I0302 02:08:04.690689 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0302 02:08:04.690799 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0302 02:08:04.690869 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0302 02:08:04.694294 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0302 02:08:04.694787 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0302 02:08:04.694903 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0302 02:08:04.694921 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0302 02:08:04.697972 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0302 02:08:04.713062 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0302 02:08:04.718258 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0302 02:08:04.721791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0302 02:08:04.726066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0302 02:08:04.728488 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0302 02:08:04.728517 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0302 02:08:04.728530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0302 02:08:04.730494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0302 02:08:04.732312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0302 02:08:04.734122 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0302 02:08:04.735856 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0302 02:08:04.737611 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0302 02:08:04.743629 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0302 02:08:04.743701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0302 02:08:04.747538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0302 02:08:04.749671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0302 02:08:04.751494 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0302 02:08:04.751518 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0302 02:08:04.751522 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0302 02:08:04.753468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0302 02:08:04.755247 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0302 02:08:04.755366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0302 02:08:04.757164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0302 02:08:04.759170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0302 02:08:04.760858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0302 02:08:04.766256 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.766365 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.766950 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.767196 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.787186 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.797591 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.803178 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.819904 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.840387 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:04.861261 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0302 02:08:12.673538 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-02 02:08:12.673512233 +0000 UTC m=+8.015717551 I0302 02:08:13.361940 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-02 02:08:13.361914345 +0000 UTC m=+8.704119663 I0302 02:08:13.362125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:08:13.362171 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-02 02:08:13.36216283 +0000 UTC m=+8.704368148 E0302 02:08:13.376238 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0302 02:08:13.376312 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-02 02:08:13.376303813 +0000 UTC m=+8.718509111 E0302 02:08:13.376339 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0302 02:08:13.379597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:13.379697 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-02 02:08:13.379688643 +0000 UTC m=+8.721893971 E0302 02:08:13.386105 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0302 02:08:13.386285 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0302 02:08:13.386322 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0302 02:08:13.386360 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0302 02:08:13.398821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:13.422263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-76h69" condition "Approved" to 2026-03-02 02:08:13.422249714 +0000 UTC m=+8.764455002 I0302 02:08:13.435537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-76h69" condition "Ready" to 2026-03-02 02:08:13.435519709 +0000 UTC m=+8.777725027 I0302 02:08:13.455983 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:08:13.455964433 +0000 UTC m=+8.798169751 I0302 02:08:13.473444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:13.473941 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:08:13.473929235 +0000 UTC m=+8.816134553 I0302 02:08:13.489383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:13.491979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:13.492269 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:08:13.492257004 +0000 UTC m=+8.834462302 I0302 02:08:18.386977 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:08:18.386955408 +0000 UTC m=+13.729160726 I0302 02:08:36.462074 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-02 02:08:36.462058906 +0000 UTC m=+31.804264224 I0302 02:08:36.462237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:08:36.462318 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-02 02:08:36.462306601 +0000 UTC m=+31.804511919 I0302 02:08:36.491841 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-02 02:08:36.491822693 +0000 UTC m=+31.834027991 I0302 02:08:36.495591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:36.495901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:08:36.496046 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-02 02:08:36.495936287 +0000 UTC m=+31.838141615 I0302 02:08:36.771997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:36.785645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tqsng" condition "Approved" to 2026-03-02 02:08:36.785628758 +0000 UTC m=+32.127834086 I0302 02:08:36.814317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tqsng" condition "Ready" to 2026-03-02 02:08:36.814296963 +0000 UTC m=+32.156502291 I0302 02:08:36.848221 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:08:36.848196505 +0000 UTC m=+32.190401833 I0302 02:08:36.872143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:36.872607 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:08:36.87259805 +0000 UTC m=+32.214803338 I0302 02:08:36.894449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:08:36.894492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:12:53.867464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-207.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:12:53.867524 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-207.nip.io-tls" condition "Issuing" to 2026-03-02 02:12:53.867504182 +0000 UTC m=+289.209709480 I0302 02:12:53.867849 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-207.nip.io-tls" condition "Ready" to 2026-03-02 02:12:53.867843869 +0000 UTC m=+289.210049167 I0302 02:12:53.889125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-207.