I0815 05:00:56.808995 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0815 05:00:56.809194 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0815 05:00:56.809452 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0815 05:00:56.813023 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0815 05:00:56.813753 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0815 05:00:56.813790 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0815 05:00:56.813835 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0815 05:00:56.816320 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0815 05:00:56.831244 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0815 05:00:56.831509 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0815 05:00:56.831551 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0815 05:00:56.836430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0815 05:00:56.841938 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0815 05:00:56.844540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0815 05:00:56.846957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0815 05:00:56.849400 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0815 05:00:56.849423 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0815 05:00:56.849580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0815 05:00:56.852162 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0815 05:00:56.854422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0815 05:00:56.861222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0815 05:00:56.865380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0815 05:00:56.867681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0815 05:00:56.869509 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0815 05:00:56.869541 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0815 05:00:56.869705 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0815 05:00:56.871593 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0815 05:00:56.873523 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0815 05:00:56.875246 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0815 05:00:56.877062 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0815 05:00:56.880928 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0815 05:00:56.884759 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0815 05:00:56.887906 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0815 05:00:56.890317 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.890606 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.891132 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.907514 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.924729 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.941636 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.954402 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.975634 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.976568 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:00:56.999640 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0815 05:01:14.284909 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-15 05:01:14.284878966 +0000 UTC m=+17.508860200 I0815 05:01:15.008577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:01:15.008621 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-15 05:01:15.008612677 +0000 UTC m=+18.232593921 I0815 05:01:15.008569 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-15 05:01:15.008554506 +0000 UTC m=+18.232535750 E0815 05:01:15.022012 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0815 05:01:15.022089 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-15 05:01:15.022080551 +0000 UTC m=+18.246061765 E0815 05:01:15.022123 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0815 05:01:15.025329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:15.025390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:01:15.025563 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-15 05:01:15.025557325 +0000 UTC m=+18.249538559 E0815 05:01:15.031575 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0815 05:01:15.031626 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 05:01:15.031642 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 05:01:15.031667 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0815 05:01:15.063790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:15.063962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-djwwx" condition "Approved" to 2026-08-15 05:01:15.063954809 +0000 UTC m=+18.287936023 I0815 05:01:15.075892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-djwwx" condition "Ready" to 2026-08-15 05:01:15.075879087 +0000 UTC m=+18.299860331 I0815 05:01:15.101514 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:01:15.101502174 +0000 UTC m=+18.325483408 I0815 05:01:15.118538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:15.118843 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:01:15.118835971 +0000 UTC m=+18.342817205 I0815 05:01:15.135145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:15.141442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:20.032699 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:01:20.032681824 +0000 UTC m=+23.256663068 I0815 05:01:38.359290 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-15 05:01:38.359259925 +0000 UTC m=+41.583241149 I0815 05:01:38.359594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:01:38.359621 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-15 05:01:38.359616773 +0000 UTC m=+41.583597987 I0815 05:01:38.370133 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-15 05:01:38.370116606 +0000 UTC m=+41.594097830 I0815 05:01:38.378519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:38.378605 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-15 05:01:38.37859529 +0000 UTC m=+41.602576534 I0815 05:01:38.631578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:38.669344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8rgf6" condition "Approved" to 2026-08-15 05:01:38.669330542 +0000 UTC m=+41.893311756 I0815 05:01:38.706101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8rgf6" condition "Ready" to 2026-08-15 05:01:38.706083558 +0000 UTC m=+41.930064802 I0815 05:01:38.734136 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:01:38.734115363 +0000 UTC m=+41.958096607 I0815 05:01:38.752844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:38.753136 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:01:38.753128301 +0000 UTC m=+41.977109515 I0815 05:01:38.770068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:38.778357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:01:38.778720 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:01:38.778708907 +0000 UTC m=+42.002690121 I0815 05:05:55.499678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:05:55.499721 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready" to 2026-08-15 05:05:55.499672669 +0000 UTC m=+298.723653913 I0815 05:05:55.499772 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Issuing" to 