I0227 01:26:19.237935 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0227 01:26:19.238069 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0227 01:26:19.238155 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0227 01:26:19.242799 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0227 01:26:19.243327 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0227 01:26:19.243415 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0227 01:26:19.243331 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0227 01:26:19.246521 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0227 01:26:19.262135 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0227 01:26:19.266294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0227 01:26:19.271833 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0227 01:26:19.271887 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0227 01:26:19.275078 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0227 01:26:19.275153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0227 01:26:19.277720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0227 01:26:19.280096 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0227 01:26:19.282686 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0227 01:26:19.282849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0227 01:26:19.285581 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0227 01:26:19.290810 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0227 01:26:19.295168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0227 01:26:19.298485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0227 01:26:19.300265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0227 01:26:19.302059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0227 01:26:19.303908 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0227 01:26:19.305945 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0227 01:26:19.305970 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0227 01:26:19.306014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0227 01:26:19.307852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0227 01:26:19.313722 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0227 01:26:19.317475 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0227 01:26:19.319172 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0227 01:26:19.319203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0227 01:26:19.321518 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.321542 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.321862 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.322642 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.322651 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.322956 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.323267 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.323619 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.323706 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:19.352959 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:29.950189 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-02-27 01:26:29.950164329 +0000 UTC m=+10.741858967 I0227 01:26:30.617304 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-27 01:26:30.617288612 +0000 UTC m=+11.408983240 I0227 01:26:30.617437 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:26:30.617522 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-02-27 01:26:30.617512057 +0000 UTC m=+11.409206695 E0227 01:26:30.635468 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0227 01:26:30.635551 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-02-27 01:26:30.635541133 +0000 UTC m=+11.427235761 E0227 01:26:30.635584 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0227 01:26:30.637989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:30.638162 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-27 01:26:30.638148114 +0000 UTC m=+11.429842812 E0227 01:26:30.651778 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0227 01:26:30.651885 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:26:30.651927 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:26:30.651972 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0227 01:26:30.652917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:30.653006 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-27 01:26:30.652995225 +0000 UTC m=+11.444689863 I0227 01:26:30.661800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bl4d8" condition "Approved" to 2026-02-27 01:26:30.661783612 +0000 UTC m=+11.453478250 I0227 01:26:30.666653 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-27 01:26:30.666616166 +0000 UTC m=+11.458310804 I0227 01:26:30.673488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bl4d8" condition "Ready" to 2026-02-27 01:26:30.673476008 +0000 UTC m=+11.465170616 I0227 01:26:30.673802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:30.695539 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:30.695521298 +0000 UTC m=+11.487215906 I0227 01:26:30.713188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:30.713593 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:30.713579574 +0000 UTC m=+11.505274202 I0227 01:26:30.730443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:35.653408 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:35.653360575 +0000 UTC m=+16.445055193 I0227 01:26:56.211666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:26:56.211726 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-02-27 01:26:56.211717464 +0000 UTC m=+37.003412072 I0227 01:26:56.211814 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-27 01:26:56.211794806 +0000 UTC m=+37.003489454 I0227 01:26:56.223300 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-02-27 01:26:56.223285557 +0000 UTC m=+37.014980165 I0227 01:26:56.241802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:56.241868 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-27 01:26:56.241860286 +0000 UTC m=+37.033554894 I0227 01:26:56.373673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:56.589129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-txsvz" condition "Approved" to 2026-02-27 01:26:56.589117481 +0000 UTC m=+37.380812099 I0227 01:26:56.875644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-txsvz" condition "Ready" to 2026-02-27 01:26:56.875628853 +0000 UTC m=+37.667323481 I0227 01:26:56.925526 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:56.925514701 +0000 UTC m=+37.717209309 I0227 01:26:56.950213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:56.950604 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:56.950598043 +0000 UTC m=+37.742292651 I0227 01:26:56.982536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:56.985591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:31:25.044585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:31:25.044599 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-02-27 01:31:25.044560939 +0000 UTC