I0401 16:27:35.336341       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0401 16:27:35.336479       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0401 16:27:35.336573       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0401 16:27:35.343436       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0401 16:27:35.344044       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0401 16:27:35.344097       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0401 16:27:35.344174       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0401 16:27:35.348429       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
E0401 16:27:35.349474       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused
I0401 16:27:55.498150       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0401 16:27:55.502690       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0401 16:27:55.502780       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0401 16:27:55.507988       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0401 16:27:55.513347       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0401 16:27:55.517182       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0401 16:27:55.521036       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0401 16:27:55.523142       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0401 16:27:55.524904       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0401 16:27:55.524929       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0401 16:27:55.524989       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0401 16:27:55.526785       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0401 16:27:55.528632       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0401 16:27:55.536422       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0401 16:27:55.539268       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0401 16:27:55.541147       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0401 16:27:55.543025       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0401 16:27:55.546322       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0401 16:27:55.549571       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0401 16:27:55.551430       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0401 16:27:55.553204       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0401 16:27:55.553221       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0401 16:27:55.553311       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0401 16:27:55.555054       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0401 16:27:55.555096       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0401 16:27:55.571207       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:55.571745       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:55.571938       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:55.820251       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:56.096488       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:56.097404       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:56.103095       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:56.111539       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:56.156947       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:27:56.165320       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0401 16:29:34.552805       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:29:34.552871       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-01 16:29:34.552856892 +0000 UTC m=+119.246261159
I0401 16:29:34.552783       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-01 16:29:34.552726969 +0000 UTC m=+119.246131246
I0401 16:29:34.578096       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:29:34.578198       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:29:34.578223       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-01 16:29:34.578213084 +0000 UTC m=+119.271617351
I0401 16:29:34.748272       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-zvhjj" condition "Approved" to 2026-04-01 16:29:34.748252635 +0000 UTC m=+119.441656902
I0401 16:29:34.800259       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-zvhjj" condition "Ready" to 2026-04-01 16:29:34.80025037 +0000 UTC m=+119.493654597
I0401 16:29:34.845989       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:29:34.845971038 +0000 UTC m=+119.539375295
I0401 16:29:34.872343       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:29:34.872581       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:29:34.872574599 +0000 UTC m=+119.565978836
I0401 16:29:34.897076       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:29:36.072879       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-01 16:29:36.072863672 +0000 UTC m=+120.766267909
I0401 16:29:36.072924       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:29:36.072942       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-01 16:29:36.072937474 +0000 UTC m=+120.766341711
I0401 16:29:36.091759       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:29:36.091874       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:29:36.091908       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-01 16:29:36.091892967 +0000 UTC m=+120.785297234
I0401 16:29:36.677099       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-crn8s" condition "Approved" to 2026-04-01 16:29:36.677073694 +0000 UTC m=+121.370477921
I0401 16:29:36.699717       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-crn8s" condition "Ready" to 2026-04-01 16:29:36.699702663 +0000 UTC m=+121.393106920
I0401 16:29:36.783481       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:29:36.783468039 +0000 UTC m=+121.476872276
I0401 16:29:36.810953       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:29:36.811413       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:29:36.811386771 +0000 UTC m=+121.504791028
I0401 16:29:36.820109       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:29:36.836298       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:27.893322       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:32:27.893334       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-01 16:32:27.893294284 +0000 UTC m=+292.586698541
I0401 16:32:27.893378       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-01 16:32:27.893361965 +0000 UTC m=+292.586766232
