I0227 21:04:18.851898       1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad"
I0227 21:04:18.852040       1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"]
W0227 21:04:18.852129       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0227 21:04:18.859680       1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]"
I0227 21:04:18.860287       1 controller.go:156] "cert-manager/controller: starting leader election"
I0227 21:04:18.860450       1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402"
I0227 21:04:18.860552       1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403"
I0227 21:04:18.864839       1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0227 21:04:18.882750       1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller
I0227 21:04:18.886985       1 controller.go:226] "cert-manager/controller: starting controller" controller="orders"
I0227 21:04:18.891151       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault"
I0227 21:04:18.891171       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi"
I0227 21:04:18.891245       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme"
I0227 21:04:18.893890       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing"
I0227 21:04:18.899991       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager"
I0227 21:04:18.903736       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness"
I0227 21:04:18.905585       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger"
I0227 21:04:18.907512       1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges"
I0227 21:04:18.909403       1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim"
I0227 21:04:18.911137       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver"
I0227 21:04:18.913176       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned"
I0227 21:04:18.913285       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi"
I0227 21:04:18.919242       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca"
I0227 21:04:18.923616       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme"
I0227 21:04:18.923656       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca"
I0227 21:04:18.923667       1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim"
I0227 21:04:18.923751       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault"
I0227 21:04:18.926437       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics"
I0227 21:04:18.929149       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager"
I0227 21:04:18.931848       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager"
I0227 21:04:18.934050       1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers"
I0227 21:04:18.936144       1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned"
I0227 21:04:18.938270       1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers"
I0227 21:04:33.728051       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-02-27 21:04:33.728025776 +0000 UTC m=+14.918472480
I0227 21:04:34.457459       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-27 21:04:34.45743624 +0000 UTC m=+15.647882984
I0227 21:04:34.457835       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:04:34.457930       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-02-27 21:04:34.457920025 +0000 UTC m=+15.648366729
E0227 21:04:34.475160       1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0227 21:04:34.475210       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-02-27 21:04:34.475201507 +0000 UTC m=+15.665648211
E0227 21:04:34.475256       1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0227 21:04:34.478065       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:04:34.478212       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:04:34.478329       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-02-27 21:04:34.478316966 +0000 UTC m=+15.668763690
E0227 21:04:34.487247       1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere"
E0227 21:04:34.487402       1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0227 21:04:34.487475       1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0227 21:04:34.487541       1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere"
I0227 21:04:34.629756       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:04:34.640708       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rs9fj" condition "Approved" to 2026-02-27 21:04:34.640693009 +0000 UTC m=+15.831139703
I0227 21:04:34.657811       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rs9fj" condition "Ready" to 2026-02-27 21:04:34.657794695 +0000 UTC m=+15.848241399
I0227 21:04:34.687579       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:04:34.687552785 +0000 UTC m=+15.877999479
I0227 21:04:34.745739       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:04:34.746637       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:04:34.746604791 +0000 UTC m=+15.937051525
I0227 21:04:34.879701       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:04:39.488335       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:04:39.488317015 +0000 UTC m=+20.678763719
I0227 21:05:00.326314       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-27 21:05:00.32629972 +0000 UTC m=+41.516746404
I0227 21:05:00.326717       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:05:00.326744       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-02-27 21:05:00.326740574 +0000 UTC m=+41.517187268
I0227 21:05:00.359414       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-02-27 21:05:00.359402107 +0000 UTC m=+41.549848821
I0227 21:05:00.363612       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:05:00.363713       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:05:00.363742       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-02-27 21:05:00.363733795 +0000 UTC m=+41.554180489
I0227 21:05:00.675649       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:05:00.684725       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nzt45" condition "Approved" to 2026-02-27 21:05:00.684703981 +0000 UTC m=+41.875150745
I0227 21:05:00.715420       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nzt45" condition "Ready" to 2026-02-27 21:05:00.715397431 +0000 UTC m=+41.905844165
I0227 21:05:00.751261       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:05:00.751242485 +0000 UTC m=+41.941689169
I0227 21:05:00.778414       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:05:00.779077       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:05:00.779066494 +0000 UTC m=+41.969513198
I0227 21:05:00.796493       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:05:00.797220       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:05:00.797205633 +0000 UTC m=+41.987652327
I0227 21:07:34.779284       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-02-27 21:07:34.779259302 +0000 UTC m=+195.969706026
I0227 21:07:34.779537       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:07:34.779586       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-02-27 21:07:34.779573802 +0000 UTC m=+195.970020526