2026-08-15 05:05:55.499754481 +0000 UTC m=+298.723735725 I0815 05:05:55.517748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:05:55.517784 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:05:55.517795 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Issuing" to 2026-08-15 05:05:55.517791357 +0000 UTC m=+298.741772561 I0815 05:05:55.673327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-htxx2" condition "Approved" to 2026-08-15 05:05:55.673313827 +0000 UTC m=+298.897295041 I0815 05:05:55.703331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-htxx2" condition "Ready" to 2026-08-15 05:05:55.703316673 +0000 UTC m=+298.927297917 I0815 05:05:55.729292 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:05:55.729281213 +0000 UTC m=+298.953262427 I0815 05:05:55.753665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:00.968608 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-15 05:07:00.968560262 +0000 UTC m=+364.192541496 I0815 05:07:00.968687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:07:00.968780 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-15 05:07:00.968763567 +0000 UTC m=+364.192744851 E0815 05:07:00.985091 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0815 05:07:00.985178 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-15 05:07:00.985164774 +0000 UTC m=+364.209146028 E0815 05:07:00.985263 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0815 05:07:00.987316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:00.987434 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-15 05:07:00.987426059 +0000 UTC m=+364.211407303 E0815 05:07:00.996934 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0815 05:07:00.997034 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 05:07:00.997070 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0815 05:07:00.997100 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0815 05:07:00.999438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:00.999501 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-15 05:07:00.99949443 +0000 UTC m=+364.223475644 I0815 05:07:01.000549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:01.004169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pdsf8" condition "Approved" to 2026-08-15 05:07:01.004158983 +0000 UTC m=+364.228140217 I0815 05:07:01.016027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pdsf8" condition "Ready" to 2026-08-15 05:07:01.01601393 +0000 UTC m=+364.239995174 I0815 05:07:01.035633 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:07:01.035614934 +0000 UTC m=+364.259596168 I0815 05:07:01.051069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:01.106249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:05.998221 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:07:05.998205847 +0000 UTC m=+369.222187091 I0815 05:07:43.323115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:07:43.323194 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-15 05:07:43.323175546 +0000 UTC m=+406.547156760 I0815 05:07:43.323469 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-15 05:07:43.323464733 +0000 UTC m=+406.547445947 I0815 05:07:43.323642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:07:43.323659 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-15 05:07:43.323655067 +0000 UTC m=+406.547636291 I0815 05:07:43.323808 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-15 05:07:43.323804191 +0000 UTC m=+406.547785415 I0815 05:07:43.328785 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-15 05:07:43.328777341 +0000 UTC m=+406.552758555 I0815 05:07:43.329027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:07:43.329066 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-15 05:07:43.329058758 +0000 UTC m=+406.553039972 I0815 05:07:43.341724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:43.346142 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-15 05:07:43.346131678 +0000 UTC m=+406.570112892 I0815 05:07:43.352107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:43.352151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:07:43.352170 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-15 05:07:43.352165904 +0000 UTC m=+406.576147108 I0815 05:07:43.357400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:43.357468 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-15 05:07:43.357464081 +0000 UTC m=+406.581445285 I0815 05:07:43.547287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:43.560942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mv5mh" condition "Approved" to 2026-08-15 05:07:43.560919308 +0000 UTC m=+406.784900512 I0815 05:07:43.594138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mv5mh" condition "Ready" to 2026-08-15 05:07:43.594126708 +0000 UTC m=+406.818107912 I0815 05:07:43.611010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:43.615256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:43.639514 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:07:43.63949588 +0000 UTC m=+406.863477124 I0815 05:07:43.674487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:43.723065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0815 05:07:43.731402 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-q9kmj\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0815 05:07:43.743269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-972zj" condition "Approved" to 2026-08-15 05:07:43.743255707 +0000 UTC m=+406.967236951 I0815 05:07:43.766985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-972zj" condition "Ready" to 2026-08-15 05:07:43.766971588 +0000 UTC m=+406.990952802 I0815 05:07:44.109186 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-972zj" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-c5z6z" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0815 05:07:44.421496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-78hvp" condition "Approved" to 2026-08-15 05:07:44.42148254 +0000 UTC m=+407.645463754 I0815 05:07:44.516874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gcsgt" condition "Approved" to 2026-08-15 05:07:44.516862886 +0000 UTC m=+407.740844100 I0815 05:07:44.927354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-78hvp" condition "Ready" to 2026-08-15 05:07:44.927337836 +0000 UTC m=+408.151319080 I0815 05:07:44.972486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gcsgt" condition "Ready" to 2026-08-15 05:07:44.972475532 +0000 UTC m=+408.196456746 I0815 05:07:45.424632 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-78hvp" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-ppz4j" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0815 05:07:45.716165 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:07:45.716152491 +0000 UTC m=+408.940133735 I0815 05:07:45.767812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dt9fs" condition "Approved" to 2026-08-15 05:07:45.767802334 +0000 UTC m=+408.991783568 E0815 05:07:45.810585 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-ppz4j\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0815 