E0401 16:32:27.990993       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0401 16:32:27.991102       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-01 16:32:27.991090644 +0000 UTC m=+292.684494901
I0401 16:32:27.991135       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0401 16:32:27.994027       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:27.994139       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-01 16:32:27.994130615 +0000 UTC m=+292.687534852
E0401 16:32:28.012239       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
E0401 16:32:28.013005       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0401 16:32:28.013070       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0401 16:32:28.013098       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
I0401 16:32:28.025339       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:28.063720       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-t6p46" condition "Approved" to 2026-04-01 16:32:28.063693814 +0000 UTC m=+292.757098081
I0401 16:32:28.087981       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-t6p46" condition "Ready" to 2026-04-01 16:32:28.087962212 +0000 UTC m=+292.781366499
I0401 16:32:28.124959       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:28.124941538 +0000 UTC m=+292.818345825
I0401 16:32:28.157487       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:28.157901       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:28.15789446 +0000 UTC m=+292.851298697
I0401 16:32:28.164304       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:28.180282       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:28.180436       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:28.180429927 +0000 UTC m=+292.873834154
I0401 16:32:28.616138       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:32:28.616178       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-01 16:32:28.61617208 +0000 UTC m=+293.309576307
I0401 16:32:28.616603       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-01 16:32:28.61659712 +0000 UTC m=+293.310001367
E0401 16:32:28.631837       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0401 16:32:28.631882       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-01 16:32:28.631873968 +0000 UTC m=+293.325278205
I0401 16:32:28.631935       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0401 16:32:28.638484       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:28.638569       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-01 16:32:28.638561864 +0000 UTC m=+293.331966111
E0401 16:32:28.645265       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
E0401 16:32:28.645775       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0401 16:32:28.645835       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0401 16:32:28.645905       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
I0401 16:32:28.667629       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:28.701683       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-llqxc" condition "Approved" to 2026-04-01 16:32:28.701668062 +0000 UTC m=+293.395072299
I0401 16:32:28.725262       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-llqxc" condition "Ready" to 2026-04-01 16:32:28.725245914 +0000 UTC m=+293.418650181
I0401 16:32:28.748839       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:28.748822196 +0000 UTC m=+293.442226433
I0401 16:32:28.777038       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:28.777236       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:28.77722789 +0000 UTC m=+293.470632127
I0401 16:32:28.799788       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:28.800079       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:28.800070105 +0000 UTC m=+293.493474342
I0401 16:32:28.802191       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:29.465360       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-01 16:32:29.465340003 +0000 UTC m=+294.158744270
I0401 16:32:29.465622       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:32:29.465824       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-01 16:32:29.465810874 +0000 UTC m=+294.159215131
I0401 16:32:29.527869       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:29.528108       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-01 16:32:29.528095332 +0000 UTC m=+294.221499599
I0401 16:32:29.549820       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:29.549959       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-01 16:32:29.549948504 +0000 UTC m=+294.243352771
I0401 16:32:29.558671       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-mt75q" condition "Approved" to 2026-04-01 16:32:29.558659618 +0000 UTC m=+294.252063865
I0401 16:32:29.576032       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-mt75q" condition "Ready" to 2026-04-01 16:32:29.576016844 +0000 UTC m=+294.269421081
I0401 16:32:33.013369       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:33.01336066 +0000 UTC m=+297.706764887
I0401 16:32:33.022426       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-mt75q" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:33.022416662 +0000 UTC m=+297.715820889
I0401 16:32:33.048227       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:33.048211886 +0000 UTC m=+297.741616143
I0401 16:32:33.069769       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:32:33.645793       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:32:33.645776438 +0000 UTC m=+298.339180705
I0401 16:35:05.815343       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-01 16:35:05.815285237 +0000 UTC m=+450.508689474
I0401 16:35:05.815364       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:05.815479       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-01 16:35:05.81541022 +0000 UTC m=+450.508814477
I0401 16:35:05.847507       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:05.847644       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:05.847679       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-01 16:35:05.847668595 +0000 UTC m=+450.541072852
I0401 16:35:06.018747       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-vk9t7" condition "Approved" to 2026-04-01 16:35:06.018726141 +0000 UTC m=+450.712130368
I0401 16:35:06.042511       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-vk9t7" condition "Ready" to 2026-04-01 16:35:06.042491797 +0000 UTC m=+450.735896054
