I0402 16:49:06.442251 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0402 16:49:06.442401 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0402 16:49:06.442498 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 16:49:06.448644 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0402 16:49:06.449069 1 controller.go:156] "cert-manager/controller: starting leader election" I0402 16:49:06.449175 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0402 16:49:06.449199 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0402 16:49:06.451620 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 16:49:06.465158 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0402 16:49:06.473723 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0402 16:49:06.475500 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0402 16:49:06.477449 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0402 16:49:06.477600 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0402 16:49:06.483236 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0402 16:49:06.486076 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0402 16:49:06.488592 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0402 16:49:06.491048 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0402 16:49:06.491092 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0402 16:49:06.491108 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0402 16:49:06.493595 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0402 16:49:06.496182 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0402 16:49:06.498201 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0402 16:49:06.501780 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0402 16:49:06.508103 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0402 16:49:06.511875 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0402 16:49:06.514401 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0402 16:49:06.516270 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0402 16:49:06.518065 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0402 16:49:06.519800 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0402 16:49:06.521513 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0402 16:49:06.521548 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0402 16:49:06.521556 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0402 16:49:06.522220 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0402 16:49:19.780598 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 16:49:19.780578452 +0000 UTC m=+13.369706895 I0402 16:49:20.541700 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:49:20.541768 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 16:49:20.54175552 +0000 UTC m=+14.130883993 I0402 16:49:20.541794 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 16:49:20.541776611 +0000 UTC m=+14.130905074 E0402 16:49:20.557518 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:49:20.557566 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 16:49:20.557560687 +0000 UTC m=+14.146689120 E0402 16:49:20.557582 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:49:20.559288 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:20.559424 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 16:49:20.559408826 +0000 UTC m=+14.148537279 E0402 16:49:20.569093 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0402 16:49:20.569187 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:49:20.569224 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:49:20.569371 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0402 16:49:20.579609 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:20.597628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ncld5" condition "Approved" to 2026-04-02 16:49:20.597612229 +0000 UTC m=+14.186740662 I0402 16:49:20.612792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ncld5" condition "Ready" to 2026-04-02 16:49:20.612778605 +0000 UTC m=+14.201907048 I0402 16:49:20.637499 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:20.637476496 +0000 UTC m=+14.226604959 I0402 16:49:20.656430 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:25.570549 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:25.570517866 +0000 UTC m=+19.159646339 I0402 16:49:46.812079 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:49:46.812117 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 16:49:46.812092439 +0000 UTC m=+40.401220882 I0402 16:49:46.812155 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 16:49:46.812147591 +0000 UTC m=+40.401276024 I0402 16:49:46.824051 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 16:49:46.82398121 +0000 UTC m=+40.413109673 I0402 16:49:46.840339 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:46.840443 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:49:46.840477 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 16:49:46.840470078 +0000 UTC m=+40.429598521 I0402 16:49:47.091228 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:47.096823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jfddt" condition "Approved" to 2026-04-02 16:49:47.096814618 +0000 UTC m=+40.685943061 I0402 16:49:47.128331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jfddt" condition "Ready" to 2026-04-02 16:49:47.128315717 +0000 UTC m=+40.717444160 I0402 16:49:47.157003 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:47.156986605 +0000 UTC m=+40.746115048 I0402 16:49:47.182073 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:47.182466 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:47.182461111 +0000 UTC m=+40.771589544 I0402 16:49:47.202883 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:27.514476 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-19-213-14.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:52:27.514526 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-14.nip.io-tls" condition "Issuing" to 2026-04-02 16:52:27.514512835 +0000 UTC m=+201.103641298 I0402 16:52:27.514621 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-14.nip.io-tls" condition "Ready" to 2026-04-02 16:52:27.514608388 +0000 UTC m=+201.103736831 I0402 16:52:27.541123 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-14.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-14.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:27.541192 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-14.nip.io-tls" condition "Ready" to 2026-04-02 16:52:27.541184485 +0000 UTC m=+201.130312918 I0402 16:52:27.813807 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-14.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-14.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:27.843429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-14.nip.io-tls-g9pbf" condition "Approved" to 2026-04-02 16:52:27.843414731 +0000 UTC m=+201.432543164 I0402 16:52:27.869766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-14.nip.io-tls-g9pbf" condition "Ready" to 2026-04-02 16:52:27.869752661 +0000 UTC m=+201.458881124 I0402 16:52:27.897322 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-14.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:52:27.89730429 +0000 UTC m=+201.486432733 I0402 16:52:27.920668 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-14.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-14.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:27.921232 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-14.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:52:27.921221852 +0000 UTC m=+201.510350295 I0402 16:52:27.930485 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-14.