I0227 21:07:34.799287       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:07:34.799403       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:07:34.799466       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-02-27 21:07:34.799456473 +0000 UTC m=+195.989903197
I0227 21:07:35.043754       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:07:35.052261       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-7zlvp" condition "Approved" to 2026-02-27 21:07:35.052246658 +0000 UTC m=+196.242693362
I0227 21:07:35.079542       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-7zlvp" condition "Ready" to 2026-02-27 21:07:35.079523274 +0000 UTC m=+196.269969968
I0227 21:07:35.109131       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:07:35.109091482 +0000 UTC m=+196.299538186
I0227 21:07:35.129068       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:07:35.129845       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:07:35.129837291 +0000 UTC m=+196.320283995
I0227 21:07:35.147106       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:07:35.167932       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:08:37.650991       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 21:08:37.650962974 +0000 UTC m=+258.841409678
I0227 21:08:37.651080       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:08:37.651130       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-02-27 21:08:37.651117709 +0000 UTC m=+258.841564433
E0227 21:08:37.666822       1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0227 21:08:37.666868       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-02-27 21:08:37.666859789 +0000 UTC m=+258.857306773
E0227 21:08:37.666937       1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0227 21:08:37.669709       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:08:37.669799       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:08:37.669819       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-02-27 21:08:37.669812972 +0000 UTC m=+258.860259696
E0227 21:08:37.679963       1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack"
E0227 21:08:37.680105       1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0227 21:08:37.680186       1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0227 21:08:37.680253       1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack"
I0227 21:08:37.710356       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z4pdv" condition "Approved" to 2026-02-27 21:08:37.710336099 +0000 UTC m=+258.900782803
I0227 21:08:37.710515       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:08:37.723741       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z4pdv" condition "Ready" to 2026-02-27 21:08:37.723722143 +0000 UTC m=+258.914168847
I0227 21:08:37.749665       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:08:37.749642806 +0000 UTC m=+258.940089540
I0227 21:08:37.767362       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:08:37.768190       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:08:37.768176745 +0000 UTC m=+258.958623459
I0227 21:08:37.783334       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:08:37.783664       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:08:37.783607195 +0000 UTC m=+258.974053899
I0227 21:08:37.787381       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:08:42.681299       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:08:42.681283904 +0000 UTC m=+263.871730638
I0227 21:09:23.472405       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-02-27 21:09:23.472381441 +0000 UTC m=+304.662828135
I0227 21:09:23.472754       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:09:23.472795       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-27 21:09:23.472790794 +0000 UTC m=+304.663237488
I0227 21:09:23.482155       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-02-27 21:09:23.482131641 +0000 UTC m=+304.672578355
I0227 21:09:23.482256       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:09:23.482283       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-02-27 21:09:23.482277896 +0000 UTC m=+304.672724580
I0227 21:09:23.493057       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:09:23.487397       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-02-27 21:09:23.486777388 +0000 UTC m=+304.677224112
I0227 21:09:23.493185       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-02-27 21:09:23.493167951 +0000 UTC m=+304.683614635
I0227 21:09:23.495142       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:23.495964       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:09:23.496001       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-27 21:09:23.495992271 +0000 UTC m=+304.686438975
I0227 21:09:23.511781       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:23.511839       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:09:23.511862       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-02-27 21:09:23.511853975 +0000 UTC m=+304.702300679
I0227 21:09:23.512541       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:23.512779       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:09:23.512828       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-02-27 21:09:23.512821855 +0000 UTC m=+304.703268559
I0227 21:09:23.806094       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:23.816079       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-s6cqt" condition "Approved" to 2026-02-27 21:09:23.816063811 +0000 UTC m=+305.006510515
I0227 21:09:23.823085       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lb5rp" condition "Approved" to 2026-02-27 21:09:23.823070254 +0000 UTC m=+305.013516958
I0227 21:09:23.842574       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-s6cqt" condition "Ready" to 2026-02-27 21:09:23.842560832 +0000 UTC m=+305.033007526
I0227 21:09:23.844191       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lb5rp" condition "Ready" to 2026-02-27 21:09:23.844177013 +0000 UTC m=+305.034623717
I0227 21:09:23.871954       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:09:23.871942845 +0000 UTC m=+305.062389709
I0227 21:09:23.877317       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:09:23.877297565 +0000 UTC m=+305.067744269
I0227 21:09:23.879213       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:23.894312       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-klvxb" condition "Approved" to 2026-02-27 21:09:23.894284574 +0000 UTC m=+305.084731308
I0227 21:09:23.897795       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:23.897949       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:23.982063       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-klvxb" condition "Ready" to 2026-02-27 21:09:23.98203133 +0000 UTC m=+305.172478054
I0227 21:09:24.768173       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:09:24.768151286 +0000 UTC m=+305.958598010
I0227 21:09:24.981670       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:24.982180       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:09:24.98217285 +0000 UTC m=+306.172619554
I0227 21:09:25.216815       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:34.021300       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:09:34.021307       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" condition "Ready" to 2026-02-27 21:09:34.021295013 +0000 UTC m=+315.211741717
