 22:50:41.273509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-pgn9r" condition "Approved" to 2026-04-28 22:50:41.273490494 +0000 UTC m=+1511.116152054 I0428 22:50:41.292637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-pgn9r" condition "Ready" to 2026-04-28 22:50:41.29262524 +0000 UTC m=+1511.135286790 I0428 22:50:41.321721 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:50:41.321703267 +0000 UTC m=+1511.164364817 I0428 22:50:41.348074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:41.400971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:41.805113 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 22:50:41.805096545 +0000 UTC m=+1511.647758085 I0428 22:50:41.805127 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:50:41.805200 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 22:50:41.805189098 +0000 UTC m=+1511.647850638 I0428 22:50:41.823526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:41.823604 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 22:50:41.823597428 +0000 UTC m=+1511.666258968 I0428 22:50:41.842599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:41.866387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-tf6k2" condition "Approved" to 2026-04-28 22:50:41.866372447 +0000 UTC m=+1511.709033987 I0428 22:50:41.881187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-tf6k2" condition "Ready" to 2026-04-28 22:50:41.881173462 +0000 UTC m=+1511.723834992 I0428 22:50:41.915269 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:50:41.915255725 +0000 UTC m=+1511.757917265 I0428 22:50:41.936493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:41.936859 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:50:41.936849434 +0000 UTC m=+1511.779510974 I0428 22:50:41.951169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:41.958139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:50:42.480028 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-28 22:50:42.480011141 +0000 UTC m=+1512.322672701 I0428 22:50:43.088271 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-28 22:50:43.088256512 +0000 UTC m=+1512.930918072 I0428 22:51:27.701133 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 22:51:27.701116394 +0000 UTC m=+1557.543777924 I0428 22:51:27.701561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:51:27.702318 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 22:51:27.702311129 +0000 UTC m=+1557.544972679 I0428 22:51:27.732988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:27.733053 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 22:51:27.733045772 +0000 UTC m=+1557.575707302 I0428 22:51:30.065587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:30.109155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-fvcxs" condition "Approved" to 2026-04-28 22:51:30.109143574 +0000 UTC m=+1559.951805114 I0428 22:51:30.136517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-fvcxs" condition "Ready" to 2026-04-28 22:51:30.136502905 +0000 UTC m=+1559.979164435 I0428 22:51:30.168520 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:51:30.168504575 +0000 UTC m=+1560.011166115 I0428 22:51:30.196150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:51:30.255165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:50.775549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:53:50.775644 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 22:53:50.775632765 +0000 UTC m=+1700.618294325 I0428 22:53:50.775573 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-28 22:53:50.775552863 +0000 UTC m=+1700.618214423 I0428 22:53:50.791542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:50.791623 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-28 22:53:50.791615515 +0000 UTC m=+1700.634277045 I0428 22:53:51.002911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:51.044829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-qqk6b" condition "Approved" to 2026-04-28 22:53:51.044813743 +0000 UTC m=+1700.887475313 I0428 22:53:51.066754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-qqk6b" condition "Ready" to 2026-04-28 22:53:51.066742039 +0000 UTC m=+1700.909403589 I0428 22:53:51.092657 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:53:51.092635758 +0000 UTC m=+1700.935297358 I0428 22:53:51.113992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:52.148948 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 22:53:52.148933165 +0000 UTC m=+1701.991594705 I0428 22:53:52.149062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:53:52.149155 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-28 22:53:52.14914541 +0000 UTC m=+1701.991806950 I0428 22:53:52.164234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:52.164322 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 22:53:52.164311283 +0000 UTC m=+1702.006972823 I0428 22:53:52.360825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:53:52.389057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-n2kvz" condition "Approved" to 2026-04-28 22:53:52.389041206 +0000 UTC m=+1702.231702736 I0428 22:53:52.408661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-n2kvz" condition "Ready" to 2026-04-28 22:53:52.408647812 +0000 UTC m=+1702.251309342 I0428 22:53:52.442211 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:53:52.442193215 +0000 UTC m=+1702.284854755 I0428 22:53:52.460742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:56:47.332442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:56:47.332483 