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-207.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:12:53.889188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-207.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:12:53.889214 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-207.nip.io-tls" condition "Issuing" to 2026-03-02 02:12:53.889206694 +0000 UTC m=+289.231412022 I0302 02:12:54.141352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-207.nip.io-tls-nnsr7" condition "Approved" to 2026-03-02 02:12:54.141337913 +0000 UTC m=+289.483543241 I0302 02:12:54.168514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-207.nip.io-tls-nnsr7" condition "Ready" to 2026-03-02 02:12:54.168503002 +0000 UTC m=+289.510708300 I0302 02:12:54.196890 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-207.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:12:54.196880164 +0000 UTC m=+289.539085462 I0302 02:12:54.215470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-207.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-207.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:12:54.215955 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-207.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:12:54.215945995 +0000 UTC m=+289.558151323 I0302 02:12:54.232941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-207.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-207.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:12:54.233350 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-207.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:12:54.233341104 +0000 UTC m=+289.575546422 I0302 02:13:59.866216 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-02 02:13:59.866198123 +0000 UTC m=+355.208403441 I0302 02:13:59.866596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:13:59.866694 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-02 02:13:59.866679201 +0000 UTC m=+355.208884519 E0302 02:13:59.879455 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0302 02:13:59.879503 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-02 02:13:59.879495614 +0000 UTC m=+355.221700912 E0302 02:13:59.879546 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0302 02:13:59.881846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:13:59.881956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:13:59.881994 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-02 02:13:59.88198501 +0000 UTC m=+355.224190328 E0302 02:13:59.888959 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0302 02:13:59.889060 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0302 02:13:59.889109 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0302 02:13:59.889155 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0302 02:13:59.920375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:13:59.920669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hxq27" condition "Approved" to 2026-03-02 02:13:59.920636081 +0000 UTC m=+355.262841399 I0302 02:13:59.933709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hxq27" condition "Ready" to 2026-03-02 02:13:59.933697337 +0000 UTC m=+355.275902635 I0302 02:13:59.951917 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:13:59.951905188 +0000 UTC m=+355.294110506 I0302 02:13:59.967936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:00.012473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:04.890032 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:14:04.890017484 +0000 UTC m=+360.232222802 I0302 02:14:41.532949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:14:41.532995 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-02 02:14:41.532986976 +0000 UTC m=+396.875192274 I0302 02:14:41.532979 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-02 02:14:41.532965465 +0000 UTC m=+396.875170763 I0302 02:14:41.537093 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-02 02:14:41.53708823 +0000 UTC m=+396.879293518 I0302 02:14:41.538874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:14:41.538898 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-02 02:14:41.538894173 +0000 UTC m=+396.881099471 I0302 02:14:41.542142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:14:41.542163 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-02 02:14:41.542159252 +0000 UTC m=+396.884364550 I0302 02:14:41.542886 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-02 02:14:41.542880575 +0000 UTC m=+396.885085863 I0302 02:14:41.571896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:41.571953 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-02 02:14:41.571945983 +0000 UTC m=+396.914151271 I0302 02:14:41.572014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:41.572098 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-02 02:14:41.572089215 +0000 UTC m=+396.914294513 I0302 02:14:41.572758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:41.572802 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-02 02:14:41.572798548 +0000 UTC m=+396.915003846 I0302 02:14:41.692930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:41.737337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w75jw" condition "Approved" to 2026-03-02 02:14:41.737322433 +0000 UTC m=+397.079527751 I0302 02:14:41.767546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w75jw" condition "Ready" to 2026-03-02 02:14:41.767531941 +0000 UTC m=+397.109737259 I0302 02:14:41.798325 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:14:41.79831064 +0000 UTC m=+397.140515968 I0302 02:14:41.843200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:41.863162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:41.881260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gbzwr" condition "Approved" to 2026-03-02 02:14:41.881249904 +0000 UTC m=+397.223455202 I0302 02:14:41.898495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gbzwr" condition "Ready" to 2026-03-02 02:14:41.898484776 +0000 UTC m=+397.240690064 I0302 02:14:41.915693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:41.933864 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:14:41.933850488 +0000 UTC m=+397.276055786 I0302 02:14:42.031292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:42.187603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:42.489928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pdtrq" condition "Approved" to 2026-03-02 02:14:42.489910276 +0000 UTC m=+397.832115594 I0302 02:14:42.637934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pdtrq" condition "Ready" to 2026-03-02 02:14:42.637920991 +0000 UTC m=+397.980126289 I0302 02:14:42.931020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:43.185828 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:14:43.185819841 +0000 UTC m=+398.528025119 I0302 02:14:43.232030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:43.566506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:50.858204 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" condition "Ready" to 2026-03-02 02:14:50.858190772 +0000 UTC m=+406.200396060 I0302 02:14:50.858712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:14:50.858731 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" condition "Issuing" to 2026-03-02 02:14:50.858726972 +0000 UTC m=+406.200932260 I0302 02:14:50.881566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w52zf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:50.881637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:14:50.881654 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" condition "Issuing" to 2026-03-02 02:14:50.881648757 +0000 UTC m=+406.223854065 I0302 02:14:51.021961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w52zf-6lhvk" condition "Approved" to 2026-03-02 02:14:51.021949633 +0000 UTC m=+406.364154921 I0302 02:14:51.037566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w52zf-6lhvk" condition "Ready" to 2026-03-02 02:14:51.037555446 +0000 UTC m=+406.379760744 I0302 02:14:51.065362 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:14:51.065350131 +0000 UTC m=+406.407555429 I0302 02:14:51.091541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w52zf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:14:51.092081 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:14:51.092070255 +0000 UTC m=+406.434275553 I0302 02:14:51.110666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w52zf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w52zf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:15:18.457077 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-02 02:15:18.457065967 +0000 UTC m=+433.799271275 I0302 02:15:18.457153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:15:18.457199 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-02 02:15:18.457191679 +0000 UTC m=+433.799396977 I0302 02:15:18.470582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:15:18.470682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:15:18.470711 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-02 02:15:18.470703916 +0000 UTC m=+433.812909234 I0302 02:15:18.649505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:15:18.657230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vbk4h" condition "Approved" to 2026-03-02 02:15:18.65721607 +0000 UTC m=+433.999421398 I0302 02:15:18.675880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vbk4h" condition "Ready" to 2026-03-02 02:15:18.675863319 +0000 UTC m=+434.018068637 I0302 02:15:18.701574 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:15:18.701564156 +0000 UTC m=+434.043769444 I0302 02:15:18.721629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:15:19.099097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:18:39.790693 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:18:39.790697 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-02 02:18:39.790675905 +0000 UTC m=+635.132881223 I0302 02:18:39.790771 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-02 02:18:39.790761446 +0000 UTC m=+635.132966774 I0302 02:18:39.812247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:18:39.812468 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-02 02:18:39.812424794 +0000 UTC m=+635.154630112 I0302 02:18:39.934740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:18:39.966226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wwbc9" condition "Approved" to 2026-03-02 02:18:39.96620786 +0000 UTC m=+635.308413158 I0302 02:18:39.985708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wwbc9" condition "Ready" to 2026-03-02 02:18:39.985694526 +0000 UTC m=+635.327899834 I0302 02:18:40.014305 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:18:40.014278822 +0000 UTC m=+635.356484120 I0302 02:18:40.041452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:18:40.041863 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:18:40.041837568 +0000 UTC m=+635.384042866 I0302 02:18:40.061997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:20:56.165834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:20:56.165929 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-02 02:20:56.165918389 +0000 UTC m=+771.508123707 I0302 02:20:56.165931 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-02 02:20:56.165905008 +0000 UTC m=+771.508110326 I0302 02:20:56.184923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:20:56.185063 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-02 02:20:56.185051866 +0000 UTC m=+771.527257164 I0302 02:20:56.371445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:20:56.448874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-q88c6" condition "Approved" to 2026-03-02 02:20:56.44886114 +0000 UTC m=+771.791066428 I0302 02:20:56.514687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-q88c6" condition "Ready" to 2026-03-02 02:20:56.514669146 +0000 UTC m=+771.856874464 I0302 02:20:56.559858 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:20:56.559849316 +0000 UTC m=+771.902054604 I0302 02:20:56.593227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:21:55.868466 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-02 02:21:55.868447867 +0000 UTC m=+831.210653195 I0302 02:21:55.868963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:21:55.869001 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-02 02:21:55.868994858 +0000 UTC m=+831.211200186 I0302 02:21:55.883495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:21:55.883549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:21:55.883564 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-02 02:21:55.883559424 +0000 UTC m=+831.225764722 I0302 02:21:56.067142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:21:56.075158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7xtpp" condition "Approved" to 2026-03-02 02:21:56.075147466 +0000 UTC m=+831.417352764 I0302 02:21:56.093357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7xtpp" condition "Ready" to 2026-03-02 02:21:56.093345693 +0000 UTC m=+831.435550991 I0302 02:21:56.131436 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:21:56.131416811 +0000 UTC m=+831.473622139 I0302 02:21:56.155121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:21:56.155400 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:21:56.155387752 +0000 UTC m=+831.497593040 I0302 02:21:56.175333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:21:56.175370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:21:56.175622 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:21:56.175616279 +0000 UTC m=+831.517821557 I0302 02:24:51.306739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:24:51.306798 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-02 02:24:51.306792074 +0000 UTC m=+1006.648997362 I0302 02:24:51.306930 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-02 02:24:51.306914227 +0000 UTC m=+1006.649119525 I0302 02:24:51.324580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:24:51.324643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:24:51.324659 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-02 02:24:51.324652803 +0000 UTC m=+1006.666858101 I0302 02:24:51.530700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pzd99" condition "Approved" to 2026-03-02 02:24:51.53068387 +0000 UTC m=+1006.872889168 I0302 02:24:51.549312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pzd99" condition "Ready" to 2026-03-02 02:24:51.549302494 +0000 UTC m=+1006.891507792 I0302 02:24:51.580633 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:24:51.580618044 +0000 UTC m=+1006.922823342 I0302 02:24:51.604502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:24:51.604956 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:24:51.604949209 +0000 UTC m=+1006.947154507 I0302 02:24:51.616630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:24:51.619546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:24:51.619774 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:24:51.619766828 +0000 UTC m=+1006.961972126 I0302 02:31:00.779547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:31:00.779578 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-03-02 02:31:00.779573 +0000 UTC m=+1376.121778288 I0302 02:31:00.780099 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-03-02 02:31:00.78009545 +0000 UTC m=+1376.122300728 I0302 02:31:00.834172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:31:00.834239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:31:00.834255 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-03-02 02:31:00.834249045 +0000 UTC m=+1376.176454353 I0302 02:31:01.104090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:31:01.159534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-hx7kl" condition "Approved" to 2026-03-02 02:31:01.159524656 +0000 UTC m=+1376.501729944 I0302 02:31:01.289879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-hx7kl" condition "Ready" to 2026-03-02 02:31:01.289872101 +0000 UTC m=+1376.632077389 I0302 02:31:01.516080 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:31:01.516060951 +0000 UTC m=+1376.858266269 I0302 02:31:01.605874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:31:01.606568 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:31:01.606557652 +0000 UTC m=+1376.948762980 I0302 02:31:01.641896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:31:01.644154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:32:29.552895 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-03-02 02:32:29.552863488 +0000 UTC m=+1464.895068806 I0302 02:32:29.553333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:32:29.553364 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-03-02 02:32:29.553357198 +0000 UTC m=+1464.895562516 I0302 02:32:29.569309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:32:29.569380 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-03-02 02:32:29.569372443 +0000 UTC m=+1464.911577771 I0302 02:32:29.713240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:32:29.747427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-l4w7t" condition "Approved" to 2026-03-02 02:32:29.747412536 +0000 UTC m=+1465.089617854 I0302 02:32:29.772566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-l4w7t" condition "Ready" to 2026-03-02 02:32:29.772554571 +0000 UTC m=+1465.114759869 I0302 02:32:29.815589 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:32:29.815579578 +0000 UTC m=+1465.157784866 I0302 02:32:29.835184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:32:29.835556 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:32:29.835545061 +0000 UTC m=+1465.177750379 I0302 02:32:29.842257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:32:29.857719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:33:24.542084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:33:24.542212 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-03-02 02:33:24.542199105 +0000 UTC m=+1519.884404423 I0302 02:33:24.542471 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-03-02 02:33:24.542397079 +0000 UTC m=+1519.884602407 I0302 02:33:24.559072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:33:24.559139 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-03-02 02:33:24.559133648 +0000 UTC m=+1519.901338946 I0302 02:33:24.578418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:33:24.618352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-dqxwr" condition "Approved" to 2026-03-02 02:33:24.618336664 +0000 UTC m=+1519.960541982 I0302 02:33:24.637303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-dqxwr" condition "Ready" to 2026-03-02 02:33:24.637285556 +0000 UTC m=+1519.979490854 I0302 02:33:24.672370 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:33:24.672357817 +0000 UTC m=+1520.014563115 I0302 02:33:24.697927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:33:24.698457 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:33:24.698447849 +0000 UTC m=+1520.040653147 I0302 02:33:24.729308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:33:25.228230 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-03-02 02:33:25.228200353 +0000 UTC m=+1520.570405671 I0302 02:33:25.228290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:33:25.228545 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-03-02 02:33:25.228334876 +0000 UTC m=+1520.570540204 I0302 02:33:25.244779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:33:25.244929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:33:25.244987 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-03-02 02:33:25.244974333 +0000 UTC m=+1520.587179651 I0302 02:33:25.287367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:33:25.292889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-7kqjg" condition "Approved" to 2026-03-02 02:33:25.292870916 +0000 UTC m=+1520.635076224 I0302 02:33:25.305717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-7kqjg" condition "Ready" to 2026-03-02 02:33:25.305697979 +0000 UTC m=+1520.647903277 I0302 02:33:25.335781 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:33:25.335765181 +0000 UTC m=+1520.677970479 I0302 02:33:25.355807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:33:25.899916 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-03-02 02:33:25.89990634 +0000 UTC m=+1521.242111638 I0302 02:33:26.537332 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-03-02 02:33:26.537317624 +0000 UTC m=+1521.879522942 I0302 02:34:11.912802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:34:11.912832 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-03-02 02:34:11.91282567 +0000 UTC m=+1567.255030958 I0302 02:34:11.913250 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-03-02 02:34:11.913246118 +0000 UTC m=+1567.255451406 I0302 02:34:11.947556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:34:11.956418 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-03-02 02:34:11.956400798 +0000 UTC m=+1567.298606096 I0302 02:34:15.752634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:34:15.799072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vpwvq" condition "Approved" to 2026-03-02 02:34:15.799056038 +0000 UTC m=+1571.141261356 I0302 02:34:15.819709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vpwvq" condition "Ready" to 2026-03-02 02:34:15.819693015 +0000 UTC m=+1571.161898343 I0302 02:34:15.852350 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:34:15.852338167 +0000 UTC m=+1571.194543465 I0302 02:34:15.871406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:36:38.921824 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-03-02 02:36:38.921805954 +0000 UTC m=+1714.264011272 I0302 02:36:38.922271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:36:38.922364 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-03-02 