I0227 21:09:34.021333       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" condition "Issuing" to 2026-02-27 21:09:34.021328454 +0000 UTC m=+315.211775148
I0227 21:09:34.039555       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:34.039654       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" condition "Ready" to 2026-02-27 21:09:34.039644075 +0000 UTC m=+315.230090779
I0227 21:09:34.180404       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:34.217531       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rz8sk-7wnst" condition "Approved" to 2026-02-27 21:09:34.217505552 +0000 UTC m=+315.407952246
I0227 21:09:34.244567       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rz8sk-7wnst" condition "Ready" to 2026-02-27 21:09:34.24454969 +0000 UTC m=+315.434996394
I0227 21:09:34.377720       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:09:34.377695227 +0000 UTC m=+315.568141931
I0227 21:09:34.916355       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:09:35.434620       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rz8sk-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:10:07.278847       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:10:07.278864       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-02-27 21:10:07.27882018 +0000 UTC m=+348.469266904
I0227 21:10:07.278884       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-02-27 21:10:07.278875621 +0000 UTC m=+348.469322335
I0227 21:10:07.298676       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:10:07.298756       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-02-27 21:10:07.29875004 +0000 UTC m=+348.489196734
I0227 21:10:07.496499       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:10:08.594181       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7z2gd" condition "Approved" to 2026-02-27 21:10:08.594157605 +0000 UTC m=+349.784604329
I0227 21:10:08.620722       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7z2gd" condition "Ready" to 2026-02-27 21:10:08.620709815 +0000 UTC m=+349.811156519
I0227 21:10:08.684344       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:10:08.684330787 +0000 UTC m=+349.874777471
I0227 21:10:08.709534       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:10:08.710141       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:10:08.710129612 +0000 UTC m=+349.900576346
I0227 21:10:08.740347       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:13:29.728869       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-02-27 21:13:29.728837853 +0000 UTC m=+550.919284587
I0227 21:13:29.728927       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:13:29.728983       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-02-27 21:13:29.728975338 +0000 UTC m=+550.919422062
I0227 21:13:29.747097       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:13:29.747452       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-02-27 21:13:29.747431551 +0000 UTC m=+550.937878255
I0227 21:13:29.905346       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:13:29.938941       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-42nmv" condition "Approved" to 2026-02-27 21:13:29.938916421 +0000 UTC m=+551.129363145
I0227 21:13:29.956931       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-42nmv" condition "Ready" to 2026-02-27 21:13:29.95691528 +0000 UTC m=+551.147361984
I0227 21:13:29.990510       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:13:29.990439272 +0000 UTC m=+551.180885986
I0227 21:13:30.010508       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:13:30.011386       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:13:30.011359802 +0000 UTC m=+551.201806526
I0227 21:13:30.040028       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:13:30.040559       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:13:30.040548169 +0000 UTC m=+551.230994873
I0227 21:13:30.041268       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:15:56.943986       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:15:56.944043       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-02-27 21:15:56.944036227 +0000 UTC m=+698.134482921
I0227 21:15:56.944228       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-02-27 21:15:56.944204212 +0000 UTC m=+698.134650936
I0227 21:15:56.959975       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:15:56.960064       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:15:56.960089       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-02-27 21:15:56.960082684 +0000 UTC m=+698.150529388
I0227 21:15:57.385291       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:15:57.389718       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-f7g9v" condition "Approved" to 2026-02-27 21:15:57.389702755 +0000 UTC m=+698.580149459
I0227 21:15:57.414049       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-f7g9v" condition "Ready" to 2026-02-27 21:15:57.414037909 +0000 UTC m=+698.604484613
I0227 21:15:57.457880       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:15:57.457863837 +0000 UTC m=+698.648310561
I0227 21:15:57.494549       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:15:57.495134       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:15:57.495126971 +0000 UTC m=+698.685573675
I0227 21:15:57.502907       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:15:57.516010       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:17:00.713629       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-02-27 21:17:00.713597411 +0000 UTC m=+761.904044115
I0227 21:17:00.713970       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:17:00.714007       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-02-27 21:17:00.714003433 +0000 UTC m=+761.904450137
I0227 21:17:00.729922       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:17:00.729971       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-02-27 21:17:00.729966997 +0000 UTC m=+761.920413691
I0227 21:17:00.926955       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:17:00.962110       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zrgdn" condition "Approved" to 2026-02-27 21:17:00.962091192 +0000 UTC m=+762.152537896
I0227 21:17:00.987801       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zrgdn" condition "Ready" to 2026-02-27 21:17:00.987782623 +0000 UTC m=+762.178229327
I0227 21:17:01.022799       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:17:01.022782688 +0000 UTC m=+762.213229382
I0227 21:17:01.045814       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:17:01.103307       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:20:08.443844       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-02-27 21:20:08.443803536 +0000 UTC m=+949.634250260
I0227 21:20:08.444155       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:20:08.444318       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-02-27 21:20:08.444305592 +0000 UTC m=+949.634752326