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-14.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:27.944342 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-14.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-14.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:52:27.945221 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-14.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:52:27.945208267 +0000 UTC m=+201.534336730 I0402 16:52:27.946542 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-19-213-14.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-14.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:28.841917 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 16:53:28.841895182 +0000 UTC m=+262.431023625 I0402 16:53:28.841986 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:53:28.842031 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 16:53:28.842019366 +0000 UTC m=+262.431147809 E0402 16:53:28.852440 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:53:28.852512 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 16:53:28.85249868 +0000 UTC m=+262.441627143 E0402 16:53:28.852603 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:53:28.853883 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:28.853954 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:53:28.853977 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 16:53:28.853969077 +0000 UTC m=+262.443097520 E0402 16:53:28.864865 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0402 16:53:28.866023 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:53:28.866115 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:53:28.866235 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0402 16:53:28.883408 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:28.888311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4cqlt" condition "Approved" to 2026-04-02 16:53:28.888289701 +0000 UTC m=+262.477418174 I0402 16:53:28.898064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4cqlt" condition "Ready" to 2026-04-02 16:53:28.898056613 +0000 UTC m=+262.487185046 I0402 16:53:28.915340 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:53:28.915331054 +0000 UTC m=+262.504459497 I0402 16:53:28.934310 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:28.971387 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:53:33.865376 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:53:33.865360734 +0000 UTC m=+267.454489177 I0402 16:54:12.416360 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:12.416403 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 16:54:12.416392709 +0000 UTC m=+306.005521152 I0402 16:54:12.416791 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 16:54:12.416782621 +0000 UTC m=+306.005911084 I0402 16:54:12.423859 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 16:54:12.423844616 +0000 UTC m=+306.012973059 I0402 16:54:12.424198 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:12.424220 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 16:54:12.424216998 +0000 UTC m=+306.013345441 I0402 16:54:12.424478 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:12.424498 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 16:54:12.424494497 +0000 UTC m=+306.013622940 I0402 16:54:12.424773 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 16:54:12.424768806 +0000 UTC m=+306.013897249 I0402 16:54:12.445659 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:12.445811 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:12.445892 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 16:54:12.445884219 +0000 UTC m=+306.035012662 I0402 16:54:12.453427 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:12.453767 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:12.454570 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:12.454574 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 16:54:12.454565176 +0000 UTC m=+306.043693619 I0402 16:54:12.454623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 16:54:12.454615398 +0000 UTC m=+306.043743851 I0402 16:54:12.632347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cklxg" condition "Approved" to 2026-04-02 16:54:12.632313895 +0000 UTC m=+306.221442368 I0402 16:54:12.657573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cklxg" condition "Ready" to 2026-04-02 16:54:12.65756032 +0000 UTC m=+306.246688753 I0402 16:54:12.686859 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:12.686842034 +0000 UTC m=+306.275970497 I0402 16:54:12.717260 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:12.717768 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:12.71776096 +0000 UTC m=+306.306889403 I0402 16:54:12.741170 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:12.742706 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0402 16:54:12.745159 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"grafana-tls-jvgbq\" not found" key="monitoring/grafana-tls" I0402 16:54:12.990011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tvjkk" condition "Approved" to 2026-04-02 16:54:12.989966211 +0000 UTC m=+306.579094674 I0402 16:54:13.009577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tvjkk" condition "Ready" to 2026-04-02 16:54:13.009479473 +0000 UTC m=+306.598607936 I0402 16:54:13.067622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nmz2d" condition "Approved" to 2026-04-02 16:54:13.067603426 +0000 UTC m=+306.656731859 I0402 16:54:13.161499 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:13.16148134 +0000 UTC m=+306.750609813 I0402 16:54:13.299239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nmz2d" condition "Ready" to 2026-04-02 16:54:13.299228193 +0000 UTC m=+306.888356636 E0402 16:54:13.555340 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"alertmanager-tls-n4fdf\" not found" key="monitoring/alertmanager-tls" I0402 16:54:13.684905 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:13.685742 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:13.685733059 +0000 UTC m=+307.274861522 I0402 16:54:14.060271 1 issuing_controller.go:324] "cert-manager/certificates-issuing: next private key does not match CSR public key, waiting for requestmanager controller" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-nmz2d" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-87989" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0402 16:54:14.113083 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:14.160301 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0402 16:54:14.442928 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"alertmanager-tls-87989\" already exists" key="monitoring/alertmanager-tls" I0402 16:54:14.460369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f998r" condition "Approved" to 2026-04-02 16:54:14.460341791 +0000 UTC m=+308.049470254 I0402 16:54:14.880486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f998r" condition "Ready" to 2026-04-02 16:54:14.880464999 +0000 UTC m=+308.469593462 I0402 16:54:14.965703 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:14.965683387 +0000 UTC m=+308.554811860 I0402 16:54:15.062375 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:15.063354 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:15.063340041 +0000 UTC m=+308.652468514 I0402 16:54:15.312982 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:15.363987 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:21.874331 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:21.874370 