02:36:38.922353944 +0000 UTC m=+1714.264559262 I0302 02:36:38.939464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:36:38.939591 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:36:38.939616 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-03-02 02:36:38.939609534 +0000 UTC m=+1714.281814832 I0302 02:36:39.221942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-5g2nv" condition "Approved" to 2026-03-02 02:36:39.221929613 +0000 UTC m=+1714.564134931 I0302 02:36:39.244911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-5g2nv" condition "Ready" to 2026-03-02 02:36:39.244899705 +0000 UTC m=+1714.587105003 I0302 02:36:39.269690 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:36:39.269673123 +0000 UTC m=+1714.611878451 I0302 02:36:39.293601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:36:40.490245 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-03-02 02:36:40.490231506 +0000 UTC m=+1715.832436794 I0302 02:36:40.492078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:36:40.492108 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-03-02 02:36:40.492103533 +0000 UTC m=+1715.834308821 I0302 02:36:40.506307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:36:40.506375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:36:40.506392 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-03-02 02:36:40.506386964 +0000 UTC m=+1715.848592252 I0302 02:36:40.728189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-8qgq7" condition "Approved" to 2026-03-02 02:36:40.728169722 +0000 UTC m=+1716.070375020 I0302 02:36:40.748671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-8qgq7" condition "Ready" to 2026-03-02 02:36:40.748650635 +0000 UTC m=+1716.090855933 I0302 02:36:40.802493 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:36:40.802481114 +0000 UTC m=+1716.144686402 I0302 02:36:40.829972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:36:40.830224 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:36:40.83021773 +0000 UTC m=+1716.172423028 I0302 02:36:40.849700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:39:37.730935 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-03-02 02:39:37.730920754 +0000 UTC m=+1893.073126052 I0302 02:39:37.731135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:39:37.731182 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-03-02 02:39:37.731173259 +0000 UTC m=+1893.073378587 I0302 02:39:37.750218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:39:37.750341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:39:37.750370 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-03-02 02:39:37.750362257 +0000 UTC m=+1893.092567555 I0302 02:39:37.900886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-xmz6r" condition "Approved" to 2026-03-02 02:39:37.900861637 +0000 UTC m=+1893.243066935 I0302 02:39:37.926896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-xmz6r" condition "Ready" to 2026-03-02 02:39:37.926878459 +0000 UTC m=+1893.269083787 I0302 02:39:37.959728 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:39:37.959715775 +0000 UTC m=+1893.301921073 I0302 02:39:37.984869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:39:38.039221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:40:25.324975 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7ggll-api" condition "Ready" to 2026-03-02 02:40:25.324960777 +0000 UTC m=+1940.667166065 I0302 02:40:25.325361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7ggll-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:40:25.325382 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7ggll-api" condition "Issuing" to 2026-03-02 02:40:25.325378475 +0000 UTC m=+1940.667583763 I0302 02:40:25.330921 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7ggll-vnc" condition "Ready" to 2026-03-02 02:40:25.330900324 +0000 UTC m=+1940.673105642 I0302 02:40:25.331411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7ggll-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:40:25.331442 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7ggll-vnc" condition "Issuing" to 2026-03-02 02:40:25.331435844 +0000 UTC m=+1940.673641162 I0302 02:40:25.355745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7ggll-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7ggll-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:40:25.355891 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7ggll-vnc" condition "Ready" to 2026-03-02 02:40:25.355879375 +0000 UTC m=+1940.698084693 I0302 02:40:25.357615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7ggll-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7ggll-api\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:40:25.357666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7ggll-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:40:25.357685 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7ggll-api" condition "Issuing" to 2026-03-02 02:40:25.35768111 +0000 UTC m=+1940.699886408 I0302 02:40:25.462447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7ggll-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7ggll-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:40:25.499349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7ggll-vnc-czpzp" condition "Approved" to 2026-03-02 02:40:25.499332846 +0000 UTC m=+1940.841538144 I0302 02:40:25.520909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7ggll-vnc-czpzp" condition "Ready" to 2026-03-02 02:40:25.520893031 +0000 UTC m=+1940.863098349 I0302 02:40:25.544719 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7ggll-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:40:25.544705048 +0000 UTC m=+1940.886910346 I0302 02:40:25.561913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-7ggll-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7ggll-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:40:25.872775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7ggll-api-bfnmq" condition "Approved" to 2026-03-02 02:40:25.872757701 +0000 UTC m=+1941.214962999 I0302 02:40:25.890437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7ggll-api-bfnmq" condition "Ready" to 2026-03-02 02:40:25.890429519 +0000 UTC m=+1941.232634807 I0302 02:40:25.917650 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7ggll-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:40:25.917634143 +0000 UTC m=+1941.259839441 I0302 02:40:25.944279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-7ggll-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7ggll-api\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:42:29.522378 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-03-02 02:42:29.522362688 +0000 UTC m=+2064.864567986 I0302 02:42:29.522697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:42:29.522722 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-03-02 02:42:29.522718335 +0000 UTC m=+2064.864923633 I0302 02:42:29.549017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:42:29.549162 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:42:29.549192 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-03-02 02:42:29.549183256 +0000 UTC m=+2064.891388584 I0302 02:42:29.780845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-2rk5t" condition "Approved" to 2026-03-02 