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 22:56:47.332419197 +0000 UTC m=+1877.175080737 I0428 22:56:47.332523 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-28 22:56:47.332513269 +0000 UTC m=+1877.175174839 I0428 22:56:47.349727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:56:47.349794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:56:47.349811 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-28 22:56:47.349804866 +0000 UTC m=+1877.192466416 I0428 22:56:47.486951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-jq6w9" condition "Approved" to 2026-04-28 22:56:47.486932959 +0000 UTC m=+1877.329594499 I0428 22:56:47.508579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-jq6w9" condition "Ready" to 2026-04-28 22:56:47.508568779 +0000 UTC m=+1877.351230319 I0428 22:56:47.536545 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:56:47.536530092 +0000 UTC m=+1877.379191632 I0428 22:56:47.552136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:56:47.552599 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:56:47.552591674 +0000 UTC m=+1877.395253214 I0428 22:56:47.567843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:56:47.577871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:34.748495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-h6sfq-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:57:34.748547 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-h6sfq-api" condition "Issuing" to 2026-04-28 22:57:34.748535764 +0000 UTC m=+1924.591197334 I0428 22:57:34.748765 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-h6sfq-api" condition "Ready" to 2026-04-28 22:57:34.748751449 +0000 UTC m=+1924.591413009 I0428 22:57:34.749705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-h6sfq-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:57:34.749733 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-h6sfq-vnc" condition "Issuing" to 2026-04-28 22:57:34.74972675 +0000 UTC m=+1924.592388320 I0428 22:57:34.749722 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-h6sfq-vnc" condition "Ready" to 2026-04-28 22:57:34.749691199 +0000 UTC m=+1924.592352769 I0428 22:57:34.767201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-h6sfq-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-h6sfq-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:34.767289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-h6sfq-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:57:34.767322 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-h6sfq-api" condition "Issuing" to 2026-04-28 22:57:34.767316163 +0000 UTC m=+1924.609977693 I0428 22:57:34.773850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-h6sfq-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-h6sfq-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:34.773926 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-h6sfq-vnc" condition "Ready" to 2026-04-28 22:57:34.773917983 +0000 UTC m=+1924.616579523 I0428 22:57:34.964037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-h6sfq-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-h6sfq-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:34.995147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-h6sfq-vnc-h8cdz" condition "Approved" to 2026-04-28 22:57:34.995133692 +0000 UTC m=+1924.837795222 I0428 22:57:35.012704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-h6sfq-vnc-h8cdz" condition "Ready" to 2026-04-28 22:57:35.012692885 +0000 UTC m=+1924.855354425 I0428 22:57:35.023078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-h6sfq-api-dsnmr" condition "Approved" to 2026-04-28 22:57:35.023065565 +0000 UTC m=+1924.865727105 I0428 22:57:35.041174 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-h6sfq-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:57:35.04116183 +0000 UTC m=+1924.883823380 I0428 22:57:35.042598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-h6sfq-api-dsnmr" condition "Ready" to 2026-04-28 22:57:35.04258568 +0000 UTC m=+1924.885247210 I0428 22:57:35.061729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-h6sfq-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-h6sfq-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:35.073524 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-h6sfq-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:57:35.073507687 +0000 UTC m=+1924.916169217 I0428 22:57:35.093987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-h6sfq-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-h6sfq-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:57:35.094280 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-h6sfq-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:57:35.094273948 +0000 UTC m=+1924.936935498 I0428 22:57:35.123433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-h6sfq-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-h6sfq-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:59:40.227719 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-28 22:59:40.227701465 +0000 UTC m=+2050.070363025 I0428 22:59:40.228170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:59:40.228250 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-28 22:59:40.228239327 +0000 UTC m=+2050.070900897 I0428 22:59:40.245444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:59:40.245559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 