m=+305.836255557 I0227 01:31:25.044620 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-02-27 01:31:25.04461511 +0000 UTC m=+305.836309718 I0227 01:31:25.061027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:31:25.061092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:31:25.061109 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-02-27 01:31:25.061102435 +0000 UTC m=+305.852797053 I0227 01:31:25.188639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:31:25.195160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-kpfxw" condition "Approved" to 2026-02-27 01:31:25.195147878 +0000 UTC m=+305.986842486 I0227 01:31:25.218441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-kpfxw" condition "Ready" to 2026-02-27 01:31:25.218388101 +0000 UTC m=+306.010082709 I0227 01:31:25.242279 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:31:25.242268409 +0000 UTC m=+306.033963017 I0227 01:31:25.259780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:33.568673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:32:33.568762 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-02-27 01:32:33.568720629 +0000 UTC m=+374.360415257 I0227 01:32:33.569335 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 01:32:33.568570226 +0000 UTC m=+374.360264864 E0227 01:32:33.586565 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0227 01:32:33.586615 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-02-27 01:32:33.586604728 +0000 UTC m=+374.378299346 E0227 01:32:33.587010 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0227 01:32:33.589638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:33.589778 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 01:32:33.589752842 +0000 UTC m=+374.381447470 E0227 01:32:33.597873 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0227 01:32:33.597986 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:32:33.598023 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:32:33.598068 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0227 01:32:33.601134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:33.601228 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 01:32:33.60121914 +0000 UTC m=+374.392913748 I0227 01:32:33.607068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5jvv7" condition "Approved" to 2026-02-27 01:32:33.607054836 +0000 UTC m=+374.398749444 I0227 01:32:33.611639 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 01:32:33.611622614 +0000 UTC m=+374.403317222 I0227 01:32:33.619873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:33.620695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5jvv7" condition "Ready" to 2026-02-27 01:32:33.620681886 +0000 UTC m=+374.412376524 I0227 01:32:33.639455 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:32:33.639440064 +0000 UTC m=+374.431134672 I0227 01:32:33.655032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:38.598610 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:32:38.598596829 +0000 UTC m=+379.390291457 I0227 01:33:16.009469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:16.009517 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-27 01:33:16.009497326 +0000 UTC m=+416.801191934 I0227 01:33:16.009839 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-02-27 01:33:16.009833724 +0000 UTC m=+416.801528332 I0227 01:33:16.010229 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-02-27 01:33:16.010224353 +0000 UTC m=+416.801918961 I0227 01:33:16.010228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:16.010446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-02-27 01:33:16.010441288 +0000 UTC m=+416.802135896 I0227 01:33:16.010609 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:16.010626 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-02-27 01:33:16.010622963 +0000 UTC m=+416.802317571 I0227 01:33:16.011136 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-02-27 01:33:16.011123904 +0000 UTC m=+416.802818542 I0227 01:33:16.039496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:16.039571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:16.039609 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-02-27 01:33:16.039602367 +0000 UTC m=+416.831296975 I0227 01:33:16.040897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:16.040986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:16.041019 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-02-27 01:33:16.04101116 +0000 UTC m=+416.832705768 I0227 01:33:16.042227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:16.042282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:16.042300 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-27 01:33:16.04229603 +0000 UTC m=+416.833990638 I0227 01:33:16.304298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m4s4f" condition "Approved" to 2026-02-27 01:33:16.304288753 +0000 UTC m=+417.095983351 I0227 01:33:16.324698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m4s4f" condition "Ready" to 2026-02-27 01:33:16.324687845 +0000 UTC m=+417.116382453 I0227 01:33:16.391128 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:16.391119442 +0000 UTC m=+417.182814040 I0227 01:33:16.391128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qr72g" condition "Approved" to 2026-02-27 01:33:16.391118102 +0000 UTC m=+417.182812700 I0227 01:33:16.425019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qr72g" condition "Ready" to 2026-02-27 01:33:16.425005202 +0000 UTC m=+417.216699810 I0227 01:33:16.425212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:16.425412 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:16.425406912 +0000 UTC m=+417.217101510 I0227 01:33:16.448052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:16.451939 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:16.451927628 +0000 UTC m=+417.243622236 I0227 01:33:16.474024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:16.474207 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:16.474202043 +0000 UTC m=+417.265896641 I0227 01:33:16.671052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rpz9h" condition "Approved" to 2026-02-27 01:33:16.671027329 +0000 UTC m=+417.462721957 E0227 01:33:16.695905 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-ppj7h\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0227 01:33:17.051848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rpz9h" condition "Ready" to 2026-02-27 01:33:17.051833416 +0000 UTC m=+417.843528044 E0227 01:33:17.090814 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-z6k5x\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0227 01:33:17.517903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:17.527554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:17.527595 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-27 01:33:17.527586924 +0000 UTC m=+418.319281542 I0227 01:33:17.545988 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:17.545981608 +0000 UTC m=+418.337676206 I0227 