I0227 21:20:08.464517       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:20:08.464667       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:20:08.464711       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-02-27 21:20:08.464699216 +0000 UTC m=+949.655145940
I0227 21:20:08.905247       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bphpt" condition "Approved" to 2026-02-27 21:20:08.905221567 +0000 UTC m=+950.095668291
I0227 21:20:08.929752       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bphpt" condition "Ready" to 2026-02-27 21:20:08.929725081 +0000 UTC m=+950.120171815
I0227 21:20:08.958239       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:20:08.95822028 +0000 UTC m=+950.148667004
I0227 21:20:08.984466       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:20:09.054735       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:26:20.916626       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-02-27 21:26:20.916599821 +0000 UTC m=+1322.107046545
I0227 21:26:20.916700       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:26:20.916788       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-02-27 21:26:20.916778266 +0000 UTC m=+1322.107224990
I0227 21:26:20.937009       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:26:20.937135       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:26:20.937166       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-02-27 21:26:20.937157852 +0000 UTC m=+1322.127604556
I0227 21:26:21.287814       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-68v9n" condition "Approved" to 2026-02-27 21:26:21.287794893 +0000 UTC m=+1322.478241587
I0227 21:26:21.312284       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-68v9n" condition "Ready" to 2026-02-27 21:26:21.312269859 +0000 UTC m=+1322.502716553
I0227 21:26:21.340896       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:26:21.340874436 +0000 UTC m=+1322.531321140
I0227 21:26:21.365519       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:27:47.969230       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-02-27 21:27:47.969212839 +0000 UTC m=+1409.159659543
I0227 21:27:47.969293       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:27:47.969320       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-02-27 21:27:47.969311992 +0000 UTC m=+1409.159758726
I0227 21:27:47.983943       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:27:47.984058       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:27:47.984096       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-02-27 21:27:47.98408645 +0000 UTC m=+1409.174533184
I0227 21:27:48.323957       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:27:48.332007       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-59z7j" condition "Approved" to 2026-02-27 21:27:48.331991228 +0000 UTC m=+1409.522437962
I0227 21:27:48.357842       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-59z7j" condition "Ready" to 2026-02-27 21:27:48.357820626 +0000 UTC m=+1409.548267320
I0227 21:27:48.399761       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:27:48.399743705 +0000 UTC m=+1409.590190439
I0227 21:27:48.421482       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:27:48.422164       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:27:48.422157276 +0000 UTC m=+1409.612603980
I0227 21:27:48.452266       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:45.762100       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:28:45.762146       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-02-27 21:28:45.762134807 +0000 UTC m=+1466.952581511
I0227 21:28:45.762210       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-27 21:28:45.762184338 +0000 UTC m=+1466.952631032
I0227 21:28:45.782638       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:45.782779       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-27 21:28:45.78276775 +0000 UTC m=+1466.973214464
I0227 21:28:45.801446       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:45.801557       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-27 21:28:45.801545916 +0000 UTC m=+1466.991992610
I0227 21:28:45.813365       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-qrxhr" condition "Approved" to 2026-02-27 21:28:45.81334083 +0000 UTC m=+1467.003787534
I0227 21:28:45.837373       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-qrxhr" condition "Ready" to 2026-02-27 21:28:45.837357601 +0000 UTC m=+1467.027804305
I0227 21:28:45.869542       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:28:45.86952051 +0000 UTC m=+1467.059967204
I0227 21:28:45.900288       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:45.953361       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:46.457241       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-02-27 21:28:46.457224758 +0000 UTC m=+1467.647671462
I0227 21:28:46.457585       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:28:46.457605       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-02-27 21:28:46.4576009 +0000 UTC m=+1467.648047604
I0227 21:28:46.481040       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:46.481097       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-02-27 21:28:46.481090185 +0000 UTC m=+1467.671536889
I0227 21:28:46.502021       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:46.502118       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-02-27 21:28:46.502108481 +0000 UTC m=+1467.692555185
I0227 21:28:46.511196       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-nk4xl" condition "Approved" to 2026-02-27 21:28:46.511185598 +0000 UTC m=+1467.701632292
I0227 21:28:46.529639       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-nk4xl" condition "Ready" to 2026-02-27 21:28:46.529621313 +0000 UTC m=+1467.720068017
I0227 21:28:46.556729       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:28:46.556711322 +0000 UTC m=+1467.747158056
I0227 21:28:46.575145       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:46.628630       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:28:47.213542       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-02-27 21:28:47.213524159 +0000 UTC m=+1468.403970863
I0227 21:28:47.907125       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-02-27 21:28:47.907100942 +0000 UTC m=+1469.097547676
I0227 21:29:35.496402       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-02-27 21:29:35.496384178 +0000 UTC m=+1516.686830872
I0227 21:29:35.496629       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:29:35.503729       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-02-27 21:29:35.503705 +0000 UTC m=+1516.694151694
I0227 21:29:35.527378       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:29:35.527684       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-02-27 21:29:35.52766556 +0000 UTC m=+1516.718112314
I0227 21:29:36.843471       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:29:36.896614       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vhgqz" condition "Approved" to 2026-02-27 21:29:36.896588789 +0000 UTC m=+1518.087035493
I0227 21:29:36.924370       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vhgqz" condition "Ready" to 2026-02-27 21:29:36.924347199 +0000 UTC m=+1518.114793933