22:59:40.245585 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-28 22:59:40.245575255 +0000 UTC m=+2050.088236825 I0428 22:59:40.373056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-nvd7m" condition "Approved" to 2026-04-28 22:59:40.373041194 +0000 UTC m=+2050.215702734 I0428 22:59:40.390815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-nvd7m" condition "Ready" to 2026-04-28 22:59:40.390804022 +0000 UTC m=+2050.233465562 I0428 22:59:40.424996 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:59:40.424980539 +0000 UTC m=+2050.267642079 I0428 22:59:40.444707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 22:59:40.445249 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 22:59:40.445240589 +0000 UTC m=+2050.287902149 I0428 22:59:40.468296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:03:11.034889 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 23:03:11.034846275 +0000 UTC m=+2260.877507815 I0428 23:03:11.034972 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:03:11.035255 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-28 23:03:11.035230163 +0000 UTC m=+2260.877891723 I0428 23:03:11.052524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:03:11.052619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:03:11.052648 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-28 23:03:11.052640044 +0000 UTC m=+2260.895301614 I0428 23:03:11.288289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-9mmkz" condition "Approved" to 2026-04-28 23:03:11.288271704 +0000 UTC m=+2261.130933274 I0428 23:03:11.305473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-9mmkz" condition "Ready" to 2026-04-28 23:03:11.30546235 +0000 UTC m=+2261.148123890 I0428 23:03:11.340918 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:03:11.340899786 +0000 UTC m=+2261.183561356 I0428 23:03:11.367250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:03:11.367758 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:03:11.367747019 +0000 UTC m=+2261.210408589 I0428 23:03:11.393834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:03:12.502550 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 23:03:12.502530099 +0000 UTC m=+2262.345191659 I0428 23:03:12.502655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:03:12.502697 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 23:03:12.502685772 +0000 UTC m=+2262.345347312 I0428 23:03:12.520518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:03:12.520687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:03:12.520769 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 23:03:12.520720116 +0000 UTC m=+2262.363381686 I0428 23:03:13.168971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-xfr6l" condition "Approved" to 2026-04-28 23:03:13.168952519 +0000 UTC m=+2263.011614089 I0428 23:03:13.185460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-xfr6l" condition "Ready" to 2026-04-28 23:03:13.18544972 +0000 UTC m=+2263.028111260 I0428 23:03:13.208803 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:03:13.208786998 +0000 UTC m=+2263.051448538 I0428 23:03:13.235106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:03:13.235709 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:03:13.235696941 +0000 UTC m=+2263.078358481 I0428 23:03:13.252856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:03:13.253285 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:03:13.253273946 +0000 UTC m=+2263.095935506 I0428 23:03:13.254279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:24.853186 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-28 23:05:24.85317201 +0000 UTC m=+2394.695833570 I0428 23:05:24.853349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:05:24.853436 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 23:05:24.853425425 +0000 UTC m=+2394.696086985 E0428 23:05:24.884790 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:05:24.884882 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-28 23:05:24.884870935 +0000 UTC m=+2394.727532505 I0428 23:05:24.884939 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:05:24.889278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:24.889482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:05:24.889517 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 23:05:24.889506794 +0000 UTC m=+2394.732168364 E0428 23:05:24.900041 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0428 23:05:24.900234 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:05:24.900314 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 23:05:24.900368 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0428 23:05:24.938485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:24.938794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-hnm7t" condition "Approved" to 2026-04-28 23:05:24.938781833 +0000 UTC m=+2394.781443373 I0428 23:05:24.964126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-hnm7t" condition "Ready" to 2026-04-28 23:05:24.964114803 +0000 UTC m=+2394.806776343 I0428 23:05:24.993300 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:24.993282605 +0000 UTC m=+2394.835944145 I0428 23:05:25.019773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:25.020126 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:25.020119726 +0000 UTC m=+2394.862781246 I0428 23:05:25.020570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:25.041294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:25.041669 