01:33:17.693880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:17.694427 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:17.694414651 +0000 UTC m=+418.486109279 I0227 01:33:17.745226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0227 01:33:18.001908 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-ppj7h\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0227 01:33:18.050229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9dpmx" condition "Approved" to 2026-02-27 01:33:18.050209348 +0000 UTC m=+418.841903976 I0227 01:33:18.103593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9dpmx" condition "Ready" to 2026-02-27 01:33:18.103577178 +0000 UTC m=+418.895271816 I0227 01:33:18.756338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:18.894951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:28.076270 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" condition "Ready" to 2026-02-27 01:33:28.076257994 +0000 UTC m=+428.867952582 I0227 01:33:28.076704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:28.076720 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" condition "Issuing" to 2026-02-27 01:33:28.076717415 +0000 UTC m=+428.868412013 I0227 01:33:28.092380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:28.092493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:28.092522 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" condition "Issuing" to 2026-02-27 01:33:28.092515768 +0000 UTC m=+428.884210366 I0227 01:33:28.346493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qbvkc-ghj5n" condition "Approved" to 2026-02-27 01:33:28.346480601 +0000 UTC m=+429.138175219 I0227 01:33:28.364437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qbvkc-ghj5n" condition "Ready" to 2026-02-27 01:33:28.364422985 +0000 UTC m=+429.156117593 I0227 01:33:28.393169 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:28.393156173 +0000 UTC m=+429.184850781 I0227 01:33:28.414478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:28.414713 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:28.414704782 +0000 UTC m=+429.206399390 I0227 01:33:28.430452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:28.430794 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:28.430786041 +0000 UTC m=+429.222480649 I0227 01:33:28.435883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qbvkc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:34:15.782964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:34:15.782990 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-02-27 01:34:15.782983784 +0000 UTC m=+476.574678382 I0227 01:34:15.783278 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-02-27 01:34:15.78326104 +0000 UTC m=+476.574955648 I0227 01:34:15.800633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:34:15.800835 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-02-27 01:34:15.800825783 +0000 UTC m=+476.592520391 I0227 01:34:16.139331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:34:16.210123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6zjvm" condition "Approved" to 2026-02-27 01:34:16.20979834 +0000 UTC m=+477.001492948 I0227 01:34:16.233672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6zjvm" condition "Ready" to 2026-02-27 01:34:16.233660931 +0000 UTC m=+477.025355539 I0227 01:34:16.266927 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:34:16.266912542 +0000 UTC m=+477.058607150 I0227 01:34:16.282172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:34:16.282459 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:34:16.282451227 +0000 UTC m=+477.074145835 I0227 01:34:16.305095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:37:40.788107 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-02-27 01:37:40.78807197 +0000 UTC m=+681.579766578 I0227 01:37:40.788172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:37:40.788265 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-02-27 01:37:40.788256484 +0000 UTC m=+681.579951092 I0227 01:37:40.804724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:37:40.804910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:37:40.805023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-02-27 01:37:40.804990854 +0000 UTC m=+681.596685482 I0227 01:37:41.057037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:37:41.065227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h7x49" condition "Approved" to 2026-02-27 01:37:41.065211744 +0000 UTC m=+681.856906372 I0227 01:37:41.085501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h7x49" condition "Ready" to 2026-02-27 01:37:41.085488186 +0000 UTC m=+681.877182784 I0227 01:37:41.113321 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:37:41.113305284 +0000 UTC m=+681.904999902 I0227 01:37:41.136840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:40:00.693059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:40:00.693166 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-02-27 01:40:00.693128628 +0000 UTC m=+821.484823256 I0227 01:40:00.693247 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-02-27 01:40:00.693111778 +0000 UTC m=+821.484806406 I0227 01:40:00.712454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:40:00.712556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:40:00.712595 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-02-27 01:40:00.712570551 +0000 UTC m=+821.504265159 I0227 01:40:01.039273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:40:01.050078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-d7wn8" condition "Approved" to 2026-02-27 01:40:01.050002959 +0000 UTC m=+821.841697577 I0227 01:40:01.074086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-d7wn8" condition "Ready" to 2026-02-27 01:40:01.07407436 +0000 UTC m=+821.865768968 I0227 01:40:01.095910 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:40:01.095901368 +0000 UTC m=+821.887595976 I0227 01:40:01.118821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:41:13.842802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:41:13.842891 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-02-27 01:41:13.842865256 +0000 UTC m=+894.634559884 I0227 01:41:13.842901 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-02-27 01:41:13.842882326 +0000 UTC m=+894.634576954 I0227 01:41:13.856993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:41:13.857056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:41:13.857077 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-02-27 01:41:13.857070737 +0000 UTC m=+894.648765345 I0227 01:41:13.983982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:41:13.993375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dl9p9" condition "Approved" to 2026-02-27 01:41:13.993365351 +0000 UTC m=+894.785059949 I0227 01:41:14.013422 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dl9p9" condition "Ready" to 2026-02-27 01:41:14.013410647 +0000 UTC m=+894.805105255 I0227 01:41:14.042258 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:41:14.042242749 +0000 UTC m=+894.833937387 I0227 01:41:14.062026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:41:14.062310 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:41:14.062303596 +0000 UTC m=+894.853998204 I0227 01:41:14.081640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:44:29.361827 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-02-27 01:44:29.361789931 +0000 UTC m=+1090.153484539 I0227 01:44:29.361824 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:44:29.362169 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-02-27 01:44:29.36215598 +0000 UTC m=+1090.153850648 I0227 01:44:29.382372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:44:29.382434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:44:29.382449 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-02-27 01:44:29.382443193 +0000 UTC m=+1090.174137801 I0227 01:44:29.660187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xw4rk" condition "Approved" to 2026-02-27 01:44:29.660168772 +0000 UTC m=+1090.451863410 I0227 01:44:29.681211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xw4rk" condition "Ready" to 2026-02-27 01:44:29.681203332 +0000 UTC m=+1090.472897930 I0227 01:44:29.712062 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:44:29.712045562 +0000 UTC m=+1090.503740190 I0227 01:44:29.732646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:44:29.733003 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:44:29.732992001 +0000 UTC m=+1090.524686609 I0227 01:44:29.753803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:50:37.550683 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-02-27 01:50:37.550651671 +0000 UTC m=+1458.342346299 I0227 01:50:37.551097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:50:37.551128 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-02-27 01:50:37.551121122 +0000 UTC m=+1458.342815760 I0227 01:50:37.569270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:50:37.569330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:50:37.569348 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-02-27 01:50:37.569342166 +0000 UTC m=+1458.361036774 I0227 01:50:37.764414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-68znz" condition "Approved" to 2026-02-27 01:50:37.764401674 +0000 UTC m=+1458.556096282 I0227 01:50:37.789342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-68znz" condition "Ready" to 2026-02-27 01:50:37.789330964 +0000 UTC m=+1458.581025572 I0227 01:50:37.833130 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:50:37.833119062 +0000 UTC m=+1458.624813660 I0227 01:50:37.859848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:50:37.860174 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:50:37.860167042 +0000 UTC m=+1458.651861640 I0227 01:50:37.875432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:50:37.875893 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:50:37.875881767 +0000 UTC m=+1458.667576395 I0227 01:52:00.523055 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-02-27 01:52:00.52303989 +0000 UTC m=+1541.314734498 I0227 01:52:00.523121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:52:00.523140 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-02-27 01:52:00.523135592 +0000 UTC m=+1541.314830200 I0227 01:52:00.540471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:52:00.540557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:52:00.540592 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-02-27 01:52:00.540582108 +0000 UTC m=+1541.332276736 I0227 01:52:00.801483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-clzl7" condition "Approved" to 2026-02-27 01:52:00.801466918 +0000 UTC m=+1541.593161546 I0227 01:52:00.819906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-clzl7" condition "Ready" to 2026-02-27 01:52:00.819890466 +0000 UTC m=+1541.611585074 I0227 01:52:00.853146 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:52:00.85313529 +0000 UTC m=+1541.644829898 I0227 01:52:00.868961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:52:00.869245 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:52:00.869236764 +0000 UTC m=+1541.660931372 I0227 01:52:00.886626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.078471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:53:05.078527 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-02-27 01:53:05.078517334 +0000 UTC m=+1605.870211942 I0227 01:53:05.078659 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-27 01:53:05.078638196 +0000 UTC m=+1605.870332804 I0227 01:53:05.095707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.096373 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-27 01:53:05.096356128 +0000 UTC m=+1605.888050816 I0227 01:53:05.114461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.140419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-bqj2f" condition "Approved" to 2026-02-27 01:53:05.140399623 +0000 UTC m=+1605.932094231 I0227 01:53:05.162757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-bqj2f" condition "Ready" to 2026-02-27 01:53:05.162746793 +0000 UTC m=+1605.954441391 I0227 01:53:05.190738 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:53:05.190720114 +0000 UTC m=+1605.982414732 I0227 01:53:05.213180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.213491 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:53:05.213481323 +0000 UTC m=+1606.005175921 I0227 01:53:05.240224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.709931 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-02-27 01:53:05.709916033 +0000 UTC m=+1606.501610631 I0227 01:53:05.710320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:53:05.710376 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-02-27 01:53:05.710363343 +0000 UTC m=+1606.502057971 I0227 01:53:05.734656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.734764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:53:05.734801 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-02-27 01:53:05.734793782 +0000 UTC m=+1606.526488370 I0227 01:53:05.790739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.796717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5smjp" condition "Approved" to 2026-02-27 01:53:05.796702942 +0000 UTC m=+1606.588397540 I0227 01:53:05.810555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5smjp" condition "Ready" to 2026-02-27 01:53:05.810536274 +0000 UTC m=+1606.602230912 I0227 01:53:05.835657 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:53:05.835642828 +0000 UTC m=+1606.627337416 I0227 01:53:05.852258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.852652 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:53:05.852640284 +0000 UTC m=+1606.644334922 I0227 01:53:05.866818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:05.871041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:06.398000 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-02-27 01:53:06.397988361 +0000 UTC m=+1607.189682969 I0227 01:53:07.059515 