05:07:45.965570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:46.173912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dt9fs" condition "Ready" to 2026-08-15 05:07:46.173892568 +0000 UTC m=+409.397873802 I0815 05:07:46.614285 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:07:46.614272077 +0000 UTC m=+409.838253291 I0815 05:07:46.814420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:46.814890 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:07:46.814881356 +0000 UTC m=+410.038862590 I0815 05:07:47.064278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:47.111986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:51.271047 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" condition "Ready" to 2026-08-15 05:07:51.271033207 +0000 UTC m=+414.495014411 I0815 05:07:51.271112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:07:51.271149 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" condition "Issuing" to 2026-08-15 05:07:51.271138809 +0000 UTC m=+414.495120023 I0815 05:07:51.287459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:51.287557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" condition "Ready" to 2026-08-15 05:07:51.287548054 +0000 UTC m=+414.511529298 I0815 05:07:51.457748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:51.486266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-d7gjr-8d9w7" condition "Approved" to 2026-08-15 05:07:51.486249267 +0000 UTC m=+414.710230511 I0815 05:07:51.502218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-d7gjr-8d9w7" condition "Ready" to 2026-08-15 05:07:51.502208271 +0000 UTC m=+414.726189485 I0815 05:07:51.534900 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:07:51.534884077 +0000 UTC m=+414.758865291 I0815 05:07:51.558689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:07:51.605024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d7gjr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:08:16.534666 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-15 05:08:16.534656458 +0000 UTC m=+439.758637672 I0815 05:08:16.534981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:08:16.535008 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-15 05:08:16.535004316 +0000 UTC m=+439.758985530 I0815 05:08:16.551450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:08:16.551495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:08:16.551506 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-15 05:08:16.551502303 +0000 UTC m=+439.775483517 I0815 05:08:16.727640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:08:16.734642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wz9mk" condition "Approved" to 2026-08-15 05:08:16.73460618 +0000 UTC m=+439.958587404 I0815 05:08:16.754441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wz9mk" condition "Ready" to 2026-08-15 05:08:16.754428587 +0000 UTC m=+439.978409801 I0815 05:08:16.784998 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:08:16.784987252 +0000 UTC m=+440.008968466 I0815 05:08:16.803536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:11:26.480859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:11:26.480939 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-15 05:11:26.480899747 +0000 UTC m=+629.704880981 I0815 05:11:26.481562 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-15 05:11:26.481552863 +0000 UTC m=+629.705534097 I0815 05:11:26.497397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:11:26.497524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:11:26.497555 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-15 05:11:26.497546431 +0000 UTC m=+629.721527645 I0815 05:11:27.033662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:11:27.042220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cn5w8" condition "Approved" to 2026-08-15 05:11:27.042209532 +0000 UTC m=+630.266190746 I0815 05:11:27.057790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cn5w8" condition "Ready" to 2026-08-15 05:11:27.057779049 +0000 UTC m=+630.281760263 I0815 05:11:27.084740 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:11:27.084729355 +0000 UTC m=+630.308710569 I0815 05:11:27.103111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:11:27.103445 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:11:27.103438428 +0000 UTC m=+630.327419642 I0815 05:11:27.113351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:11:27.129067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:13:47.532996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:13:47.533110 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-08-15 05:13:47.53306796 +0000 UTC m=+770.757049194 I0815 05:13:47.533171 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-15 05:13:47.533157652 +0000 UTC m=+770.757138896 I0815 05:13:47.550000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:13:47.550098 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-15 05:13:47.550087561 +0000 UTC m=+770.774068775 I0815 05:13:47.817619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:13:47.852364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-r4g5k" condition "Approved" to 2026-08-15 05:13:47.852350325 +0000 UTC m=+771.076331549 I0815 05:13:47.877091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-r4g5k" condition "Ready" to 2026-08-15 05:13:47.877073782 +0000 UTC m=+771.101054986 I0815 05:13:47.909445 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:13:47.909435404 +0000 UTC m=+771.133416608 I0815 05:13:47.938470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:13:47.940121 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:13:47.940107995 +0000 UTC m=+771.164089249 I0815 05:13:47.965515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:14:43.785102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:14:43.785168 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-15 05:14:43.785148091 +0000 UTC m=+827.009129305 I0815 05:14:43.785165 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-15 05:14:43.78511119 +0000 UTC m=+827.009092424 I0815 05:14:43.805946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:14:43.806068 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:14:43.806118 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-15 05:14:43.806110258 +0000 UTC m=+827.030091502 I0815 05:14:44.136325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mz7rd" condition "Approved" to 2026-08-15 05:14:44.136314067 +0000 UTC m=+827.360295271 I0815 05:14:44.160104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mz7rd" condition "Ready" to 2026-08-15 05:14:44.160096111 +0000 UTC m=+827.384077315 I0815 05:14:44.195125 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:14:44.195109417 +0000 UTC m=+827.419090651 I0815 05:14:44.217889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:17:42.820089 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-15 05:17:42.820051737 +0000 UTC m=+1006.044032951 I0815 05:17:42.820483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:17:42.820578 