I0227 21:29:36.971419       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:29:36.97139949 +0000 UTC m=+1518.161846194
I0227 21:29:37.001074       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:29:37.113632       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:32:09.044209       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:32:09.044272       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-02-27 21:32:09.044260469 +0000 UTC m=+1670.234707173
I0227 21:32:09.044275       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-02-27 21:32:09.044255439 +0000 UTC m=+1670.234702173
I0227 21:32:09.063211       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:32:09.063324       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:32:09.063357       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-02-27 21:32:09.063346874 +0000 UTC m=+1670.253793598
I0227 21:32:09.310626       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:32:09.323977       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-hksgb" condition "Approved" to 2026-02-27 21:32:09.323963622 +0000 UTC m=+1670.514410326
I0227 21:32:09.344316       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-hksgb" condition "Ready" to 2026-02-27 21:32:09.344304067 +0000 UTC m=+1670.534750771
I0227 21:32:09.378213       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:32:09.378189381 +0000 UTC m=+1670.568636085
I0227 21:32:09.410579       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:32:09.411095       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:32:09.411089844 +0000 UTC m=+1670.601536538
I0227 21:32:09.434562       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:32:09.435275       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:32:09.43526496 +0000 UTC m=+1670.625711664
I0227 21:32:10.709596       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:32:10.709652       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-02-27 21:32:10.709638274 +0000 UTC m=+1671.900085048
I0227 21:32:10.709868       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-02-27 21:32:10.70984322 +0000 UTC m=+1671.900289944
I0227 21:32:10.728401       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:32:10.728541       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-02-27 21:32:10.728528433 +0000 UTC m=+1671.918975137
I0227 21:32:11.118817       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:32:11.164642       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-dfq59" condition "Approved" to 2026-02-27 21:32:11.164619261 +0000 UTC m=+1672.355065945
I0227 21:32:11.192096       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-dfq59" condition "Ready" to 2026-02-27 21:32:11.192084381 +0000 UTC m=+1672.382531075
I0227 21:32:11.222998       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:32:11.2229763 +0000 UTC m=+1672.413423004
I0227 21:32:11.251288       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:32:11.321577       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:35:08.827389       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:35:08.827424       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-02-27 21:35:08.827416103 +0000 UTC m=+1850.017862797
I0227 21:35:08.828288       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-02-27 21:35:08.82826153 +0000 UTC m=+1850.018708254
I0227 21:35:08.855162       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:35:08.855308       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-02-27 21:35:08.855288907 +0000 UTC m=+1850.045735611
I0227 21:35:09.006503       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:35:09.051257       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-wbgrd" condition "Approved" to 2026-02-27 21:35:09.051243056 +0000 UTC m=+1850.241689760
I0227 21:35:09.075154       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-wbgrd" condition "Ready" to 2026-02-27 21:35:09.075127413 +0000 UTC m=+1850.265574127
I0227 21:35:09.109754       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:35:09.10972701 +0000 UTC m=+1850.300173714
I0227 21:35:09.135042       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:36:10.246736       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kzwxg-api" condition "Ready" to 2026-02-27 21:36:10.246718096 +0000 UTC m=+1911.437164790
I0227 21:36:10.247310       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-kzwxg-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:36:10.247325       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kzwxg-api" condition "Issuing" to 2026-02-27 21:36:10.247320855 +0000 UTC m=+1911.437767559
I0227 21:36:10.258537       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kzwxg-vnc" condition "Ready" to 2026-02-27 21:36:10.258527271 +0000 UTC m=+1911.448973965
I0227 21:36:10.259025       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-kzwxg-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:36:10.259066       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kzwxg-vnc" condition "Issuing" to 2026-02-27 21:36:10.259056917 +0000 UTC m=+1911.449503611
I0227 21:36:10.262341       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-kzwxg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kzwxg-api\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:36:10.262397       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-kzwxg-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:36:10.262407       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kzwxg-api" condition "Issuing" to 2026-02-27 21:36:10.262403833 +0000 UTC m=+1911.452850537
I0227 21:36:10.278374       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-kzwxg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kzwxg-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:36:10.278460       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-kzwxg-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:36:10.278482       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kzwxg-vnc" condition "Issuing" to 2026-02-27 21:36:10.278475763 +0000 UTC m=+1911.468922457
I0227 21:36:10.410782       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-kzwxg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kzwxg-api\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:36:10.417269       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-kzwxg-api-knw4t" condition "Approved" to 2026-02-27 21:36:10.417258611 +0000 UTC m=+1911.607705305
I0227 21:36:10.463417       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-kzwxg-api-knw4t" condition "Ready" to 2026-02-27 21:36:10.463387903 +0000 UTC m=+1911.653834597
I0227 21:36:10.493633       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-kzwxg-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:36:10.493617801 +0000 UTC m=+1911.684064505
I0227 21:36:10.514177       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-kzwxg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kzwxg-api\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:36:10.533164       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-kzwxg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kzwxg-api\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:36:10.902265       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-kzwxg-vnc-wk4zm" condition "Approved" to 2026-02-27 21:36:10.902228009 +0000 UTC m=+1912.092674713