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-02-27 01:53:07.05950266 +0000 UTC m=+1607.851197268 I0227 01:53:51.039634 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-02-27 01:53:51.039619014 +0000 UTC m=+1651.831313612 I0227 01:53:51.040192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:53:51.040237 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-02-27 01:53:51.040226738 +0000 UTC m=+1651.831921346 I0227 01:53:51.082586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:51.082683 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-02-27 01:53:51.082676076 +0000 UTC m=+1651.874370674 I0227 01:53:51.861387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:53:51.904126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-md42j" condition "Approved" to 2026-02-27 01:53:51.904101386 +0000 UTC m=+1652.695795994 I0227 01:53:51.935091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-md42j" condition "Ready" to 2026-02-27 01:53:51.935072297 +0000 UTC m=+1652.726766905 I0227 01:53:52.027139 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:53:52.027116358 +0000 UTC m=+1652.818810976 I0227 01:53:52.052240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:56:24.006480 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-02-27 01:56:24.006440843 +0000 UTC m=+1804.798135451 I0227 01:56:24.006525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:56:24.006609 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-02-27 01:56:24.006599307 +0000 UTC m=+1804.798293945 I0227 01:56:24.027269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:56:24.027346 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-02-27 01:56:24.02733838 +0000 UTC m=+1804.819032988 I0227 01:56:24.139575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:56:24.170539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-jtjx9" condition "Approved" to 2026-02-27 01:56:24.170526713 +0000 UTC m=+1804.962221321 I0227 01:56:24.189061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-jtjx9" condition "Ready" to 2026-02-27 01:56:24.188994893 +0000 UTC m=+1804.980689501 I0227 01:56:24.216877 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:56:24.216863242 +0000 UTC m=+1805.008557850 I0227 01:56:24.240249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:56:24.240777 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:56:24.240769038 +0000 UTC m=+1805.032463646 I0227 01:56:24.254896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:56:24.255122 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:56:24.255114712 +0000 UTC m=+1805.046809320 I0227 01:56:25.537420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:56:25.537473 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-02-27 01:56:25.537441185 +0000 UTC m=+1806.329135823 I0227 01:56:25.537459 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-02-27 01:56:25.537450445 +0000 UTC m=+1806.329145053 I0227 01:56:25.553119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:56:25.553346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:56:25.553380 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-02-27 01:56:25.553371815 +0000 UTC m=+1806.345066423 I0227 01:56:25.744368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-dsl4q" condition "Approved" to 2026-02-27 01:56:25.744355522 +0000 UTC m=+1806.536050130 I0227 01:56:25.761692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-dsl4q" condition "Ready" to 2026-02-27 01:56:25.761675835 +0000 UTC m=+1806.553370473 I0227 01:56:25.788991 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:56:25.7889775 +0000 UTC m=+1806.580672108 I0227 01:56:25.860411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:56:25.860791 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:56:25.860782682 +0000 UTC m=+1806.652477290 I0227 01:56:25.872294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:56:25.882033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:59:22.500659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:59:22.500745 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-02-27 01:59:22.500703206 +0000 UTC m=+1983.292397844 I0227 01:59:22.500740 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-02-27 01:59:22.500702936 +0000 UTC m=+1983.292397574 I0227 01:59:22.516012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:59:22.516116 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-02-27 01:59:22.516107022 +0000 UTC m=+1983.307801640 I0227 01:59:22.652536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:59:22.686336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-kqz6l" condition "Approved" to 2026-02-27 01:59:22.686322162 +0000 UTC m=+1983.478016800 I0227 01:59:22.705547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-kqz6l" condition "Ready" to 2026-02-27 01:59:22.705535377 +0000 UTC m=+1983.497229985 I0227 01:59:22.733878 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:59:22.733866413 +0000 UTC m=+1983.525561001 I0227 01:59:22.755308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:59:22.755654 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:59:22.755646767 +0000 UTC m=+1983.547341375 I0227 01:59:22.772076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:59:22.772389 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:59:22.772381604 +0000 UTC m=+1983.564076212 I0227 02:00:53.480859 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-fspqq-api" condition "Ready" to 2026-02-27 02:00:53.480837559 +0000 UTC m=+2074.272532207 I0227 02:00:53.480929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-fspqq-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:00:53.481003 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-fspqq-api" condition "Issuing" to 2026-02-27 02:00:53.480992943 +0000 UTC m=+2074.272687551 I0227 02:00:53.480999 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-fspqq-vnc" condition "Ready" to 2026-02-27 02:00:53.480975183 +0000 UTC m=+2074.272669781 I0227 02:00:53.481158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-fspqq-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:00:53.481252 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-fspqq-vnc" condition "Issuing" to 2026-02-27 02:00:53.481238809 +0000 UTC m=+2074.272933447 I0227 02:00:53.507678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-fspqq-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-fspqq-api\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:00:53.507879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-fspqq-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:00:53.507905 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-fspqq-api" condition "Issuing" to 2026-02-27 02:00:53.507895496 +0000 UTC m=+2074.299590104 I0227 02:00:53.509799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-fspqq-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-fspqq-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:00:53.509930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-fspqq-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:00:53.509963 