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-15 05:17:42.820567839 +0000 UTC m=+1006.044549083 I0815 05:17:42.841968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:17:42.842323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:17:42.842353 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-15 05:17:42.842346794 +0000 UTC m=+1006.066328008 I0815 05:17:43.246490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9qxxn" condition "Approved" to 2026-08-15 05:17:43.246474685 +0000 UTC m=+1006.470455889 I0815 05:17:43.268250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9qxxn" condition "Ready" to 2026-08-15 05:17:43.268238589 +0000 UTC m=+1006.492219813 I0815 05:17:43.302022 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:17:43.302000972 +0000 UTC m=+1006.525982216 I0815 05:17:43.330117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:17:43.330667 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:17:43.330659972 +0000 UTC m=+1006.554641186 I0815 05:17:43.347104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:17:43.347358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:17:43.349048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:17:43.349811 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:17:43.349798402 +0000 UTC m=+1006.573779646 I0815 05:23:57.187371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:23:57.187374 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-15 05:23:57.187305597 +0000 UTC m=+1380.411286811 I0815 05:23:57.187405 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-15 05:23:57.187396399 +0000 UTC m=+1380.411377613 I0815 05:23:57.206351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:23:57.206455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:23:57.206484 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-15 05:23:57.20647517 +0000 UTC m=+1380.430456404 I0815 05:23:57.416676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-5wxg4" condition "Approved" to 2026-08-15 05:23:57.416655604 +0000 UTC m=+1380.640636798 I0815 05:23:57.433488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-5wxg4" condition "Ready" to 2026-08-15 05:23:57.43347334 +0000 UTC m=+1380.657454554 I0815 05:23:57.457455 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:23:57.457429578 +0000 UTC m=+1380.681410772 I0815 05:23:57.478379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:23:57.478696 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:23:57.478688442 +0000 UTC m=+1380.702669656 I0815 05:23:57.491808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:23:57.494150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:23:57.494362 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:23:57.494357049 +0000 UTC m=+1380.718338263 I0815 05:25:24.120966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:25:24.121002 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-15 05:25:24.120988977 +0000 UTC m=+1467.344970181 I0815 05:25:24.121026 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-15 05:25:24.121007227 +0000 UTC m=+1467.344988431 I0815 05:25:24.137431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:25:24.137637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:25:24.137675 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-15 05:25:24.13766518 +0000 UTC m=+1467.361646394 I0815 05:25:24.302728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:25:24.311375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-ssw9b" condition "Approved" to 2026-08-15 05:25:24.311364803 +0000 UTC m=+1467.535345997 I0815 05:25:24.338931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-ssw9b" condition "Ready" to 2026-08-15 05:25:24.338914748 +0000 UTC m=+1467.562895992 I0815 05:25:24.372028 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:25:24.372012777 +0000 UTC m=+1467.595993991 I0815 05:25:24.391853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:25:24.392089 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:25:24.392081952 +0000 UTC m=+1467.616063156 I0815 05:25:24.409531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.139036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:26:52.139085 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-15 05:26:52.13907463 +0000 UTC m=+1555.363055864 I0815 05:26:52.139088 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-08-15 05:26:52.13907016 +0000 UTC m=+1555.363051374 I0815 05:26:52.160117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.160194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:26:52.160214 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-15 05:26:52.16020906 +0000 UTC m=+1555.384190274 I0815 05:26:52.199538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.212877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-855n9" condition "Approved" to 2026-08-15 05:26:52.212863421 +0000 UTC m=+1555.436844645 I0815 05:26:52.239666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-855n9" condition "Ready" to 2026-08-15 05:26:52.239651798 +0000 UTC m=+1555.463633042 I0815 05:26:52.263850 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:26:52.263839602 +0000 UTC m=+1555.487820816 I0815 05:26:52.283274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.283543 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:26:52.283537147 +0000 UTC m=+1555.507518361 I0815 05:26:52.316647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.844507 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-15 05:26:52.84448861 +0000 UTC m=+1556.068469844 I0815 05:26:52.844711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:26:52.844757 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-15 05:26:52.844748486 +0000 UTC m=+1556.068729700 I0815 05:26:52.869605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.869695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:26:52.869723 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-15 05:26:52.869716268 +0000 UTC m=+1556.093697502 I0815 05:26:52.916726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.922626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-klqfs" condition "Approved" to 2026-08-15 05:26:52.922612306 +0000 UTC m=+1556.146593540 I0815 05:26:52.937077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-klqfs" condition "Ready" to 2026-08-15 05:26:52.937065544 +0000 UTC m=+1556.161046758 I0815 05:26:52.959924 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:26:52.959906916 +0000 UTC m=+1556.183888130 I0815 05:26:52.977202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.977631 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:26:52.977621683 +0000 UTC m=+1556.201602897 I0815 05:26:52.992787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:52.993656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:26:53.572960 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-08-15 05:26:53.572945315 +0000 UTC m=+1556.796926549 I0815 05:26:54.324740 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-08-15 05:26:54.324728233 +0000 UTC m=+1557.548709437 I0815 05:27:39.091337 