I0401 16:35:06.078184       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:06.078161153 +0000 UTC m=+450.771565390
I0401 16:35:06.099641       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:06.100079       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:06.100070646 +0000 UTC m=+450.793474883
I0401 16:35:06.119528       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:52.119979       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-01 16:35:52.119963539 +0000 UTC m=+496.813367776
I0401 16:35:52.146718       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:52.146796       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-01 16:35:52.146788297 +0000 UTC m=+496.840192544
I0401 16:35:52.147215       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-01 16:35:52.147207867 +0000 UTC m=+496.840612104
I0401 16:35:52.181623       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:52.181690       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-01 16:35:52.181682514 +0000 UTC m=+496.875086761
E0401 16:35:52.184108       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers"
I0401 16:35:52.248765       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-01 16:35:52.248748324 +0000 UTC m=+496.942152561
I0401 16:35:52.268067       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-01 16:35:52.268051007 +0000 UTC m=+496.961455234
I0401 16:35:52.268478       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:52.268501       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-01 16:35:52.268496067 +0000 UTC m=+496.961900294
I0401 16:35:52.285260       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:52.285332       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:52.285350       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-01 16:35:52.285344242 +0000 UTC m=+496.978748479
E0401 16:35:52.299629       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert"
I0401 16:35:52.422525       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:52.428061       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-mqrs2" condition "Approved" to 2026-04-01 16:35:52.428049933 +0000 UTC m=+497.121454170
I0401 16:35:52.494542       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-mqrs2" condition "Ready" to 2026-04-01 16:35:52.494527729 +0000 UTC m=+497.187931956
I0401 16:35:52.524523       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:52.524511301 +0000 UTC m=+497.217915538
I0401 16:35:52.554845       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:52.555274       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:52.555264771 +0000 UTC m=+497.248669008
I0401 16:35:52.558186       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:52.589310       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:52.980728       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-01 16:35:52.980711202 +0000 UTC m=+497.674115429
I0401 16:35:53.008619       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:53.008666       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-01 16:35:53.008657176 +0000 UTC m=+497.702061413
I0401 16:35:53.008872       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-01 16:35:53.008856241 +0000 UTC m=+497.702260478
I0401 16:35:53.026141       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:53.026229       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-01 16:35:53.026221777 +0000 UTC m=+497.719626014
I0401 16:35:53.266731       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:53.300277       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-6cs55" condition "Approved" to 2026-04-01 16:35:53.300261724 +0000 UTC m=+497.993665981
I0401 16:35:53.330824       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-6cs55" condition "Ready" to 2026-04-01 16:35:53.3308091 +0000 UTC m=+498.024213327
I0401 16:35:53.373171       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:53.373157231 +0000 UTC m=+498.066561478
I0401 16:35:53.396961       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:53.397333       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:53.397324507 +0000 UTC m=+498.090728744
I0401 16:35:53.403967       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-01 16:35:53.403952062 +0000 UTC m=+498.097356299
I0401 16:35:53.404353       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:53.416322       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:53.418077       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:53.418068063 +0000 UTC m=+498.111472300
I0401 16:35:53.421498       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:53.427686       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-01 16:35:53.427666947 +0000 UTC m=+498.121071204
I0401 16:35:53.428140       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:53.428219       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-01 16:35:53.428178529 +0000 UTC m=+498.121582766
I0401 16:35:53.475276       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:53.475356       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:53.475373       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-01 16:35:53.475368854 +0000 UTC m=+498.168773081
I0401 16:35:53.722262       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-556d4" condition "Approved" to 2026-04-01 16:35:53.722244075 +0000 UTC m=+498.415648312
I0401 16:35:53.760529       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-556d4" condition "Ready" to 2026-04-01 16:35:53.760516121 +0000 UTC m=+498.453920338
I0401 16:35:53.905872       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-01 16:35:53.905858725 +0000 UTC m=+498.599262952
I0401 16:35:53.928056       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-01 16:35:53.928042144 +0000 UTC m=+498.621446381
I0401 16:35:53.928151       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:35:53.928204       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-01 16:35:53.928194138 +0000 UTC m=+498.621598375
I0401 16:35:53.981093       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:53.981073046 +0000 UTC m=+498.674477333
I0401 16:35:54.136102       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:54.136192       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-01 16:35:54.136182638 +0000 UTC m=+498.829586885