02:42:29.780827513 +0000 UTC m=+2065.123032841 I0302 02:42:29.798134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-2rk5t" condition "Ready" to 2026-03-02 02:42:29.798125273 +0000 UTC m=+2065.140330561 I0302 02:42:29.829248 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:42:29.829239594 +0000 UTC m=+2065.171444872 I0302 02:42:29.847666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:42:29.848089 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:42:29.848082385 +0000 UTC m=+2065.190287683 I0302 02:42:29.873129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:46:00.497737 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-03-02 02:46:00.497722356 +0000 UTC m=+2275.839927644 I0302 02:46:00.498282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:46:00.498416 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-03-02 02:46:00.498404289 +0000 UTC m=+2275.840609617 I0302 02:46:00.516444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:46:00.516547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:46:00.516651 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-03-02 02:46:00.516642247 +0000 UTC m=+2275.858847545 I0302 02:46:00.797826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-lc8l4" condition "Approved" to 2026-03-02 02:46:00.797811181 +0000 UTC m=+2276.140016499 I0302 02:46:00.812296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-lc8l4" condition "Ready" to 2026-03-02 02:46:00.812285264 +0000 UTC m=+2276.154490552 I0302 02:46:00.844499 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:46:00.844485476 +0000 UTC m=+2276.186690784 I0302 02:46:00.870851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:46:00.926083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:46:02.063771 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-03-02 02:46:02.063755008 +0000 UTC m=+2277.405960296 I0302 02:46:02.063909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:46:02.063960 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-03-02 02:46:02.063948961 +0000 UTC m=+2277.406154279 I0302 02:46:02.080123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:46:02.080262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:46:02.080298 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-03-02 02:46:02.080288672 +0000 UTC m=+2277.422493990 I0302 02:46:02.383267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:46:02.388398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-mnfwx" condition "Approved" to 2026-03-02 02:46:02.388385334 +0000 UTC m=+2277.730590622 I0302 02:46:02.404163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-mnfwx" condition "Ready" to 2026-03-02 02:46:02.404150963 +0000 UTC m=+2277.746356261 I0302 02:46:02.433908 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:46:02.433885196 +0000 UTC m=+2277.776090534 I0302 02:46:02.458290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:46:02.511479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:07.255358 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-03-02 02:48:07.255343877 +0000 UTC m=+2402.597549165 I0302 02:48:07.259073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:48:07.259157 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-03-02 02:48:07.259117981 +0000 UTC m=+2402.601323269 E0302 02:48:07.286860 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0302 02:48:07.286915 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-03-02 02:48:07.286909687 +0000 UTC m=+2402.629114975 I0302 02:48:07.286958 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0302 02:48:07.296046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:07.296181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:48:07.296215 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-03-02 02:48:07.296207129 +0000 UTC m=+2402.638412427 E0302 02:48:07.305554 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0302 02:48:07.306345 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0302 02:48:07.306422 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0302 02:48:07.306519 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0302 02:48:07.344655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-ss2zx" condition "Approved" to 2026-03-02 02:48:07.344641438 +0000 UTC m=+2402.686846736 I0302 02:48:07.362464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-ss2zx" condition "Ready" to 2026-03-02 02:48:07.362450758 +0000 UTC m=+2402.704656066 I0302 02:48:07.390598 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:48:07.39058147 +0000 UTC m=+2402.732786798 I0302 02:48:07.421229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:07.422343 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:48:07.422327732 +0000 UTC m=+2402.764533030 I0302 02:48:07.440425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:07.440793 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:48:07.440782954 +0000 UTC m=+2402.782988252 I0302 02:48:07.914253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:48:07.914256 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-03-02 02:48:07.91424289 +0000 UTC m=+2403.256448198 I0302 02:48:07.914285 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-03-02 02:48:07.91428016 +0000 UTC m=+2403.256485458 E0302 02:48:07.924549 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0302 02:48:07.924588 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-03-02 02:48:07.924580442 +0000 UTC m=+2403.266785730 I0302 02:48:07.924988 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0302 02:48:07.933404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:07.933508 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-03-02 02:48:07.933500167 +0000 UTC m=+2403.275705465 E0302 02:48:07.937460 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0302 02:48:07.937543 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0302 02:48:07.937570 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0302 02:48:07.937597 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0302 02:48:07.946454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:07.946516 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-03-02 02:48:07.946510232 +0000 UTC m=+2403.288715520 I0302 02:48:07.952403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zgxmz" condition "Approved" to 2026-03-02 02:48:07.952391697 +0000 UTC m=+2403.294596995 I0302 02:48:07.967808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zgxmz" condition "Ready" to 2026-03-02 02:48:07.96779557 +0000 UTC m=+2403.310000868 I0302 02:48:07.993219 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:48:07.993202678 +0000 UTC m=+2403.335407986 I0302 02:48:08.012304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:08.602454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:48:08.602497 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-03-02 02:48:08.602488486 +0000 UTC m=+2403.944693784 I0302 02:48:08.602820 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-03-02 02:48:08.602802042 +0000 UTC m=+2403.945007370 I0302 02:48:08.617813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:08.617886 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-03-02 02:48:08.617877149 +0000 UTC m=+2403.960082457 I0302 02:48:08.634608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:08.634739 