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-15 05:27:39.091319981 +0000 UTC m=+1602.315301195 I0815 05:27:39.091576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:27:39.094699 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-15 05:27:39.094691414 +0000 UTC m=+1602.318672618 I0815 05:27:39.120673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:27:39.120757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:27:39.120778 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-15 05:27:39.120772573 +0000 UTC m=+1602.344753777 I0815 05:27:43.363584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:27:43.391214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-pmqdt" condition "Approved" to 2026-08-15 05:27:43.391199734 +0000 UTC m=+1606.615180948 I0815 05:27:43.412468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-pmqdt" condition "Ready" to 2026-08-15 05:27:43.412457927 +0000 UTC m=+1606.636439141 I0815 05:27:43.450719 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:27:43.45070519 +0000 UTC m=+1606.674686404 I0815 05:27:43.471442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:27:43.472118 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:27:43.472111937 +0000 UTC m=+1606.696093151 I0815 05:27:43.481903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:27:43.491488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:18.431476 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-15 05:30:18.431463853 +0000 UTC m=+1761.655445067 I0815 05:30:18.432037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:30:18.432107 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-15 05:30:18.432097428 +0000 UTC m=+1761.656078672 I0815 05:30:18.447423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:18.447482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:30:18.447498 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-15 05:30:18.447492379 +0000 UTC m=+1761.671473603 I0815 05:30:18.626453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-52jjj" condition "Approved" to 2026-08-15 05:30:18.626441811 +0000 UTC m=+1761.850423015 I0815 05:30:18.647435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-52jjj" condition "Ready" to 2026-08-15 05:30:18.647423458 +0000 UTC m=+1761.871404672 I0815 05:30:18.674037 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:30:18.67402114 +0000 UTC m=+1761.898002374 I0815 05:30:18.693699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:18.694075 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:30:18.694067423 +0000 UTC m=+1761.918048637 I0815 05:30:18.705898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:18.715843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:20.046982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:30:20.047052 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-08-15 05:30:20.047017154 +0000 UTC m=+1763.270998398 I0815 05:30:20.046971 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-15 05:30:20.046953202 +0000 UTC m=+1763.270934436 I0815 05:30:20.062979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:20.063113 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-15 05:30:20.063104583 +0000 UTC m=+1763.287085807 I0815 05:30:20.249942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:20.280264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-sh8tl" condition "Approved" to 2026-08-15 05:30:20.280252597 +0000 UTC m=+1763.504233811 I0815 05:30:20.308453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-sh8tl" condition "Ready" to 2026-08-15 05:30:20.308444417 +0000 UTC m=+1763.532425621 I0815 05:30:20.340967 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:30:20.340953762 +0000 UTC m=+1763.564934976 I0815 05:30:20.370838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:20.372092 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:30:20.372085773 +0000 UTC m=+1763.596066967 I0815 05:30:20.396483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:30:20.396773 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:30:20.39676675 +0000 UTC m=+1763.620747964 I0815 05:30:20.408322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:33:22.278644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:33:22.278886 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-15 05:33:22.278790563 +0000 UTC m=+1945.502771797 I0815 05:33:22.278683 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-15 05:33:22.278539827 +0000 UTC m=+1945.502521061 I0815 05:33:22.293427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:33:22.293550 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-15 05:33:22.29354267 +0000 UTC m=+1945.517523874 I0815 05:33:22.645350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:33:22.688467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-7df9h" condition "Approved" to 2026-08-15 05:33:22.688452223 +0000 UTC m=+1945.912433457 I0815 05:33:22.709196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-7df9h" condition "Ready" to 2026-08-15 05:33:22.709181156 +0000 UTC m=+1945.933162390 I0815 05:33:22.738324 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:33:22.73829691 +0000 UTC m=+1945.962278124 I0815 05:33:22.760438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:33:22.814430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:34:22.293106 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-976mw-vnc" condition "Ready" to 2026-08-15 05:34:22.293091974 +0000 UTC m=+2005.517073198 I0815 05:34:22.293559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-976mw-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:34:22.293589 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-976mw-vnc" condition "Issuing" to 2026-08-15 05:34:22.293583116 +0000 UTC m=+2005.517564340 I0815 05:34:22.294168 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-976mw-api" condition "Ready" to 2026-08-15 05:34:22.294161081 +0000 UTC m=+2005.518142305 I0815 05:34:22.294442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-976mw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:34:22.294466 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-976mw-api" condition "Issuing" to 2026-08-15 05:34:22.294460618 +0000 UTC m=+2005.518441842 I0815 05:34:22.324040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-976mw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-976mw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:34:22.324100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-976mw-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:34:22.324119 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-976mw-vnc" condition "Issuing" to 2026-08-15 05:34:22.324113075 +0000 UTC m=+2005.548094289 I0815 05:34:22.327266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-976mw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-976mw-api\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:34:22.327323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-976mw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:34:22.327341 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-976mw-api" condition "Issuing" to 2026-08-15 05:34:22.327337453 +0000 UTC m=+2005.551318657 I0815 05:34:22.539811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-976mw-vnc-vwxpp" condition "Approved" to 2026-08-15 05:34:22.539800678 +0000 UTC m=+2005.763781892 I0815 05:34:22.553564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-976mw-api-nscjh" condition "Approved" to 2026-08-15 05:34:22.553551081 +0000 UTC m=+2005.777532315 I0815 05:34:22.558622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-976mw-vnc-vwxpp" condition "Ready" to 2026-08-15 05:34:22.558610194 +0000 UTC m=+2005.782591398 I0815 05:34:22.571032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-976mw-api-nscjh" condition "Ready" to 2026-08-15 05:34:22.571020594 +0000 UTC m=+2005.795001808 I0815 05:34:22.598582 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-976mw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:34:22.598571861 +0000 UTC m=+2005.822553075 I0815 05:34:22.608696 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-976mw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:34:22.608687746 +0000 UTC m=+2005.832668940 I0815 05:34:22.619818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-976mw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-976mw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:34:22.626535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-976mw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-976mw-api\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:34:22.627308 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-976mw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:34:22.627298147 +0000 UTC m=+2005.851279371 I0815 05:34:22.640979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-976mw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-976mw-api\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:34:22.664153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-976mw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-976mw-api\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:34:22.686461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-976mw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-976mw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:35:57.706795 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-08-15 05:35:57.70677784 +0000 UTC m=+2100.930759054 I0815 05:35:57.706939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:35:57.706998 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-08-15 05:35:57.706986205 +0000 UTC m=+2100.930967449 I0815 05:35:57.720911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:35:57.721007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:35:57.721034 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-08-15 05:35:57.721025735 +0000 UTC m=+2100.945006979 I0815 05:35:57.885261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:35:57.889039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-78844" condition "Approved" to 2026-08-15 05:35:57.889032773 +0000 UTC m=+2101.113013967 I0815 05:35:57.908760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-78844" condition "Ready" to 2026-08-15 05:35:57.90874929 +0000 UTC m=+2101.132730504 I0815 05:35:57.947956 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:35:57.94794116 +0000 UTC m=+2101.171922394 I0815 05:35:57.969240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:39:35.955971 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-15 05:39:35.955942524 +0000 UTC m=+2319.179923758 I0815 05:39:35.956671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:39:35.956725 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-15 05:39:35.956714402 +0000 UTC m=+2319.180695636 I0815 05:39:35.971706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:39:35.971779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:39:35.971796 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-15 05:39:35.971790647 +0000 UTC m=+2319.195771861 I0815 05:39:36.237953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-vflp2" condition "Approved" to 2026-08-15 05:39:36.237938517 +0000 UTC m=+2319.461919761 I0815 05:39:36.259726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-vflp2" condition "Ready" to 2026-08-15 05:39:36.259709535 +0000 UTC m=+2319.483690779 I0815 05:39:36.287949 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:39:36.287935439 +0000 UTC m=+2319.511916653 I0815 05:39:36.326842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:39:37.615652 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-15 05:39:37.615635855 +0000 UTC m=+2320.839617089 I0815 05:39:37.615808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:39:37.615899 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-15 05:39:37.615886521 +0000 UTC m=+2320.839867755 I0815 05:39:37.631522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:39:37.631616 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-15 05:39:37.631609123 +0000 UTC m=+2320.855590337 I0815 05:39:37.817541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:39:37.845218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-qpsct" condition "Approved" to 2026-08-15 05:39:37.845198749 +0000 UTC m=+2321.069179993 I0815 05:39:37.863645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-qpsct" condition "Ready" to 2026-08-15 05:39:37.863634826 +0000 UTC m=+2321.087616030 I0815 05:39:37.889869 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:39:37.889855251 +0000 UTC m=+2321.113836465 I0815 05:39:37.907166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:39:37.908805 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:39:37.90879443 +0000 UTC m=+2321.132775644 I0815 05:39:37.930518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:48.044546 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-15 05:41:48.044518108 +0000 UTC m=+2451.268499342 I0815 05:41:48.045013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:41:48.045185 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-15 05:41:48.045170173 +0000 UTC m=+2451.269151407 E0815 05:41:48.063206 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0815 05:41:48.063318 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-08-15 05:41:48.063310674 +0000 UTC m=+2451.287291888 I0815 05:41:48.063381 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0815 05:41:48.065786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:48.065934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:41:48.066025 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-15 05:41:48.066012719 +0000 UTC m=+2451.289993963 E0815 05:41:48.072645 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0815 05:41:48.072771 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0815 05:41:48.072810 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0815 05:41:48.072844 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0815 05:41:48.107297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:48.112601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-ppsrt" condition "Approved" to 