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-fspqq-vnc" condition "Issuing" to 2026-02-27 02:00:53.509955643 +0000 UTC m=+2074.301650251 I0227 02:00:53.709482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-fspqq-vnc-gsnzn" condition "Approved" to 2026-02-27 02:00:53.709464351 +0000 UTC m=+2074.501158969 I0227 02:00:53.726573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-fspqq-vnc-gsnzn" condition "Ready" to 2026-02-27 02:00:53.726559097 +0000 UTC m=+2074.518253705 I0227 02:00:53.755773 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-fspqq-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:00:53.755740913 +0000 UTC m=+2074.547435521 I0227 02:00:53.778361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-fspqq-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-fspqq-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:00:53.941933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-fspqq-api-2kpvl" condition "Approved" to 2026-02-27 02:00:53.941921142 +0000 UTC m=+2074.733615750 I0227 02:00:53.955193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-fspqq-api-2kpvl" condition "Ready" to 2026-02-27 02:00:53.955177239 +0000 UTC m=+2074.746871847 I0227 02:00:53.983449 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-fspqq-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:00:53.983438453 +0000 UTC m=+2074.775133061 I0227 02:00:54.009113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-fspqq-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-fspqq-api\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:00:54.066856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-fspqq-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-fspqq-api\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:02:07.095971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:02:07.096100 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-02-27 02:02:07.09608152 +0000 UTC m=+2147.887776148 I0227 02:02:07.096070 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-02-27 02:02:07.09606011 +0000 UTC m=+2147.887754738 I0227 02:02:07.114200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:02:07.114344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:02:07.114387 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-02-27 02:02:07.114376384 +0000 UTC m=+2147.906071012 I0227 02:02:07.440639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:02:07.450979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-b6vrp" condition "Approved" to 2026-02-27 02:02:07.450961025 +0000 UTC m=+2148.242655653 I0227 02:02:07.476350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-b6vrp" condition "Ready" to 2026-02-27 02:02:07.476314382 +0000 UTC m=+2148.268009010 I0227 02:02:07.510645 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:02:07.510627096 +0000 UTC m=+2148.302321724 I0227 02:02:07.541689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:05:36.078825 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-02-27 02:05:36.078615077 +0000 UTC m=+2356.870309705 I0227 02:05:36.078948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:05:36.078970 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-02-27 02:05:36.078963475 +0000 UTC m=+2356.870658083 I0227 02:05:36.093834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:05:36.093996 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-02-27 02:05:36.093980633 +0000 UTC m=+2356.885675321 I0227 02:05:36.294637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:05:36.327263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-mwpc8" condition "Approved" to 2026-02-27 02:05:36.327250476 +0000 UTC m=+2357.118945084 I0227 02:05:36.344114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-mwpc8" condition "Ready" to 2026-02-27 02:05:36.344102626 +0000 UTC m=+2357.135797234 I0227 02:05:36.370613 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:05:36.370598889 +0000 UTC m=+2357.162293497 I0227 02:05:36.393853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:05:37.524437 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:05:37.524476 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-02-27 02:05:37.524457968 +0000 UTC m=+2358.316152596 I0227 02:05:37.524495 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-02-27 02:05:37.524481889 +0000 UTC m=+2358.316176527 I0227 02:05:37.539181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:05:37.539331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:05:37.539362 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-02-27 02:05:37.539354303 +0000 UTC m=+2358.331048931 I0227 02:05:37.739355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-g4cwb" condition "Approved" to 2026-02-27 02:05:37.739341137 +0000 UTC m=+2358.531035775 I0227 02:05:37.767201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-g4cwb" condition "Ready" to 2026-02-27 02:05:37.767189691 +0000 UTC m=+2358.558884289 I0227 02:05:37.793945 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:05:37.793928579 +0000 UTC m=+2358.585623207 I0227 02:05:37.817081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:05:37.817534 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:05:37.817524635 +0000 UTC m=+2358.609219263 I0227 02:05:37.824165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:05:37.838925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.096224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:08:08.096306 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-02-27 02:08:08.096288908 +0000 UTC m=+2508.887983536 I0227 02:08:08.096516 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-02-27 02:08:08.096489363 +0000 UTC m=+2508.888184011 E0227 02:08:08.108590 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0227 02:08:08.108672 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-02-27 02:08:08.108662545 +0000 UTC m=+2508.900357183 I0227 02:08:08.108703 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0227 02:08:08.114785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.114861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:08:08.114881 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-02-27 02:08:08.114876069 +0000 UTC m=+2508.906570677 E0227 02:08:08.117631 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0227 02:08:08.120317 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0227 02:08:08.120416 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0227 02:08:08.120472 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0227 02:08:08.180200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-2wczv" condition "Approved" to 2026-02-27 02:08:08.180190244 +0000 UTC m=+2508.971884842 I0227 02:08:08.202959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-2wczv" condition "Ready" to 2026-02-27 02:08:08.202951482 +0000 UTC m=+2508.994646070 I0227 02:08:08.230348 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:08.230336517 +0000 UTC m=+2509.022031125 