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:25.041659675 +0000 UTC m=+2394.884321205 I0428 23:05:25.575160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:05:25.575204 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-28 23:05:25.575195404 +0000 UTC m=+2395.417856944 I0428 23:05:25.575399 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 23:05:25.575068901 +0000 UTC m=+2395.417730441 E0428 23:05:25.590249 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:05:25.590295 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-28 23:05:25.590285546 +0000 UTC m=+2395.432947086 I0428 23:05:25.590348 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 23:05:25.600883 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0428 23:05:25.600957 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 23:05:25.600977 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 23:05:25.601008 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0428 23:05:25.602043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:25.602158 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 23:05:25.602149859 +0000 UTC m=+2395.444811399 I0428 23:05:25.616156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:25.616230 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 23:05:25.616221508 +0000 UTC m=+2395.458883048 I0428 23:05:25.625736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-mclg7" condition "Approved" to 2026-04-28 23:05:25.62571767 +0000 UTC m=+2395.468379210 I0428 23:05:25.639513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-mclg7" condition "Ready" to 2026-04-28 23:05:25.639494574 +0000 UTC m=+2395.482156144 I0428 23:05:25.671596 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:25.671572878 +0000 UTC m=+2395.514234408 I0428 23:05:25.691753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:25.692140 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:25.692131316 +0000 UTC m=+2395.534792856 I0428 23:05:25.707902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:26.353878 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 23:05:26.353859126 +0000 UTC m=+2396.196520696 I0428 23:05:26.354149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:05:26.354200 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-28 23:05:26.354188534 +0000 UTC m=+2396.196850094 I0428 23:05:26.373433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:26.373517 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 23:05:26.373510485 +0000 UTC m=+2396.216172045 I0428 23:05:26.399283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:26.425774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-wmnsw" condition "Approved" to 2026-04-28 23:05:26.425761308 +0000 UTC m=+2396.268422878 I0428 23:05:26.443208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-wmnsw" condition "Ready" to 2026-04-28 23:05:26.443191249 +0000 UTC m=+2396.285852809 I0428 23:05:29.900387 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:29.900374115 +0000 UTC m=+2399.743035635 I0428 23:05:29.912640 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-wmnsw" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:29.912629257 +0000 UTC m=+2399.755290797 I0428 23:05:29.941030 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:29.941015012 +0000 UTC m=+2399.783676552 I0428 23:05:29.967566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:05:30.605943 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:05:30.605931499 +0000 UTC m=+2400.448593029 I0428 23:07:39.049723 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-28 23:07:39.04971184 +0000 UTC m=+2528.892373370 I0428 23:07:39.049966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:07:39.049994 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 23:07:39.049990156 +0000 UTC m=+2528.892651696 I0428 23:07:39.065971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:07:39.066033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:07:39.066051 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 23:07:39.066045137 +0000 UTC m=+2528.908706687 I0428 23:07:39.287562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:07:39.297574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-mxqkh" condition "Approved" to 2026-04-28 23:07:39.29755502 +0000 UTC m=+2529.140216590 I0428 23:07:39.316767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-mxqkh" condition "Ready" to 2026-04-28 23:07:39.31675774 +0000 UTC m=+2529.159419260 I0428 23:07:39.348330 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:07:39.348316022 +0000 UTC m=+2529.190977562 I0428 23:07:39.369227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:07:39.436035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:25.021967 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-28 23:08:25.02193187 +0000 UTC m=+2574.864593440 I0428 23:08:25.043470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:25.043595 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 23:08:25.043572971 +0000 UTC m=+2574.886234531 I0428 23:08:25.043642 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 23:08:25.04350329 +0000 UTC m=+2574.886164860 I0428 23:08:25.060030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:25.060554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:25.060586 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 23:08:25.060577534 +0000 UTC m=+2574.903239094 E0428 23:08:25.083919 