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" condition "Issuing" to 2026-04-02 16:54:21.874355118 +0000 UTC m=+315.463483541 I0402 16:54:21.874484 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" condition "Ready" to 2026-04-02 16:54:21.874463252 +0000 UTC m=+315.463591715 I0402 16:54:21.892927 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:21.893045 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" condition "Ready" to 2026-04-02 16:54:21.893034204 +0000 UTC m=+315.482162657 I0402 16:54:22.163069 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:22.195893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8qkk9-wwhbt" condition "Approved" to 2026-04-02 16:54:22.195877852 +0000 UTC m=+315.785006315 I0402 16:54:22.211540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8qkk9-wwhbt" condition "Ready" to 2026-04-02 16:54:22.211524361 +0000 UTC m=+315.800652814 I0402 16:54:22.275148 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:22.275127989 +0000 UTC m=+315.864256422 I0402 16:54:22.282406 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:22.282863 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:22.282856246 +0000 UTC m=+315.871984679 I0402 16:54:22.311685 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8qkk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:51.432431 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 16:54:51.432401773 +0000 UTC m=+345.021530236 I0402 16:54:51.433012 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:51.433044 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 16:54:51.433037143 +0000 UTC m=+345.022165577 I0402 16:54:51.447959 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:51.448219 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 16:54:51.448206456 +0000 UTC m=+345.037334899 I0402 16:54:51.790577 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:51.827761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rgr76" condition "Approved" to 2026-04-02 16:54:51.827740144 +0000 UTC m=+345.416868587 I0402 16:54:51.845189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rgr76" condition "Ready" to 2026-04-02 16:54:51.845173249 +0000 UTC m=+345.434301692 I0402 16:54:51.873948 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:51.873932285 +0000 UTC m=+345.463060748 I0402 16:54:51.897796 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:51.898403 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:51.898396084 +0000 UTC m=+345.487524527 I0402 16:54:51.906967 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:51.915510 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:51.916861 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:51.917271 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:51.917261215 +0000 UTC m=+345.506389658 I0402 16:58:13.611742 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:58:13.611828 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 16:58:13.611818597 +0000 UTC m=+547.200947060 I0402 16:58:13.612640 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 16:58:13.612621512 +0000 UTC m=+547.201749975 I0402 16:58:13.630260 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:13.630347 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 16:58:13.630338634 +0000 UTC m=+547.219467107 I0402 16:58:13.782421 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:13.812599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-swlsn" condition "Approved" to 2026-04-02 16:58:13.812577851 +0000 UTC m=+547.401706314 I0402 16:58:13.832400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-swlsn" condition "Ready" to 2026-04-02 16:58:13.8323863 +0000 UTC m=+547.421514733 I0402 16:58:13.862419 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:58:13.862403841 +0000 UTC m=+547.451532314 I0402 16:58:13.884241 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:13.884885 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:58:13.884877634 +0000 UTC m=+547.474006077 I0402 16:58:13.903055 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:58:13.903319 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:36.651366 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:36.651376 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 17:00:36.651354015 +0000 UTC m=+690.240482498 I0402 17:00:36.651455 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 17:00:36.651444658 +0000 UTC m=+690.240573121 I0402 17:00:36.669068 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:36.669200 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 17:00:36.66918856 +0000 UTC m=+690.258317023 I0402 17:00:36.781792 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:36.812259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mr24s" condition "Approved" to 2026-04-02 17:00:36.812235566 +0000 UTC m=+690.401364029 I0402 17:00:36.830588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mr24s" condition "Ready" to 2026-04-02 17:00:36.830575608 +0000 UTC m=+690.419704051 I0402 17:00:36.852908 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:36.852894406 +0000 UTC m=+690.442022849 I0402 17:00:36.875809 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:01:44.145562 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:01:44.145612 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 17:01:44.145606466 +0000 UTC m=+757.734734899 I0402 17:01:44.146270 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 17:01:44.146240606 +0000 UTC m=+757.735369089 I0402 17:01:44.161087 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:01:44.161153 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 17:01:44.161145239 +0000 UTC m=+757.750273702 I0402 17:01:44.265529 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:01:44.298737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4xvhk" condition "Approved" to 2026-04-02 17:01:44.298716131 +0000 UTC m=+757.887844594 I0402 17:01:44.315936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4xvhk" condition "Ready" to 2026-04-02 17:01:44.315919637 +0000 UTC m=+757.905048090 I0402 17:01:44.345128 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:01:44.345088192 +0000 UTC m=+757.934216625 I0402 17:01:44.369367 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:01:44.370248 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:01:44.37023432 +0000 UTC m=+757.959362793 I0402 17:01:44.388667 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:04:44.983481 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 17:04:44.98344431 +0000 UTC m=+938.572572783 I0402 17:04:44.983582 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:04:44.983673 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 17:04:44.983662127 +0000 UTC m=+938.572790590 I0402 17:04:45.003279 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:04:45.003419 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:04:45.003463 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 17:04:45.003452143 +0000 UTC m=+938.592580606 I0402 17:04:45.156843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bq2g4" condition "Approved" to 2026-04-02 17:04:45.156814808 +0000 UTC m=+938.745943281 I0402 17:04:45.179447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bq2g4" condition "Ready" to 2026-04-02 17:04:45.179422584 +0000 UTC m=+938.768551057 I0402 17:04:45.219728 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:04:45.219711529 +0000 UTC m=+938.808839972 I0402 17:04:45.247894 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:10:51.991182 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-02 17:10:51.991156389 +0000 UTC