2026-08-15 05:41:48.112587907 +0000 UTC m=+2451.336569121 I0815 05:41:48.136013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-ppsrt" condition "Ready" to 2026-08-15 05:41:48.135995745 +0000 UTC m=+2451.359977009 I0815 05:41:48.162847 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:41:48.162831145 +0000 UTC m=+2451.386812359 I0815 05:41:48.182971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:48.183216 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:41:48.183209029 +0000 UTC m=+2451.407190243 I0815 05:41:48.191118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:48.200482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:48.809406 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-15 05:41:48.809387034 +0000 UTC m=+2452.033368278 I0815 05:41:48.809547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:41:48.809606 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-15 05:41:48.809592539 +0000 UTC m=+2452.033573783 E0815 05:41:48.823368 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0815 05:41:48.823608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:48.823669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:41:48.823691 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-15 05:41:48.823684611 +0000 UTC m=+2452.047665815 I0815 05:41:48.823855 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-08-15 05:41:48.823848245 +0000 UTC m=+2452.047829459 I0815 05:41:48.823904 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0815 05:41:48.838197 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0815 05:41:48.838327 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0815 05:41:48.838370 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0815 05:41:48.838623 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0815 05:41:48.872414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-5xzv7" condition "Approved" to 2026-08-15 05:41:48.872386591 +0000 UTC m=+2452.096367805 I0815 05:41:48.899700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-5xzv7" condition "Ready" to 2026-08-15 05:41:48.899687872 +0000 UTC m=+2452.123669086 I0815 05:41:48.928269 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:41:48.928253835 +0000 UTC m=+2452.152235069 I0815 05:41:48.949629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:49.600686 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-15 05:41:49.60066617 +0000 UTC m=+2452.824647404 I0815 05:41:49.600723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:41:49.600759 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-15 05:41:49.600750902 +0000 UTC m=+2452.824732116 I0815 05:41:49.629542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:49.629644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:41:49.629677 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-15 05:41:49.629672934 +0000 UTC m=+2452.853654128 I0815 05:41:49.684859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-j5bz2" condition "Approved" to 2026-08-15 05:41:49.684805479 +0000 UTC m=+2452.908786693 I0815 05:41:49.703261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-j5bz2" condition "Ready" to 2026-08-15 05:41:49.703246027 +0000 UTC m=+2452.927227241 I0815 05:41:53.073854 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:41:53.073835832 +0000 UTC m=+2456.297817066 I0815 05:41:53.091799 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-j5bz2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:41:53.091786348 +0000 UTC m=+2456.315767562 I0815 05:41:53.125416 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:41:53.125405172 +0000 UTC m=+2456.349386386 I0815 05:41:53.147456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:53.147736 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:41:53.147728313 +0000 UTC m=+2456.371709517 I0815 05:41:53.163659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:53.167886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:41:53.839494 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:41:53.839485127 +0000 UTC m=+2457.063466331 I0815 05:44:05.247409 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-15 05:44:05.247394726 +0000 UTC m=+2588.471375970 I0815 05:44:05.247772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:05.247811 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-15 05:44:05.247805306 +0000 UTC m=+2588.471786550 I0815 05:44:05.264896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:05.265012 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-15 05:44:05.265004661 +0000 UTC m=+2588.488985865 I0815 05:44:05.477499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:05.508329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-zx87b" condition "Approved" to 2026-08-15 05:44:05.50831578 +0000 UTC m=+2588.732296994 I0815 05:44:05.521122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-zx87b" condition "Ready" to 2026-08-15 05:44:05.52111435 +0000 UTC m=+2588.745095554 I0815 05:44:05.547828 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:05.547813174 +0000 UTC m=+2588.771794378 I0815 05:44:05.566559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:51.983838 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-15 05:44:51.983785542 +0000 UTC m=+2635.207766776 I0815 05:44:52.004373 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-15 05:44:52.00435856 +0000 UTC m=+2635.228339794 I0815 05:44:52.004756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:52.004801 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-15 05:44:52.00478976 +0000 UTC m=+2635.228771004 I0815 05:44:52.022689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:52.022788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:52.022819 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-15 05:44:52.022810025 +0000 UTC m=+2635.246791259 E0815 05:44:52.037351 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0815 05:44:52.082578 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-15 05:44:52.082561799 +0000 UTC m=+2635.306543013 I0815 05:44:52.112324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:52.112339 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-15 05:44:52.112324188 +0000 UTC m=+2635.336305432 I0815 05:44:52.112370 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-15 05:44:52.112360969 +0000 UTC m=+2635.336342213 I0815 05:44:52.128426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:52.128509 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-15 05:44:52.128499769 +0000 UTC m=+2635.352481003 E0815 05:44:52.427123 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0815 05:44:52.531861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:52.567766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-25jp9" condition "Approved" to 2026-08-15 05:44:52.567756822 +0000 UTC m=+2635.791738026 I0815 05:44:52.597583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-25jp9" condition "Ready" to 2026-08-15 05:44:52.597573052 +0000 UTC m=+2635.821554266 I0815 05:44:52.631374 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:52.631356768 +0000 UTC