I0227 21:36:10.919076       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-kzwxg-vnc-wk4zm" condition "Ready" to 2026-02-27 21:36:10.919064492 +0000 UTC m=+1912.109511186
I0227 21:36:10.945965       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-kzwxg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:36:10.945932854 +0000 UTC m=+1912.136379558
I0227 21:36:10.972254       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-kzwxg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kzwxg-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:36:10.975131       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-kzwxg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:36:10.975113959 +0000 UTC m=+1912.165560663
I0227 21:36:10.992199       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-kzwxg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kzwxg-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:36:10.992735       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-kzwxg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:36:10.992726927 +0000 UTC m=+1912.183173631
I0227 21:37:44.319007       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-02-27 21:37:44.318989889 +0000 UTC m=+2005.509436593
I0227 21:37:44.319155       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:37:44.319252       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-02-27 21:37:44.319239017 +0000 UTC m=+2005.509685741
I0227 21:37:44.336737       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:37:44.336845       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:37:44.336867       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-02-27 21:37:44.336861046 +0000 UTC m=+2005.527307750
I0227 21:37:44.616130       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-l8wwp" condition "Approved" to 2026-02-27 21:37:44.616103075 +0000 UTC m=+2005.806549799
I0227 21:37:44.632572       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-l8wwp" condition "Ready" to 2026-02-27 21:37:44.632553836 +0000 UTC m=+2005.823000530
I0227 21:37:44.695963       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:37:44.695937225 +0000 UTC m=+2005.886383949
I0227 21:37:44.722555       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:37:44.723272       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:37:44.723263111 +0000 UTC m=+2005.913709815
I0227 21:37:44.742722       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:37:44.743670       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:37:44.743660688 +0000 UTC m=+2005.934107382
I0227 21:41:22.697480       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-02-27 21:41:22.697456417 +0000 UTC m=+2223.887903121
I0227 21:41:22.698129       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:41:22.698171       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-02-27 21:41:22.698166959 +0000 UTC m=+2223.888613663
I0227 21:41:22.726554       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:41:22.726729       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-02-27 21:41:22.726717415 +0000 UTC m=+2223.917164149
I0227 21:41:22.893870       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:41:22.928092       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-b85pg" condition "Approved" to 2026-02-27 21:41:22.92807057 +0000 UTC m=+2224.118517274
I0227 21:41:22.947170       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-b85pg" condition "Ready" to 2026-02-27 21:41:22.947153835 +0000 UTC m=+2224.137600539
I0227 21:41:22.984191       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:41:22.984174509 +0000 UTC m=+2224.174621203
I0227 21:41:23.004840       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:41:23.005364       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:41:23.00535721 +0000 UTC m=+2224.195803904
I0227 21:41:23.024718       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:41:23.025341       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:41:23.025332594 +0000 UTC m=+2224.215779298
I0227 21:41:24.405428       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-02-27 21:41:24.405403708 +0000 UTC m=+2225.595850412
I0227 21:41:24.405546       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:41:24.405645       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-02-27 21:41:24.405631505 +0000 UTC m=+2225.596078219
I0227 21:41:24.425914       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:41:24.426064       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-02-27 21:41:24.426052373 +0000 UTC m=+2225.616499107
I0227 21:41:24.640693       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:41:24.678370       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-546zw" condition "Approved" to 2026-02-27 21:41:24.678350203 +0000 UTC m=+2225.868796907
I0227 21:41:24.703308       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-546zw" condition "Ready" to 2026-02-27 21:41:24.703283914 +0000 UTC m=+2225.893730648
I0227 21:41:24.737866       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:41:24.73784959 +0000 UTC m=+2225.928296314
I0227 21:41:24.762144       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:41:24.762622       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:41:24.762611965 +0000 UTC m=+2225.953058669
I0227 21:41:24.776859       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:41:24.791399       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:13.703612       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:44:13.703675       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-02-27 21:44:13.703667039 +0000 UTC m=+2394.894113733
I0227 21:44:13.703817       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-02-27 21:44:13.703805534 +0000 UTC m=+2394.894252258
E0227 21:44:13.720125       1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0227 21:44:13.720255       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-02-27 21:44:13.720242205 +0000 UTC m=+2394.910688929
I0227 21:44:13.720319       1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0227 21:44:13.722750       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:13.722906       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-02-27 21:44:13.722893749 +0000 UTC m=+2394.913340473
E0227 21:44:13.737118       1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client"
E0227 21:44:13.737217       1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0227 21:44:13.737319       1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0227 21:44:13.737358       1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client"
I0227 21:44:13.747600       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:13.777888       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-rf95d" condition "Approved" to 2026-02-27 21:44:13.777865042 +0000 UTC m=+2394.968311766
I0227 21:44:13.798800       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-rf95d" condition "Ready" to 2026-02-27 21:44:13.798777955 +0000 UTC m=+2394.989224659
I0227 21:44:13.828576       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:13.828557999 +0000 UTC m=+2395.019004733