m=+1305.580284862 I0402 17:10:51.991323 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:10:51.991423 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-02 17:10:51.991410987 +0000 UTC m=+1305.580539450 I0402 17:10:52.008228 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:10:52.008334 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:10:52.008365 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-02 17:10:52.008357204 +0000 UTC m=+1305.597485657 I0402 17:10:52.140517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-4ql67" condition "Approved" to 2026-04-02 17:10:52.140501589 +0000 UTC m=+1305.729630052 I0402 17:10:52.165329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-4ql67" condition "Ready" to 2026-04-02 17:10:52.165304865 +0000 UTC m=+1305.754433338 I0402 17:10:52.194311 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:10:52.194294473 +0000 UTC m=+1305.783422906 I0402 17:10:52.220483 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:10:52.221032 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:10:52.221022599 +0000 UTC m=+1305.810151032 I0402 17:10:52.239506 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:10:52.240717 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:10:52.240702563 +0000 UTC m=+1305.829831036 I0402 17:12:15.905322 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:12:15.905415 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-02 17:12:15.905404305 +0000 UTC m=+1389.494532748 I0402 17:12:15.905536 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-02 17:12:15.905518239 +0000 UTC m=+1389.494646682 I0402 17:12:15.919337 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:12:15.919406 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:12:15.919423 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-02 17:12:15.919417299 +0000 UTC m=+1389.508545742 I0402 17:12:16.187272 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:12:16.196207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-b5n4v" condition "Approved" to 2026-04-02 17:12:16.196190695 +0000 UTC m=+1389.785319128 I0402 17:12:16.214927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-b5n4v" condition "Ready" to 2026-04-02 17:12:16.214915008 +0000 UTC m=+1389.804043461 I0402 17:12:16.256989 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:12:16.2569664 +0000 UTC m=+1389.846094863 I0402 17:12:16.273990 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:21.094329 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:13:21.094389 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-02 17:13:21.094375231 +0000 UTC m=+1454.683503704 I0402 17:13:21.094536 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-02 17:13:21.094501545 +0000 UTC m=+1454.683630018 I0402 17:13:21.112447 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:21.112521 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-02 17:13:21.112512955 +0000 UTC m=+1454.701641398 I0402 17:13:21.131639 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:21.131724 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-02 17:13:21.131716094 +0000 UTC m=+1454.720844517 I0402 17:13:21.140199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-z8drh" condition "Approved" to 2026-04-02 17:13:21.140181372 +0000 UTC m=+1454.729309825 I0402 17:13:21.146564 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-02 17:13:21.146549123 +0000 UTC m=+1454.735677566 I0402 17:13:21.154276 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:21.159603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-z8drh" condition "Ready" to 2026-04-02 17:13:21.159583226 +0000 UTC m=+1454.748711679 I0402 17:13:21.208985 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:13:21.20897316 +0000 UTC m=+1454.798101593 I0402 17:13:21.259121 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:21.259406 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:13:21.259399837 +0000 UTC m=+1454.848528270 I0402 17:13:21.273089 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:21.273329 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:13:21.273321208 +0000 UTC m=+1454.862449651 I0402 17:13:21.742602 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-02 17:13:21.74258654 +0000 UTC m=+1455.331714963 I0402 17:13:21.743050 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:13:21.743066 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-02 17:13:21.743062425 +0000 UTC m=+1455.332190858 I0402 17:13:21.757970 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:21.758084 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-02 17:13:21.758075761 +0000 UTC m=+1455.347204194 I0402 17:13:21.777147 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:21.808483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-sdxm4" condition "Approved" to 2026-04-02 17:13:21.808464987 +0000 UTC m=+1455.397593440 I0402 17:13:21.824009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-sdxm4" condition "Ready" to 2026-04-02 17:13:21.823997889 +0000 UTC m=+1455.413126322 I0402 17:13:21.849223 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:13:21.849201277 +0000 UTC m=+1455.438329750 I0402 17:13:21.873378 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:13:22.458067 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-02 17:13:22.45804948 +0000 UTC m=+1456.047177923 I0402 17:13:23.100146 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-02 17:13:23.100125755 +0000 UTC m=+1456.689254218 I0402 17:14:09.419526 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:14:09.419554 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-02 17:14:09.419548043 +0000 UTC m=+1503.008676476 I0402 17:14:09.419692 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-02 17:14:09.419686588 +0000 UTC m=+1503.008815021 I0402 17:14:09.449637 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:14:09.449724 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-02 17:14:09.449716038 +0000 UTC m=+1503.038844481 I0402 17:14:10.912381 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:14:10.955881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-q2cfs" condition "Approved" to 2026-04-02 17:14:10.955860513 +0000 UTC m=+1504.544988956 I0402 17:14:10.979485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-q2cfs" condition "Ready" to 2026-04-02 17:14:10.9794597 +0000 UTC m=+1504.568588173 I0402 17:14:11.012797 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:14:11.012779004 +0000 UTC m=+1504.601907437 I0402 17:14:11.034261 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:14:11.035568 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:14:11.035561255 +0000 UTC m=+1504.624689698 I0402 17:14:11.043874 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:14:11.054456 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:38.585909 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:16:38.585961 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-02 17:16:38.585940168 +0000 UTC m=+1652.175068641 I0402 17:16:38.586000 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-02 17:16:38.585990129 +0000 UTC m=+1652.175118602 I0402 17:16:38.603506 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:38.603594 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-02 17:16:38.603584336 +0000 UTC m=+1652.192712789 I0402 17:16:38.911149 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:38.956889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-j25vp" condition "Approved" to 2026-04-02 17:16:38.956871662 +0000 UTC m=+1652.546000105 I0402 17:16:38.976814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-j25vp" condition "Ready" to 2026-04-02 17:16:38.976798692 +0000 UTC m=+1652.565927135 I0402 17:16:39.005651 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:16:39.005627664 +0000 UTC m=+1652.594756117 I0402 17:16:39.031882 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:39.032535 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:16:39.032527085 +0000 UTC m=+1652.621655528 I0402 17:16:39.060190 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:39.060691 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:16:39.060682076 +0000 UTC m=+1652.649810519 I0402 17:16:40.034164 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:16:40.034206 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-02 17:16:40.034195133 +0000 UTC m=+1653.623323576 I0402 17:16:40.034283 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-02 17:16:40.034273855 +0000 UTC m=+1653.623402298 I0402 17:16:40.049850 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:40.049961 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:16:40.049993 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-02 17:16:40.049983023 +0000 UTC m=+1653.639111466 I0402 17:16:40.323844 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:40.329890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-cvcdw" condition "Approved" to 2026-04-02 17:16:40.329871446 +0000 UTC m=+1653.918999909 I0402 17:16:40.379673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-cvcdw" condition "Ready" to 2026-04-02 17:16:40.379658861 +0000 UTC m=+1653.968787294 I0402 17:16:40.417769 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:16:40.417754036 +0000 UTC m=+1654.006882479 I0402 17:16:40.442312 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:16:40.492378 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:39.146817 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:19:39.146857 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-02 17:19:39.146847034 +0000 UTC m=+1832.735975477 I0402 17:19:39.146901 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-02 17:19:39.146881765 +0000 UTC m=+1832.736010198 I0402 17:19:39.164744 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:39.164977 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-02 17:19:39.164965647 +0000 UTC m=+1832.754094120 I0402 17:19:39.291555 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:39.320473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9s2qs" condition "Approved" to 2026-04-02 17:19:39.320458705 +0000 UTC m=+1832.909587148 I0402 17:19:39.337283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9s2qs" condition "Ready" to 2026-04-02 17:19:39.337271077 +0000 UTC m=+1832.926399520 I0402 17:19:39.366361 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:19:39.366334466 +0000 UTC m=+1832.955462899 I0402 17:19:39.394494 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:19:39.395028 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:19:39.395021453 +0000 UTC m=+1832.984149906 I0402 17:19:39.413057 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:52.487023 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-q45jd-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:20:52.487088 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-q45jd-api" condition "Issuing" to 2026-04-02 17:20:52.487082618 +0000 UTC m=+1906.076211051 I0402 17:20:52.487007 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-q45jd-api" condition "Ready" to 2026-04-02 17:20:52.486990155 +0000 UTC m=+1906.076118608 I0402 17:20:52.488149 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-q45jd-vnc" condition "Ready" to 2026-04-02 17:20:52.488129121 +0000 UTC m=+1906.077257574 I0402 17:20:52.488208 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-q45jd-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:20:52.488250 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-q45jd-vnc" condition "Issuing" to 2026-04-02 17:20:52.488241115 +0000 UTC m=+1906.077369558 I0402 17:20:52.502780 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-q45jd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-q45jd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:52.502929 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-q45jd-vnc" condition "Ready" to 2026-04-02 17:20:52.502921019 +0000 UTC m=+1906.092049462 I0402 17:20:52.511818 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-q45jd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-q45jd-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:52.511913 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-q45jd-api" condition "Ready" to 2026-04-02 17:20:52.511905993 +0000 UTC m=+1906.101034426 I0402 17:20:52.701249 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-q45jd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-q45jd-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:52.731810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-q45jd-api-txj7n" condition "Approved" to 2026-04-02 17:20:52.731783438 +0000 UTC m=+1906.320911911 I0402 17:20:52.748421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-q45jd-api-txj7n" condition "Ready" to 2026-04-02 17:20:52.748392403 +0000 UTC m=+1906.337520836 I0402 17:20:52.777648 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-q45jd-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:20:52.777636008 +0000 UTC m=+1906.366764441 I0402 17:20:52.805660 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-q45jd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-q45jd-api\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:52.917762 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-q45jd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-q45jd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:52.972905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-q45jd-vnc-t4hxh" condition "Approved" to 2026-04-02 17:20:52.972890033 +0000 UTC m=+1906.562018476 I0402 17:20:52.998887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-q45jd-vnc-t4hxh" condition "Ready" to 2026-04-02 17:20:52.998877375 +0000 UTC m=+1906.588005808 I0402 17:20:53.025739 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-q45jd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:20:53.025726424 +0000 UTC m=+1906.614854867 I0402 17:20:53.044699 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-q45jd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-q45jd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:53.045328 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-q45jd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:20:53.045320114 +0000 UTC m=+1906.634448557 I0402 17:20:53.056987 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-q45jd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-q45jd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:20:53.063985 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-q45jd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-q45jd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:22:14.619607 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-02 17:22:14.619593055 +0000 UTC m=+1988.208721498 I0402 17:22:14.619856 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:22:14.619877 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-02 17:22:14.619873054 +0000 UTC m=+1988.209001497 I0402 17:22:14.633088 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:22:14.633165 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-02 17:22:14.633158584 +0000 UTC m=+1988.222287027 I0402 17:22:14.758293 