m=+2635.855337982 I0815 05:44:52.653885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:52.654294 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:52.654288283 +0000 UTC m=+2635.878269487 I0815 05:44:52.692149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:52.695464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:52.695916 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:52.695908008 +0000 UTC m=+2635.919889242 I0815 05:44:52.962536 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-15 05:44:52.962523021 +0000 UTC m=+2636.186504235 I0815 05:44:52.989136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:52.989170 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-15 05:44:52.989161374 +0000 UTC m=+2636.213142588 I0815 05:44:52.989593 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-15 05:44:52.989587544 +0000 UTC m=+2636.213568758 I0815 05:44:53.011314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:53.011366 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-15 05:44:53.01136146 +0000 UTC m=+2636.235342664 I0815 05:44:53.107294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:53.161067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-75kvt" condition "Approved" to 2026-08-15 05:44:53.161054437 +0000 UTC m=+2636.385035631 I0815 05:44:53.215185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-75kvt" condition "Ready" to 2026-08-15 05:44:53.215171725 +0000 UTC m=+2636.439152929 I0815 05:44:53.251056 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:53.251042632 +0000 UTC m=+2636.475023836 I0815 05:44:53.270283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:53.270615 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:53.270607464 +0000 UTC m=+2636.494588678 I0815 05:44:53.304487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:53.306316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:53.485675 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-15 05:44:53.48566283 +0000 UTC m=+2636.709644044 I0815 05:44:53.514626 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-15 05:44:53.51460272 +0000 UTC m=+2636.738583924 I0815 05:44:53.514904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:53.514920 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-15 05:44:53.514917547 +0000 UTC m=+2636.738898741 I0815 05:44:53.533940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:53.534013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:53.534045 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-15 05:44:53.534036559 +0000 UTC m=+2636.758017793 I0815 05:44:53.786621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-gdr5z" condition "Approved" to 2026-08-15 05:44:53.786608722 +0000 UTC m=+2637.010589926 I0815 05:44:53.833950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-gdr5z" condition "Ready" to 2026-08-15 05:44:53.833937475 +0000 UTC m=+2637.057918689 I0815 05:44:53.867980 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:53.867966927 +0000 UTC m=+2637.091948141 I0815 05:44:53.892436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:54.024771 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-15 05:44:54.024755816 +0000 UTC m=+2637.248737010 I0815 05:44:54.049231 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-15 05:44:54.049213976 +0000 UTC m=+2637.273195210 I0815 05:44:54.049423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:54.049451 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-15 05:44:54.049445172 +0000 UTC m=+2637.273426386 I0815 05:44:54.276743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:54.276796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:44:54.276814 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-15 05:44:54.276807776 +0000 UTC m=+2637.500789000 I0815 05:44:54.292724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:54.617391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hw7z4" condition "Approved" to 2026-08-15 05:44:54.617375474 +0000 UTC m=+2637.841356698 I0815 05:44:54.663411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hw7z4" condition "Ready" to 2026-08-15 05:44:54.663397336 +0000 UTC m=+2637.887378540 I0815 05:44:55.146781 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:55.146768825 +0000 UTC m=+2638.370750039 I0815 05:44:55.296903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:55.297363 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:44:55.297353043 +0000 UTC m=+2638.521334277 I0815 05:44:55.543631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:44:55.593459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:48:15.996956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:48:15.997730 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-08-15 05:48:15.997716573 +0000 UTC m=+2839.221697817 I0815 05:48:15.997204 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-08-15 05:48:15.997190811 +0000 UTC m=+2839.221172015 I0815 05:48:16.012629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:48:16.012702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:48:16.012720 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-08-15 05:48:16.012714776 +0000 UTC m=+2839.236695980 I0815 05:48:16.432923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:48:16.440987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-48dwq" condition "Approved" to 2026-08-15 05:48:16.440967435 +0000 UTC m=+2839.664948649 I0815 05:48:16.463905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-48dwq" condition "Ready" to 2026-08-15 05:48:16.463895399 +0000 UTC m=+2839.687876603 I0815 05:48:16.505792 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:48:16.505777691 +0000 UTC m=+2839.729758895 I0815 05:48:16.538156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:48:16.595768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:48:18.603235 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:48:18.603268 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-08-15 05:48:18.603260397 +0000 UTC m=+2841.827241611 I0815 05:48:18.603571 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-08-15 05:48:18.603565584 +0000 UTC m=+2841.827546798 I0815 05:48:18.620874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:48:18.621016 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0815 05:48:18.621047 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-08-15 05:48:18.621038656 +0000 UTC m=+2841.845019900 I0815 05:48:18.932785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:48:18.945691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-gq5cg" condition "Approved" to 2026-08-15 05:48:18.945678151 +0000 UTC m=+2842.169659375 I0815 05:48:18.976017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-gq5cg" condition "Ready" to 2026-08-15 05:48:18.976006594 +0000 UTC m=+2842.199987808 I0815 05:48:19.009851 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-15 05:48:19.009835632 +0000 UTC m=+2842.233816846 I0815 05:48:19.031431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0815 05:48:19.092672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"