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-03-02 02:48:08.634730069 +0000 UTC m=+2403.976935367 I0302 02:48:08.638491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-rvn2k" condition "Approved" to 2026-03-02 02:48:08.638480442 +0000 UTC m=+2403.980685730 I0302 02:48:08.655907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-rvn2k" condition "Ready" to 2026-03-02 02:48:08.655895044 +0000 UTC m=+2403.998100342 I0302 02:48:12.306459 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:48:12.306439757 +0000 UTC m=+2407.648645075 I0302 02:48:12.324710 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-rvn2k" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:48:12.324699844 +0000 UTC m=+2407.666905132 I0302 02:48:12.351079 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:48:12.351060172 +0000 UTC m=+2407.693265500 I0302 02:48:12.370050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:48:12.939302 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:48:12.939286837 +0000 UTC m=+2408.281492135 I0302 02:50:18.111602 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-03-02 02:50:18.111588574 +0000 UTC m=+2533.453793862 I0302 02:50:18.112006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:50:18.112022 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-03-02 02:50:18.112018972 +0000 UTC m=+2533.454224260 I0302 02:50:18.128561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:50:18.128623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:50:18.128640 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-03-02 02:50:18.128635118 +0000 UTC m=+2533.470840406 I0302 02:50:18.313102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-k5dm6" condition "Approved" to 2026-03-02 02:50:18.313089006 +0000 UTC m=+2533.655294304 I0302 02:50:18.333264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-k5dm6" condition "Ready" to 2026-03-02 02:50:18.333250131 +0000 UTC m=+2533.675455429 I0302 02:50:18.365561 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:50:18.365548155 +0000 UTC m=+2533.707753453 I0302 02:50:18.394879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:50:18.397414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:50:18.397891 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:50:18.397883488 +0000 UTC m=+2533.740088776 I0302 02:50:18.413865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:50:18.414294 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:50:18.41428539 +0000 UTC m=+2533.756490688 I0302 02:50:18.418372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:04.009839 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-02 02:51:04.009825759 +0000 UTC m=+2579.352031057 I0302 02:51:04.029833 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-02 02:51:04.029815531 +0000 UTC m=+2579.372020849 I0302 02:51:04.029909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:51:04.029954 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-02 02:51:04.029941205 +0000 UTC m=+2579.372146503 I0302 02:51:04.048970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:04.049069 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-02 02:51:04.049057669 +0000 UTC m=+2579.391262967 E0302 02:51:04.058703 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0302 02:51:04.110070 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-02 02:51:04.110050775 +0000 UTC m=+2579.452256073 I0302 02:51:04.131019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:51:04.131233 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-02 02:51:04.131223531 +0000 UTC m=+2579.473428829 I0302 02:51:04.131165 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-02 02:51:04.131147189 +0000 UTC m=+2579.473352487 E0302 02:51:04.144084 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0302 02:51:04.150372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:04.150454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:51:04.150479 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-02 02:51:04.150472938 +0000 UTC m=+2579.492678226 I0302 02:51:04.461880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-wngcl" condition "Approved" to 2026-03-02 02:51:04.461863635 +0000 UTC m=+2579.804068933 I0302 02:51:04.484803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-wngcl" condition "Ready" to 2026-03-02 02:51:04.484789144 +0000 UTC m=+2579.826994452 I0302 02:51:04.519605 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:51:04.519584476 +0000 UTC m=+2579.861789774 I0302 02:51:04.544507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:04.544850 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:51:04.544840892 +0000 UTC m=+2579.887046180 I0302 02:51:04.570789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:04.915490 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-02 02:51:04.915475911 +0000 UTC m=+2580.257681199 I0302 02:51:04.936903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:51:04.936953 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-02 02:51:04.936946031 +0000 UTC m=+2580.279151309 I0302 02:51:04.937061 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-02 02:51:04.937042923 +0000 UTC m=+2580.279248231 I0302 02:51:04.953635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:04.953730 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-02 02:51:04.9537219 +0000 UTC m=+2580.295927198 I0302 02:51:05.334672 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-02 02:51:05.334655061 +0000 UTC m=+2580.676860349 I0302 02:51:05.356867 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-02 02:51:05.356858937 +0000 UTC m=+2580.699064225 I0302 02:51:05.356948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:51:05.357010 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-02 02:51:05.356996089 +0000 UTC m=+2580.699201397 I0302 02:51:05.372446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:05.372543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:51:05.372570 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-02 02:51:05.372563335 +0000 UTC m=+2580.714768633 I0302 02:51:05.513618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:05.562863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-b2njg" condition "Approved" to 2026-03-02 02:51:05.562851517 +0000 UTC m=+2580.905056795 I0302 02:51:05.590646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-b2njg" condition "Ready" to 2026-03-02 02:51:05.590635882 +0000 UTC m=+2580.932841170 I0302 02:51:05.628450 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:51:05.628438133 +0000 UTC m=+2580.970643421 I0302 02:51:05.654252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:05.681851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lc7mf" condition "Approved" to 2026-03-02 02:51:05.68183395 +0000 UTC m=+2581.024039278 I0302 02:51:05.707735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lc7mf" condition "Ready" to 2026-03-02 02:51:05.707711607 +0000 UTC m=+2581.049916905 I0302 02:51:05.742575 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:51:05.742560481 +0000 UTC m=+2581.084765779 I0302 02:51:05.765302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:05.843374 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-02 02:51:05.843352578 +0000 UTC m=+2581.185557906 I0302 