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0428 23:08:25.143989 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-28 23:08:25.14395812 +0000 UTC m=+2574.986619690 I0428 23:08:25.163999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:25.164038 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-28 23:08:25.164031178 +0000 UTC m=+2575.006692708 I0428 23:08:25.164007 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 23:08:25.163990957 +0000 UTC m=+2575.006652497 I0428 23:08:25.181314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:25.181391 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 23:08:25.181384097 +0000 UTC m=+2575.024045627 E0428 23:08:25.371923 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0428 23:08:25.525316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:25.555580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-l62pj" condition "Approved" to 2026-04-28 23:08:25.555563751 +0000 UTC m=+2575.398225281 I0428 23:08:25.583491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-l62pj" condition "Ready" to 2026-04-28 23:08:25.583476606 +0000 UTC m=+2575.426138156 I0428 23:08:25.626702 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:25.626687006 +0000 UTC m=+2575.469348546 I0428 23:08:25.674739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:25.675156 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:25.675149109 +0000 UTC m=+2575.517810639 I0428 23:08:25.714542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:25.715538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:25.975002 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-28 23:08:25.974982567 +0000 UTC m=+2575.817644127 I0428 23:08:26.002184 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-28 23:08:26.002170587 +0000 UTC m=+2575.844832127 I0428 23:08:26.002479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:26.002501 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 23:08:26.002497244 +0000 UTC m=+2575.845158794 I0428 23:08:26.017684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:26.017769 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:26.017822 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 23:08:26.0177869 +0000 UTC m=+2575.860448440 I0428 23:08:26.242323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8kcjs" condition "Approved" to 2026-04-28 23:08:26.242311854 +0000 UTC m=+2576.084973384 I0428 23:08:26.263969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8kcjs" condition "Ready" to 2026-04-28 23:08:26.263961806 +0000 UTC m=+2576.106623346 I0428 23:08:26.297004 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:26.296988449 +0000 UTC m=+2576.139649979 I0428 23:08:26.338560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:26.338815 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:26.33880784 +0000 UTC m=+2576.181469360 I0428 23:08:26.399011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:26.469949 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-28 23:08:26.469934864 +0000 UTC m=+2576.312596394 I0428 23:08:26.491119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:26.491162 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 23:08:26.491154117 +0000 UTC m=+2576.333815657 I0428 23:08:26.491444 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 23:08:26.491426833 +0000 UTC m=+2576.334088383 I0428 23:08:26.514934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:26.515031 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:26.515070 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 23:08:26.515061416 +0000 UTC m=+2576.357722976 I0428 23:08:26.671327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:26.684407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bpl2j" condition "Approved" to 2026-04-28 23:08:26.684390784 +0000 UTC m=+2576.527052344 I0428 23:08:26.709346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bpl2j" condition "Ready" to 2026-04-28 23:08:26.709334916 +0000 UTC m=+2576.551996456 I0428 23:08:26.747431 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:26.747415907 +0000 UTC m=+2576.590077437 I0428 23:08:26.831005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:26.831443 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:26.831435287 +0000 UTC m=+2576.674096827 I0428 23:08:26.929191 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-28 23:08:26.92917217 +0000 UTC m=+2576.771833710 I0428 23:08:26.955358 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-28 23:08:26.955342857 +0000 UTC m=+2576.798004397 I0428 23:08:26.955639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:26.955660 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 23:08:26.955655905 +0000 UTC m=+2576.798317445 I0428 23:08:27.037983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:27.186029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:27.186089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:08:27.186105 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 23:08:27.186100325 +0000 UTC m=+2577.028761855 I0428 23:08:27.529208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:27.674737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8vpjq" condition "Approved" to 2026-04-28 23:08:27.674719096 +0000 UTC m=+2577.517380656 I0428 23:08:27.844138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8vpjq" condition "Ready" to 2026-04-28 23:08:27.844124106 +0000 UTC m=+2577.686785646 I0428 23:08:28.135858 