I0401 16:35:54.257417       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:54.257742       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:54.257736484 +0000 UTC m=+498.951140711
I0401 16:35:54.754720       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:54.755864       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:54.855192       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-zj9p8" condition "Approved" to 2026-04-01 16:35:54.855178044 +0000 UTC m=+499.548582281
I0401 16:35:54.947778       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-zj9p8" condition "Ready" to 2026-04-01 16:35:54.947764822 +0000 UTC m=+499.641169059
I0401 16:35:55.379302       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:55.379273296 +0000 UTC m=+500.072677543
I0401 16:35:55.531160       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:55.531560       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:35:55.531550421 +0000 UTC m=+500.224954658
I0401 16:35:55.727970       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:35:55.838546       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:39:09.505100       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-01 16:39:09.505033504 +0000 UTC m=+694.198437821
I0401 16:39:09.505486       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:39:09.505536       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-01 16:39:09.505526576 +0000 UTC m=+694.198930843
I0401 16:39:09.531794       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:39:09.531898       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:39:09.531933       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-01 16:39:09.531923424 +0000 UTC m=+694.225327671
I0401 16:39:09.851305       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-mxjvj" condition "Approved" to 2026-04-01 16:39:09.851291601 +0000 UTC m=+694.544695848
I0401 16:39:09.873916       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-mxjvj" condition "Ready" to 2026-04-01 16:39:09.8739017 +0000 UTC m=+694.567305937
I0401 16:39:09.911271       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:39:09.911258795 +0000 UTC m=+694.604663052
I0401 16:39:09.938162       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:39:12.104493       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-01 16:39:12.10447751 +0000 UTC m=+696.797881737
I0401 16:39:12.104523       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:39:12.104730       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-01 16:39:12.104713496 +0000 UTC m=+696.798117733
I0401 16:39:12.123278       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:39:12.123389       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:39:12.123417       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-01 16:39:12.123410864 +0000 UTC m=+696.816815091
I0401 16:39:12.316241       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-p4gvk" condition "Approved" to 2026-04-01 16:39:12.316225608 +0000 UTC m=+697.009629835
I0401 16:39:12.336296       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-p4gvk" condition "Ready" to 2026-04-01 16:39:12.336286848 +0000 UTC m=+697.029691065
I0401 16:39:12.363484       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:39:12.363470365 +0000 UTC m=+697.056874582
I0401 16:39:12.392227       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:39:12.392562       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:39:12.392555426 +0000 UTC m=+697.085959663
I0401 16:39:12.414603       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:39:12.415054       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:39:12.415044392 +0000 UTC m=+697.108448649
I0401 16:44:43.729783       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:44:43.729877       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-01 16:44:43.729865951 +0000 UTC m=+1028.423270208
I0401 16:44:43.729916       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-01 16:44:43.729888621 +0000 UTC m=+1028.423292888
I0401 16:44:43.746767       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:44:43.746885       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:44:43.746909       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-01 16:44:43.74690271 +0000 UTC m=+1028.440306937
I0401 16:44:44.118372       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-c457s" condition "Approved" to 2026-04-01 16:44:44.118361306 +0000 UTC m=+1028.811765543
I0401 16:44:44.146993       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-c457s" condition "Ready" to 2026-04-01 16:44:44.146982556 +0000 UTC m=+1028.840386793
I0401 16:44:44.179971       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:44:44.179955378 +0000 UTC m=+1028.873359615
I0401 16:44:44.211209       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:44:44.211609       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:44:44.211601719 +0000 UTC m=+1028.905005956
I0401 16:44:44.229983       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:44:44.230470       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:44:44.23046091 +0000 UTC m=+1028.923865147
I0401 16:45:20.673980       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-01 16:45:20.673961741 +0000 UTC m=+1065.367365988
I0401 16:45:20.674012       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0401 16:45:20.674183       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-01 16:45:20.674175336 +0000 UTC m=+1065.367579563
I0401 16:45:20.691880       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:45:20.691991       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-01 16:45:20.691980953 +0000 UTC m=+1065.385385190
I0401 16:45:21.039611       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:45:21.066245       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qcclg" condition "Approved" to 2026-04-01 16:45:21.066231355 +0000 UTC m=+1065.759635592
I0401 16:45:21.085609       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-qcclg" condition "Ready" to 2026-04-01 16:45:21.085597688 +0000 UTC m=+1065.779001925
I0401 16:45:21.118853       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:45:21.118835336 +0000 UTC m=+1065.812239593
I0401 16:45:21.138788       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0401 16:45:21.140921       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 16:45:21.140890812 +0000 UTC m=+1065.834295029
I0401 16:45:21.162795       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"