I0227 21:44:13.858167       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:14.447912       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-02-27 21:44:14.447876998 +0000 UTC m=+2395.638323732
I0227 21:44:14.447793       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:44:14.448508       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-02-27 21:44:14.448485257 +0000 UTC m=+2395.638931981
E0227 21:44:14.461133       1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0227 21:44:14.461187       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-02-27 21:44:14.46117739 +0000 UTC m=+2395.651624124
I0227 21:44:14.461257       1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0227 21:44:14.462903       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:14.463139       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:44:14.463169       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-02-27 21:44:14.463161863 +0000 UTC m=+2395.653608567
E0227 21:44:14.472015       1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server"
E0227 21:44:14.472266       1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0227 21:44:14.472307       1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0227 21:44:14.472415       1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server"
I0227 21:44:14.513098       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:14.515984       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-48cfk" condition "Approved" to 2026-02-27 21:44:14.515969347 +0000 UTC m=+2395.706416041
I0227 21:44:14.536627       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-48cfk" condition "Ready" to 2026-02-27 21:44:14.536608322 +0000 UTC m=+2395.727055016
I0227 21:44:14.573018       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:14.573000406 +0000 UTC m=+2395.763447110
I0227 21:44:14.596601       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:14.597014       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:14.597005997 +0000 UTC m=+2395.787452701
I0227 21:44:14.618899       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:14.620941       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:15.274256       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-02-27 21:44:15.274231663 +0000 UTC m=+2396.464678367
I0227 21:44:15.274464       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:44:15.274526       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-02-27 21:44:15.274512451 +0000 UTC m=+2396.464959185
I0227 21:44:15.297550       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:15.297903       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-02-27 21:44:15.297635875 +0000 UTC m=+2396.488082579
I0227 21:44:15.321222       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:15.321320       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-02-27 21:44:15.321310175 +0000 UTC m=+2396.511756879
I0227 21:44:15.326852       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-bvjfl" condition "Approved" to 2026-02-27 21:44:15.326839301 +0000 UTC m=+2396.517286005
I0227 21:44:15.334528       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-02-27 21:44:15.334513574 +0000 UTC m=+2396.524960278
I0227 21:44:15.344483       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-bvjfl" condition "Ready" to 2026-02-27 21:44:15.344458869 +0000 UTC m=+2396.534905573
I0227 21:44:15.366749       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:18.738469       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:18.738453466 +0000 UTC m=+2399.928900170
I0227 21:44:18.751552       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-bvjfl" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:18.751539331 +0000 UTC m=+2399.941986025
I0227 21:44:18.791704       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:18.791685314 +0000 UTC m=+2399.982132018
I0227 21:44:18.818734       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:18.819124       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:18.819113204 +0000 UTC m=+2400.009559908
I0227 21:44:18.833059       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:18.856647       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:44:18.857058       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:18.857043897 +0000 UTC m=+2400.047490631
I0227 21:44:19.473417       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:44:19.473398512 +0000 UTC m=+2400.663845246
I0227 21:49:06.950119       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:06.950189       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-02-27 21:49:06.950181139 +0000 UTC m=+2688.140627853
I0227 21:49:06.951099       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-02-27 21:49:06.951093198 +0000 UTC m=+2688.141539902
I0227 21:49:06.974538       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:06.974671       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-02-27 21:49:06.974644825 +0000 UTC m=+2688.165091529
I0227 21:49:07.143315       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:07.180888       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-7gwnw" condition "Approved" to 2026-02-27 21:49:07.180874338 +0000 UTC m=+2688.371321032
I0227 21:49:07.201185       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-7gwnw" condition "Ready" to 2026-02-27 21:49:07.201166672 +0000 UTC m=+2688.391613376
I0227 21:49:07.236439       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:07.23642394 +0000 UTC m=+2688.426870644
I0227 21:49:07.262966       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:07.263603       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:07.263594652 +0000 UTC m=+2688.454041346
I0227 21:49:07.285437       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:53.183573       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-02-27 21:49:53.183544414 +0000 UTC m=+2734.373991138
I0227 21:49:53.210785       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:53.210840       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-02-27 21:49:53.210812739 +0000 UTC m=+2734.401259463
I0227 21:49:53.210833       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-02-27 21:49:53.21082171 +0000 UTC m=+2734.401268424
I0227 21:49:53.228376       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:53.228453       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:53.228478       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-02-27 21:49:53.2284699 +0000 UTC m=+2734.418916614
E0227 21:49:53.237898       1 controller.go:134] "cert-manager/issuers: issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found"
E0227 21:49:53.256969       1 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.189838e132d4eef4", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"876cc31c-b40e-462e-9c86-030cf9e5a92d", APIVersion:"cert-manager.io/v1", ResourceVersion:"25180", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.February, 27, 21, 49, 53, 241902836, time.Local), LastTimestamp:time.Date(2026, time.February, 27, 21, 49, 53, 241902836, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.189838e132d4eef4" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!)