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:28.135836762 +0000 UTC m=+2577.978498332 I0428 23:08:28.280260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:28.280721 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:08:28.280711749 +0000 UTC m=+2578.123373309 I0428 23:08:28.531324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:08:28.579678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:48.876214 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-28 23:11:48.876198266 +0000 UTC m=+2778.718859826 I0428 23:11:48.876426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:11:48.876477 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-28 23:11:48.876466772 +0000 UTC m=+2778.719128312 I0428 23:11:48.891509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:48.891603 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-28 23:11:48.891593273 +0000 UTC m=+2778.734254833 I0428 23:11:49.151749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:49.186319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-n64w4" condition "Approved" to 2026-04-28 23:11:49.18630888 +0000 UTC m=+2779.028970410 I0428 23:11:49.206336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-n64w4" condition "Ready" to 2026-04-28 23:11:49.206326657 +0000 UTC m=+2779.048988187 I0428 23:11:49.231360 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:11:49.231348339 +0000 UTC m=+2779.074009869 I0428 23:11:49.251010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:49.251623 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:11:49.25161178 +0000 UTC m=+2779.094273340 I0428 23:11:49.261265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:49.276094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:51.532454 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-28 23:11:51.532438894 +0000 UTC m=+2781.375100424 I0428 23:11:51.532789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:11:51.532808 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-28 23:11:51.532804672 +0000 UTC m=+2781.375466202 I0428 23:11:51.551289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:51.551410 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-28 23:11:51.551400308 +0000 UTC m=+2781.394061868 I0428 23:11:51.763669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:51.792288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-ssrkn" condition "Approved" to 2026-04-28 23:11:51.7922752 +0000 UTC m=+2781.634936730 I0428 23:11:51.813248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-ssrkn" condition "Ready" to 2026-04-28 23:11:51.813221635 +0000 UTC m=+2781.655883175 I0428 23:11:51.846470 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:11:51.846462442 +0000 UTC m=+2781.689123972 I0428 23:11:51.867832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:11:51.868105 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:11:51.868099173 +0000 UTC m=+2781.710760713 I0428 23:11:51.893776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:01.506261 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 23:16:01.506242623 +0000 UTC m=+3031.348904163 I0428 23:16:01.506350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:16:01.506368 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-28 23:16:01.506362565 +0000 UTC m=+3031.349024085 I0428 23:16:01.526981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:01.527185 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 23:16:01.527177467 +0000 UTC m=+3031.369838997 I0428 23:16:01.757562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:01.785115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-qwngd" condition "Approved" to 2026-04-28 23:16:01.785102742 +0000 UTC m=+3031.627764282 I0428 23:16:01.806047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-qwngd" condition "Ready" to 2026-04-28 23:16:01.806034878 +0000 UTC m=+3031.648696418 I0428 23:16:01.834055 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:16:01.834041524 +0000 UTC m=+3031.676703064 I0428 23:16:01.857353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:01.857708 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:16:01.857701906 +0000 UTC m=+3031.700363446 I0428 23:16:01.863397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:01.881699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:35.018231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 23:16:35.018304 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 23:16:35.018294221 +0000 UTC m=+3064.860955791 I0428 23:16:35.018452 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 23:16:35.018435904 +0000 UTC m=+3064.861097444 I0428 23:16:35.035725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:35.035828 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 23:16:35.035821544 +0000 UTC m=+3064.878483084 I0428 23:16:35.160453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:35.194091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gjsdv" condition "Approved" to 2026-04-28 23:16:35.194071819 +0000 UTC m=+3065.036733379 I0428 23:16:35.216182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gjsdv" condition "Ready" to 2026-04-28 23:16:35.216163089 +0000 UTC m=+3065.058824629 I0428 23:16:35.255799 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 23:16:35.255786031 +0000 UTC m=+3065.098447571 I0428 23:16:35.276211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 23:16:35.328642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"