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:22:14.796824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-rvjfp" condition "Approved" to 2026-04-02 17:22:14.7968082 +0000 UTC m=+1988.385936673 I0402 17:22:14.815485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-rvjfp" condition "Ready" to 2026-04-02 17:22:14.81547214 +0000 UTC m=+1988.404600593 I0402 17:22:14.839933 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:22:14.839923293 +0000 UTC m=+1988.429051726 I0402 17:22:14.861461 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:22:14.861931 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:22:14.861924689 +0000 UTC m=+1988.451053132 I0402 17:22:14.883547 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:42.001549 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:25:42.001604 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-02 17:25:42.00159817 +0000 UTC m=+2195.590726633 I0402 17:25:42.001956 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-02 17:25:42.001939541 +0000 UTC m=+2195.591068004 I0402 17:25:42.024197 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:42.024309 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:25:42.024380 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-02 17:25:42.024328959 +0000 UTC m=+2195.613457432 I0402 17:25:42.267827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-lzgch" condition "Approved" to 2026-04-02 17:25:42.267814141 +0000 UTC m=+2195.856942574 I0402 17:25:42.290087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-lzgch" condition "Ready" to 2026-04-02 17:25:42.290072565 +0000 UTC m=+2195.879201018 I0402 17:25:42.320196 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:25:42.320180347 +0000 UTC m=+2195.909308820 I0402 17:25:42.340146 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:42.340865 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:25:42.340857001 +0000 UTC m=+2195.929985444 I0402 17:25:42.360390 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:43.461140 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-02 17:25:43.461124368 +0000 UTC m=+2197.050252801 I0402 17:25:43.461366 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:25:43.461416 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-02 17:25:43.461405107 +0000 UTC m=+2197.050533580 I0402 17:25:43.475695 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:43.475833 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:25:43.475861 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-02 17:25:43.475852984 +0000 UTC m=+2197.064981457 I0402 17:25:43.745889 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:25:43.757068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-mwtxg" condition "Approved" to 2026-04-02 17:25:43.757044298 +0000 UTC m=+2197.346172771 I0402 17:25:43.774742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-mwtxg" condition "Ready" to 2026-04-02 17:25:43.774732068 +0000 UTC m=+2197.363860511 I0402 17:25:43.809887 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:25:43.809870719 +0000 UTC m=+2197.398999192 I0402 17:25:43.828573 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:52.802343 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:52.802395 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-02 17:28:52.802383509 +0000 UTC m=+2386.391511972 I0402 17:28:52.802552 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-02 17:28:52.802531674 +0000 UTC m=+2386.391660127 E0402 17:28:52.816777 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:28:52.816813 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-02 17:28:52.816805425 +0000 UTC m=+2386.405933868 I0402 17:28:52.816849 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:28:52.819259 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:52.819320 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:52.819336 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-02 17:28:52.819330675 +0000 UTC m=+2386.408459118 E0402 17:28:52.828055 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client" E0402 17:28:52.828435 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:28:52.828541 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 17:28:52.828702 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client" I0402 17:28:52.859810 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:52.864512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-mdkjh" condition "Approved" to 2026-04-02 17:28:52.864491953 +0000 UTC m=+2386.453620396 I0402 17:28:52.881466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-mdkjh" condition "Ready" to 2026-04-02 17:28:52.88145684 +0000 UTC m=+2386.470585283 I0402 17:28:52.913461 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:52.913444162 +0000 UTC m=+2386.502572615 I0402 17:28:52.935943 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:52.936205 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:52.936198552 +0000 UTC m=+2386.525326995 I0402 17:28:52.942271 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:52.954925 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:53.460089 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:53.460121 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-02 17:28:53.460113764 +0000 UTC m=+2387.049242207 I0402 17:28:53.460129 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-02 17:28:53.460112284 +0000 UTC m=+2387.049240717 E0402 17:28:53.471679 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:28:53.471718 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-02 17:28:53.471709031 +0000 UTC m=+2387.060837474 I0402 17:28:53.471767 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:28:53.472826 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:53.473006 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-02 17:28:53.472885748 +0000 UTC m=+2387.062097344 E0402 17:28:53.481681 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server" E0402 17:28:53.482767 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 17:28:53.482825 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 17:28:53.482942 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server" I0402 17:28:53.488696 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:53.514367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-dh5kz" condition "Approved" to 2026-04-02 17:28:53.514338489 +0000 UTC m=+2387.103466942 I0402 17:28:53.559726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-dh5kz" condition "Ready" to 2026-04-02 17:28:53.559703504 +0000 UTC m=+2387.148831937 I0402 17:28:53.598616 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:53.598588654 +0000 UTC m=+2387.187717097 I0402 17:28:53.618094 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:53.618332 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:53.618323538 +0000 UTC m=+2387.207451991 I0402 17:28:53.638475 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:53.639085 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:53.639074885 +0000 UTC m=+2387.228203328 I0402 17:28:53.645126 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:54.191038 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-02 17:28:54.191018183 +0000 UTC m=+2387.780146656 I0402 17:28:54.191413 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:54.191473 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-02 17:28:54.191456707 +0000 UTC m=+2387.780585190 I0402 17:28:54.210856 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:54.210959 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:28:54.210986 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-02 17:28:54.210979654 +0000 UTC m=+2387.800108117 I0402 17:28:54.254766 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:54.258747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-msfpx" condition "Approved" to 2026-04-02 17:28:54.258734355 +0000 UTC m=+2387.847862788 I0402 17:28:54.273771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-msfpx" condition "Ready" to 2026-04-02 17:28:54.27375678 +0000 UTC m=+2387.862885213 I0402 17:28:57.828857 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:57.828847883 +0000 UTC m=+2391.417976316 I0402 17:28:57.839337 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-msfpx" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:57.839292404 +0000 UTC m=+2391.428420877 I0402 17:28:57.867425 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:57.867410573 +0000 UTC m=+2391.456539016 I0402 17:28:57.884804 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:57.885092 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:57.885084512 +0000 UTC m=+2391.474212955 I0402 17:28:57.912134 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:28:58.482100 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:28:58.482021694 +0000 UTC m=+2392.071150157 I0402 17:31:05.473423 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-02 17:31:05.47339725 +0000 UTC m=+2519.062525683 I0402 17:31:05.473942 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:05.473985 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-02 17:31:05.473977528 +0000 UTC m=+2519.063105961 I0402 17:31:05.490378 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:05.490499 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-02 17:31:05.490491191 +0000 UTC m=+2519.079619624 I0402 17:31:05.999724 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:06.031640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-qzc6z" condition "Approved" to 2026-04-02 17:31:06.031622268 +0000 UTC m=+2519.620750711 I0402 17:31:06.051324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-qzc6z" condition "Ready" to 2026-04-02 17:31:06.05130988 +0000 UTC m=+2519.640438313 I0402 17:31:06.112138 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:06.112116374 +0000 UTC m=+2519.701244837 I0402 17:31:06.131984 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:06.134286 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:06.134276455 +0000 UTC m=+2519.723404918 I0402 17:31:06.155016 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:06.158564 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:06.159089 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:06.1590812 +0000 UTC m=+2519.748209643 I0402 17:31:51.623548 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-02 17:31:51.623529868 +0000 UTC m=+2565.212658311 I0402 17:31:51.644798 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-02 17:31:51.64478441 +0000 UTC m=+2565.233912883 I0402 17:31:51.645388 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:51.645482 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-02 17:31:51.645472322 +0000 UTC m=+2565.234600785 I0402 17:31:51.660288 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:51.660426 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:51.660759 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-02 17:31:51.660718004 +0000 UTC m=+2565.249846517 E0402 17:31:51.681486 1 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18a29a87ea544125", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"7afd4d47-a3dc-4229-9bd4-f1f6f678bbf7", APIVersion:"cert-manager.io/v1", ResourceVersion:"25628", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.April, 2, 17, 31, 51, 680049445, time.Local), LastTimestamp:time.Date(2026, time.April, 2, 17, 31, 51, 680049445, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18a29a87ea544125" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) E0402 17:31:51.681811 1 controller.go:134] "cert-manager/issuers: issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" I0402 17:31:51.736872 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-02 17:31:51.736854311 +0000 UTC m=+2565.325982744 I0402 17:31:51.755552 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:51.755596 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-02 17:31:51.755582022 +0000 UTC m=+2565.344710485 I0402 17:31:51.755655 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-02 17:31:51.755646545 +0000 UTC m=+2565.344774988 I0402 17:31:51.771702 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:51.771779 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-02 17:31:51.771770044 +0000 UTC m=+2565.360898477 E0402 17:31:51.800433 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" key="cert-manager-test/selfsigned-cert" I0402 17:31:52.019596 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.054724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-j9wsv" condition "Approved" to 2026-04-02 17:31:52.054713938 +0000 UTC m=+2565.643842371 I0402 17:31:52.081847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-j9wsv" condition "Ready" to 2026-04-02 17:31:52.081833886 +0000 UTC m=+2565.670962329 I0402 17:31:52.109706 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:52.109693006 +0000 UTC m=+2565.698821449 I0402 17:31:52.125498 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.455553 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-02 17:31:52.455538859 +0000 UTC m=+2566.044667312 I0402 17:31:52.473373 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-02 17:31:52.473357052 +0000 UTC m=+2566.062485485 I0402 17:31:52.473583 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:52.473625 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-02 17:31:52.4736162 +0000 UTC m=+2566.062744643 I0402 17:31:52.488924 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.488973 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:52.488986 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-02 17:31:52.488981756 +0000 UTC m=+2566.078110189 I0402 17:31:52.833416 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.850819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-r87vx" condition "Approved" to 2026-04-02 17:31:52.850803064 +0000 UTC m=+2566.439931497 I0402 17:31:52.873342 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-02 17:31:52.873327575 +0000 UTC m=+2566.462456008 I0402 17:31:52.883491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-r87vx" condition "Ready" to 2026-04-02 17:31:52.883477615 +0000 UTC m=+2566.472606068 I0402 17:31:52.892548 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:52.892575 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-02 17:31:52.892567563 +0000 UTC m=+2566.481696006 I0402 17:31:52.892938 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-02 17:31:52.892932514 +0000 UTC m=+2566.482060957 I0402 17:31:52.909819 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.909867 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-02 17:31:52.90986099 +0000 UTC m=+2566.498989413 I0402 17:31:52.915566 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:52.915552489 +0000 UTC m=+2566.504680932 I0402 17:31:52.933310 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.933776 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:52.933768885 +0000 UTC m=+2566.522897328 I0402 17:31:52.954509 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.957578 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.957594 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:52.958060 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:52.958051913 +0000 UTC m=+2566.547180356 I0402 