02:51:05.869756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:51:05.869956 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-02 02:51:05.869947249 +0000 UTC m=+2581.212152547 I0302 02:51:05.870081 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-02 02:51:05.870077241 +0000 UTC m=+2581.212282539 I0302 02:51:06.072520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:06.072592 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-02 02:51:06.072586224 +0000 UTC m=+2581.414791512 I0302 02:51:06.547515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:06.592463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-p5d8m" condition "Approved" to 2026-03-02 02:51:06.592451188 +0000 UTC m=+2581.934656486 I0302 02:51:06.645228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-p5d8m" condition "Ready" to 2026-03-02 02:51:06.645217343 +0000 UTC m=+2581.987422631 I0302 02:51:06.972232 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:51:06.972222256 +0000 UTC m=+2582.314427544 I0302 02:51:07.118844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:07.119287 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:51:07.119277659 +0000 UTC m=+2582.461482987 I0302 02:51:07.368951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:51:07.423993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:54:16.664046 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-03-02 02:54:16.664027641 +0000 UTC m=+2772.006232969 I0302 02:54:16.664238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:54:16.664292 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-03-02 02:54:16.664287296 +0000 UTC m=+2772.006492584 I0302 02:54:16.689719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:54:16.689831 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:54:16.689858 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-03-02 02:54:16.689848925 +0000 UTC m=+2772.032054243 I0302 02:54:16.958943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:54:16.969948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bq5r9" condition "Approved" to 2026-03-02 02:54:16.969938239 +0000 UTC m=+2772.312143527 I0302 02:54:16.999330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bq5r9" condition "Ready" to 2026-03-02 02:54:16.999318185 +0000 UTC m=+2772.341523483 I0302 02:54:17.067211 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:54:17.067194743 +0000 UTC m=+2772.409400041 I0302 02:54:17.092733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:54:17.093183 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:54:17.09317638 +0000 UTC m=+2772.435381668 I0302 02:54:17.120368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:54:17.126991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:54:17.127587 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:54:17.127575827 +0000 UTC m=+2772.469781145 I0302 02:54:19.132081 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-03-02 02:54:19.132063216 +0000 UTC m=+2774.474268514 I0302 02:54:19.132303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:54:19.132357 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-03-02 02:54:19.132344401 +0000 UTC m=+2774.474549729 I0302 02:54:19.147165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:54:19.147253 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-03-02 02:54:19.147246703 +0000 UTC m=+2774.489452001 I0302 02:54:19.334498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0302 02:54:19.665307 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"magnum-registry-certs-mqv2g\" not found" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" I0302 02:54:19.667626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-8647h" condition "Approved" to 2026-03-02 02:54:19.667608264 +0000 UTC m=+2775.009813542 I0302 02:54:19.691204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-8647h" condition "Ready" to 2026-03-02 02:54:19.691192402 +0000 UTC m=+2775.033397690 I0302 02:54:19.944848 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" resource_name="magnum-registry-certs" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="magnum-registry-certs-8647h" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="magnum-registry-certs-ffmsh" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" I0302 02:54:19.976870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-lc28w" condition "Approved" to 2026-03-02 02:54:19.976848139 +0000 UTC m=+2775.319053427 I0302 02:54:20.005669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-lc28w" condition "Ready" to 2026-03-02 02:54:20.005660164 +0000 UTC m=+2775.347865462 I0302 02:54:20.065140 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:54:20.065126581 +0000 UTC m=+2775.407331869 I0302 02:54:20.087925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:54:20.168655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:58:59.165192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:58:59.165262 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-03-02 02:58:59.165252082 +0000 UTC m=+3054.507457400 I0302 02:58:59.165922 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-03-02 02:58:59.165912915 +0000 UTC m=+3054.508118243 I0302 02:58:59.189916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:58:59.190002 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-03-02 02:58:59.189993971 +0000 UTC m=+3054.532199299 I0302 02:58:59.559677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:58:59.601218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-f8x5j" condition "Approved" to 2026-03-02 02:58:59.601203609 +0000 UTC m=+3054.943408927 I0302 02:58:59.620768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-f8x5j" condition "Ready" to 2026-03-02 02:58:59.620750835 +0000 UTC m=+3054.962956163 I0302 02:58:59.648216 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:58:59.648206077 +0000 UTC m=+3054.990411375 I0302 02:58:59.667091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:58:59.722506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:59:32.854157 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-03-02 02:59:32.854136538 +0000 UTC m=+3088.196341866 I0302 02:59:32.854227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0302 02:59:32.854281 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-03-02 02:59:32.854271631 +0000 UTC m=+3088.196476949 I0302 02:59:32.870448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:59:32.870584 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-03-02 02:59:32.870574823 +0000 UTC m=+3088.212780121 I0302 02:59:33.165560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:59:33.197993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lrmmh" condition "Approved" to 2026-03-02 02:59:33.197979095 +0000 UTC m=+3088.540184413 I0302 02:59:33.217329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lrmmh" condition "Ready" to 2026-03-02 02:59:33.217317928 +0000 UTC m=+3088.559523226 I0302 02:59:33.249003 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:59:33.248986053 +0000 UTC m=+3088.591191351 I0302 02:59:33.273246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0302 02:59:33.273492 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-02 02:59:33.273485178 +0000 UTC m=+3088.615690466 I0302 02:59:33.294360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"