I0227 21:49:53.289809       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-02-27 21:49:53.289787505 +0000 UTC m=+2734.480234199
I0227 21:49:53.320738       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:53.320774       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-02-27 21:49:53.320767378 +0000 UTC m=+2734.511214082
I0227 21:49:53.320932       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-02-27 21:49:53.320924433 +0000 UTC m=+2734.511371127
I0227 21:49:53.340640       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:53.340787       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-02-27 21:49:53.340775053 +0000 UTC m=+2734.531221757
E0227 21:49:53.425046       1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" key="cert-manager-test/selfsigned-cert"
I0227 21:49:53.582703       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:53.646373       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ddjb5" condition "Approved" to 2026-02-27 21:49:53.646358297 +0000 UTC m=+2734.836804991
I0227 21:49:53.685850       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ddjb5" condition "Ready" to 2026-02-27 21:49:53.685833669 +0000 UTC m=+2734.876280363
I0227 21:49:53.729482       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:53.729467164 +0000 UTC m=+2734.919913868
I0227 21:49:53.752071       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:53.754216       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:53.754146797 +0000 UTC m=+2734.944593541
I0227 21:49:53.761520       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:53.778441       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:54.117684       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-02-27 21:49:54.117663548 +0000 UTC m=+2735.308110272
I0227 21:49:54.147271       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-02-27 21:49:54.147251627 +0000 UTC m=+2735.337698351
I0227 21:49:54.147741       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:54.147768       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-02-27 21:49:54.147762843 +0000 UTC m=+2735.338209547
I0227 21:49:54.195154       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:54.195240       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:54.195269       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-02-27 21:49:54.19526158 +0000 UTC m=+2735.385708284
I0227 21:49:54.383837       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-p47vn" condition "Approved" to 2026-02-27 21:49:54.383810312 +0000 UTC m=+2735.574257016
I0227 21:49:54.411403       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-p47vn" condition "Ready" to 2026-02-27 21:49:54.411382956 +0000 UTC m=+2735.601829650
I0227 21:49:54.456887       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:54.456862899 +0000 UTC m=+2735.647309583
I0227 21:49:54.487515       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:54.585793       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-02-27 21:49:54.585771729 +0000 UTC m=+2735.776218433
I0227 21:49:54.607001       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-02-27 21:49:54.606979352 +0000 UTC m=+2735.797426056
I0227 21:49:54.607396       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:54.607413       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-02-27 21:49:54.607409035 +0000 UTC m=+2735.797855739
I0227 21:49:54.625762       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:54.625879       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:54.625917       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-02-27 21:49:54.625909382 +0000 UTC m=+2735.816356076
I0227 21:49:54.873677       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-x5tqf" condition "Approved" to 2026-02-27 21:49:54.873650512 +0000 UTC m=+2736.064097246
I0227 21:49:54.902543       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-x5tqf" condition "Ready" to 2026-02-27 21:49:54.902525888 +0000 UTC m=+2736.092972592
I0227 21:49:54.943586       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:54.94356781 +0000 UTC m=+2736.134014514
I0227 21:49:54.972871       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:54.973423       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:54.973414067 +0000 UTC m=+2736.163860761
I0227 21:49:55.114007       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-02-27 21:49:55.113982896 +0000 UTC m=+2736.304429600
I0227 21:49:55.138597       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:55.138643       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-02-27 21:49:55.138635118 +0000 UTC m=+2736.329081822
I0227 21:49:55.138706       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-02-27 21:49:55.13868337 +0000 UTC m=+2736.329130104
I0227 21:49:55.144019       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:55.292505       1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:55.292594       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:49:55.292620       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-02-27 21:49:55.292613883 +0000 UTC m=+2736.483060587
I0227 21:49:55.924110       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-68r4l" condition "Approved" to 2026-02-27 21:49:55.924092607 +0000 UTC m=+2737.114539301
I0227 21:49:55.947850       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-68r4l" condition "Ready" to 2026-02-27 21:49:55.94782751 +0000 UTC m=+2737.138274234
I0227 21:49:56.247908       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:56.24788921 +0000 UTC m=+2737.438335904
I0227 21:49:56.346645       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:49:56.347744       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:49:56.347728377 +0000 UTC m=+2737.538175111
I0227 21:49:56.551737       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:53:18.404055       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:53:18.404090       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-02-27 21:53:18.404083537 +0000 UTC m=+2939.594530241
I0227 21:53:18.404656       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-02-27 21:53:18.404650275 +0000 UTC m=+2939.595096979
I0227 21:53:18.426545       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:53:18.427343       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-02-27 21:53:18.427322834 +0000 UTC m=+2939.617769538
I0227 21:53:18.508554       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:53:18.547776       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-nbfzj" condition "Approved" to 2026-02-27 21:53:18.547753405 +0000 UTC m=+2939.738200109
I0227 21:53:18.574986       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-nbfzj" condition "Ready" to 2026-02-27 21:53:18.574965248 +0000 UTC m=+2939.765411982
I0227 21:53:18.649587       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:53:18.649573115 +0000 UTC m=+2939.840019809
I0227 21:53:18.685043       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:53:18.685435       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:53:18.685428642 +0000 UTC m=+2939.875875326
I0227 21:53:18.696288       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:53:18.714283       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:53:21.848742       1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0227 21:53:21.848780       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-02-27 21:53:21.848771958 +0000 UTC m=+2943.039218662
I0227 21:53:21.849403       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-02-27 21:53:21.849397128 +0000 UTC m=+2943.039843832
I0227 21:53:21.871197       1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:53:21.871363       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-02-27 21:53:21.871351535 +0000 UTC m=+2943.061798229
I0227 21:53:22.022342       1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0227 21:53:22.065602       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-2vpnr" condition "Approved" to 2026-02-27 21:53:22.065570366 +0000 UTC m=+2943.256017100
I0227 21:53:22.086822       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-2vpnr" condition "Ready" to 2026-02-27 21:53:22.08679781 +0000 UTC m=+2943.277244504
I0227 21:53:22.118580       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 21:53:22.118560687 +0000 UTC m=+2943.309007401
I0227 21:53:22.152152       1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"