17:31:53.118070 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:53.153055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-kq576" condition "Approved" to 2026-04-02 17:31:53.153034297 +0000 UTC m=+2566.742162740 I0402 17:31:53.179855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-kq576" condition "Ready" to 2026-04-02 17:31:53.179844964 +0000 UTC m=+2566.768973397 I0402 17:31:53.309748 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-02 17:31:53.30973198 +0000 UTC m=+2566.898860433 I0402 17:31:53.327208 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-02 17:31:53.327195942 +0000 UTC m=+2566.916324375 I0402 17:31:53.327335 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:53.327345 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-02 17:31:53.327342907 +0000 UTC m=+2566.916471340 I0402 17:31:53.546784 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:53.546850 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:31:53.546866 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-02 17:31:53.546861936 +0000 UTC m=+2567.135990359 I0402 17:31:53.585118 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:53.585106685 +0000 UTC m=+2567.174235118 I0402 17:31:53.740586 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:53.741219 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:53.741213709 +0000 UTC m=+2567.330342142 I0402 17:31:54.184004 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:54.338939 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:54.398068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9k9qj" condition "Approved" to 2026-04-02 17:31:54.398042093 +0000 UTC m=+2567.987170526 I0402 17:31:54.451279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9k9qj" condition "Ready" to 2026-04-02 17:31:54.451260675 +0000 UTC m=+2568.040389118 I0402 17:31:54.959641 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:54.959617755 +0000 UTC m=+2568.548746188 I0402 17:31:55.081626 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:55.082363 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:31:55.082352314 +0000 UTC m=+2568.671480777 I0402 17:31:55.331415 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:31:55.384516 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:15.355262 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:35:15.355349 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-02 17:35:15.355336298 +0000 UTC m=+2768.944464781 I0402 17:35:15.355778 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-02 17:35:15.355760301 +0000 UTC m=+2768.944888764 I0402 17:35:15.370500 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:15.370594 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-02 17:35:15.37058553 +0000 UTC m=+2768.959713993 I0402 17:35:15.687991 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:15.720428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-7zzpl" condition "Approved" to 2026-04-02 17:35:15.720408819 +0000 UTC m=+2769.309537282 I0402 17:35:15.736332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-7zzpl" condition "Ready" to 2026-04-02 17:35:15.736319701 +0000 UTC m=+2769.325448134 I0402 17:35:15.762036 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:35:15.762025704 +0000 UTC m=+2769.351154137 I0402 17:35:15.780521 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:15.780842 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:35:15.780837939 +0000 UTC m=+2769.369966372 I0402 17:35:15.799632 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:15.802280 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:18.264267 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:35:18.264265 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-02 17:35:18.264247851 +0000 UTC m=+2771.853376294 I0402 17:35:18.264302 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-02 17:35:18.264295272 +0000 UTC m=+2771.853423695 I0402 17:35:18.278815 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:18.278953 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-02 17:35:18.278937906 +0000 UTC m=+2771.868066349 I0402 17:35:18.421192 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:18.471866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-sg87x" condition "Approved" to 2026-04-02 17:35:18.471849734 +0000 UTC m=+2772.060978167 I0402 17:35:18.520241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-sg87x" condition "Ready" to 2026-04-02 17:35:18.520232983 +0000 UTC m=+2772.109361416 I0402 17:35:18.549855 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:35:18.549842339 +0000 UTC m=+2772.138970772 I0402 17:35:18.579586 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:35:18.580146 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:35:18.580139147 +0000 UTC m=+2772.169267600 I0402 17:35:18.612623 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:42:58.545765 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:42:58.545846 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-02 17:42:58.545834669 +0000 UTC m=+3232.134963112 I0402 17:42:58.545755 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-02 17:42:58.545698794 +0000 UTC m=+3232.134827267 I0402 17:42:58.569045 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:42:58.569180 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-02 17:42:58.569169636 +0000 UTC m=+3232.158298079 I0402 17:42:58.709204 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:42:58.752727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-cn6m9" condition "Approved" to 2026-04-02 17:42:58.752709808 +0000 UTC m=+3232.341838251 I0402 17:42:58.776611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-cn6m9" condition "Ready" to 2026-04-02 17:42:58.776596303 +0000 UTC m=+3232.365724746 I0402 17:42:58.804388 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:42:58.80436815 +0000 UTC m=+3232.393496603 I0402 17:42:58.830598 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:42:58.831461 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:42:58.831450947 +0000 UTC m=+3232.420579410 I0402 17:42:58.856777 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:43:39.391530 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:43:39.391586 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-02 17:43:39.391574602 +0000 UTC m=+3272.980703045 I0402 17:43:39.391683 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-02 17:43:39.391649605 +0000 UTC m=+3272.980778068 I0402 17:43:39.417983 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:43:39.418114 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-02 17:43:39.418102301 +0000 UTC m=+3273.007230744 I0402 17:43:39.704006 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:43:39.736477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-n6drq" condition "Approved" to 2026-04-02 17:43:39.736466185 +0000 UTC m=+3273.325594628 I0402 17:43:39.755211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-n6drq" condition "Ready" to 2026-04-02 17:43:39.755199297 +0000 UTC m=+3273.344327740 I0402 17:43:39.784731 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:43:39.784711351 +0000 UTC m=+3273.373839814 I0402 17:43:39.809137 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:43:39.809721 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:43:39.809711591 +0000 UTC m=+3273.398840034 I0402 17:43:39.830906 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:43:39.831953 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:43:39.831939823 +0000 UTC m=+3273.421068296 I0402 17:43:39.832548 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"