I0227 02:08:08.247229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.247709 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:08.24769932 +0000 UTC m=+2509.039393958 I0227 02:08:08.277114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.277399 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:08.277392038 +0000 UTC m=+2509.069086646 I0227 02:08:08.720324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:08:08.720371 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-02-27 02:08:08.72035957 +0000 UTC m=+2509.512054208 I0227 02:08:08.720914 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-02-27 02:08:08.720898512 +0000 UTC m=+2509.512593110 E0227 02:08:08.732642 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0227 02:08:08.732677 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-02-27 02:08:08.732670015 +0000 UTC m=+2509.524364623 I0227 02:08:08.732721 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0227 02:08:08.735914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.736045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:08:08.736089 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-02-27 02:08:08.736066524 +0000 UTC m=+2509.527761132 E0227 02:08:08.750293 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0227 02:08:08.750632 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0227 02:08:08.750660 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0227 02:08:08.750707 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0227 02:08:08.777248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.785513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-kxq9l" condition "Approved" to 2026-02-27 02:08:08.78550489 +0000 UTC m=+2509.577199498 I0227 02:08:08.804734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-kxq9l" condition "Ready" to 2026-02-27 02:08:08.804721426 +0000 UTC m=+2509.596416024 I0227 02:08:08.827856 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:08.827841622 +0000 UTC m=+2509.619536230 I0227 02:08:08.852214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.852558 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:08.852548825 +0000 UTC m=+2509.644243443 I0227 02:08:08.870503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.871049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:08.871384 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:08.871376702 +0000 UTC m=+2509.663071310 I0227 02:08:09.415041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:08:09.415060 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-02-27 02:08:09.415036579 +0000 UTC m=+2510.206731227 I0227 02:08:09.415086 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-02-27 02:08:09.41507422 +0000 UTC m=+2510.206768848 I0227 02:08:09.430429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:09.430550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:08:09.430592 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-02-27 02:08:09.43058588 +0000 UTC m=+2510.222280468 I0227 02:08:09.483534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-5jkwz" condition "Approved" to 2026-02-27 02:08:09.483522717 +0000 UTC m=+2510.275217315 I0227 02:08:09.506170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-5jkwz" condition "Ready" to 2026-02-27 02:08:09.506155552 +0000 UTC m=+2510.297850160 I0227 02:08:13.118749 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:13.118735087 +0000 UTC m=+2513.910429725 I0227 02:08:13.133747 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-5jkwz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:13.133734044 +0000 UTC m=+2513.925428672 I0227 02:08:13.159253 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:13.159239276 +0000 UTC m=+2513.950933884 I0227 02:08:13.178191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:13.178450 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:13.178441911 +0000 UTC m=+2513.970136519 I0227 02:08:13.188847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:13.192319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:13.192793 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:13.192785174 +0000 UTC m=+2513.984479792 I0227 02:08:13.195484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:08:13.750639 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:08:13.75062256 +0000 UTC m=+2514.542317178 I0227 02:10:21.479384 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-02-27 02:10:21.479367352 +0000 UTC m=+2642.271061990 I0227 02:10:21.479837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:10:21.479879 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-02-27 02:10:21.479870324 +0000 UTC m=+2642.271564952 I0227 02:10:21.496508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:10:21.496599 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-02-27 02:10:21.496591172 +0000 UTC m=+2642.288285790 I0227 02:10:22.016080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:10:22.056905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-c57l8" condition "Approved" to 2026-02-27 02:10:22.056895235 +0000 UTC m=+2642.848589833 I0227 02:10:22.076985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-c57l8" condition "Ready" to 2026-02-27 02:10:22.076976151 +0000 UTC m=+2642.868670749 I0227 02:10:22.116488 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:10:22.116473907 +0000 UTC m=+2642.908168515 I0227 02:10:22.148515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:07.280394 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-02-27 02:11:07.280375754 +0000 UTC m=+2688.072070392 I0227 02:11:07.301082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:11:07.301118 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-02-27 02:11:07.301108985 +0000 UTC m=+2688.092803613 I0227 02:11:07.301255 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-02-27 02:11:07.301191687 +0000 UTC m=+2688.092886355 I0227 02:11:07.314958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:07.315051 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-02-27 02:11:07.315043768 +0000 UTC m=+2688.106738366 E0227 02:11:07.335518 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0227 02:11:07.389856 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-02-27 02:11:07.389838773 +0000 UTC m=+2688.181533421 I0227 02:11:07.405222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:11:07.405215 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-02-27 02:11:07.405194659 +0000 UTC m=+2688.196889287 I0227 02:11:07.405250 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-02-27 02:11:07.40524457 +0000 UTC m=+2688.196939178 I0227 02:11:07.420447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:07.420547 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-02-27 02:11:07.420535704 +0000 UTC m=+2688.212230342 E0227 02:11:07.495888 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0227 02:11:07.639629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:07.675425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-x2886" condition "Approved" to 2026-02-27 02:11:07.675401254 +0000 UTC m=+2688.467095862 I0227 02:11:07.707775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-x2886" condition "Ready" to 2026-02-27 02:11:07.707761534 +0000 UTC m=+2688.499456132 I0227 02:11:07.740772 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:11:07.740756929 +0000 UTC m=+2688.532451537 I0227 02:11:07.769225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:07.846988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:08.132538 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-02-27 02:11:08.132520725 +0000 UTC m=+2688.924215353 I0227 02:11:08.155347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:11:08.155384 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-02-27 02:11:08.155376154 +0000 UTC m=+2688.947070782 I0227 02:11:08.155868 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-02-27 02:11:08.155860646 +0000 UTC m=+2688.947555284 I0227 02:11:08.179462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:08.179519 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-02-27 02:11:08.179512224 +0000 UTC m=+2688.971206812 I0227 02:11:08.322954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:08.349656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-x7ztx" condition "Approved" to 2026-02-27 02:11:08.34964335 +0000 UTC m=+2689.141337958 I0227 02:11:08.371384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-x7ztx" condition "Ready" to 2026-02-27 02:11:08.371374034 +0000 UTC m=+2689.163068642 I0227 02:11:08.413350 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:11:08.413336277 +0000 UTC m=+2689.205030885 I0227 02:11:08.447459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:08.615471 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-02-27 02:11:08.615457023 +0000 UTC m=+2689.407151631 I0227 02:11:08.640130 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-02-27 02:11:08.640117386 +0000 UTC m=+2689.431811984 I0227 02:11:08.641330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:11:08.641401 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-02-27 02:11:08.641393035 +0000 UTC m=+2689.433087643 I0227 02:11:08.668866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:08.669064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:11:08.669136 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-02-27 02:11:08.669127208 +0000 UTC m=+2689.460821816 I0227 02:11:08.932991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rzstg" condition "Approved" to 2026-02-27 02:11:08.932972127 +0000 UTC m=+2689.724666755 I0227 02:11:08.964079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-rzstg" condition "Ready" to 2026-02-27 02:11:08.964064618 +0000 UTC m=+2689.755759246 I0227 02:11:09.013168 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:11:09.013157816 +0000 UTC m=+2689.804852414 I0227 02:11:09.043602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:09.044577 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:11:09.044564835 +0000 UTC m=+2689.836259463 I0227 02:11:09.103189 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-02-27 02:11:09.103173594 +0000 UTC m=+2689.894868202 I0227 02:11:09.124440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:11:09.124488 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-02-27 02:11:09.124477148 +0000 UTC m=+2689.916171756 I0227 02:11:09.123400 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-02-27 02:11:09.123379083 +0000 UTC m=+2689.915073681 I0227 02:11:09.245933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:09.396756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:09.398034 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-02-27 02:11:09.398019731 +0000 UTC m=+2690.189714339 I0227 02:11:09.858414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:09.902977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-k8n7z" condition "Approved" to 2026-02-27 02:11:09.902958471 +0000 UTC m=+2690.694653109 I0227 02:11:09.931288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-k8n7z" condition "Ready" to 2026-02-27 02:11:09.931277128 +0000 UTC m=+2690.722971726 I0227 02:11:10.343084 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:11:10.343066477 +0000 UTC m=+2691.134761115 I0227 02:11:10.493554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:10.494002 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:11:10.493991607 +0000 UTC m=+2691.285686245 I0227 02:11:10.741965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:11:10.852398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:14:12.379922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:14:12.379979 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-02-27 02:14:12.379951218 +0000 UTC m=+2873.171645826 I0227 02:14:12.380533 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-02-27 02:14:12.380527562 +0000 UTC m=+2873.172222170 I0227 02:14:12.393159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:14:12.393319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:14:12.393394 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-02-27 02:14:12.393386199 +0000 UTC m=+2873.185080837 I0227 02:14:12.673255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:14:12.686784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-7km2q" condition "Approved" to 2026-02-27 02:14:12.686769734 +0000 UTC m=+2873.478464332 I0227 02:14:12.729381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-7km2q" condition "Ready" to 2026-02-27 02:14:12.729365591 +0000 UTC m=+2873.521060199 I0227 02:14:12.761120 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:14:12.761108576 +0000 UTC m=+2873.552803174 I0227 02:14:12.794941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:14:15.031688 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-02-27 02:14:15.031661153 +0000 UTC m=+2875.823355781 I0227 02:14:15.032258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:14:15.032301 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-02-27 02:14:15.032290768 +0000 UTC m=+2875.823985406 I0227 02:14:15.049974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:14:15.050049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 02:14:15.050068 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-02-27 02:14:15.050061459 +0000 UTC m=+2875.841756067 I0227 02:14:15.220225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:14:15.223454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-x76pm" condition "Approved" to 2026-02-27 02:14:15.223428325 +0000 UTC m=+2876.015122923 I0227 02:14:15.255636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-x76pm" condition "Ready" to 2026-02-27 02:14:15.255618951 +0000 UTC m=+2876.047313549 I0227 02:14:15.289647 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:14:15.289625428 +0000 UTC m=+2876.081320026 I0227 02:14:15.311998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:14:15.312399 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 02:14:15.312388135 +0000 UTC m=+2876.104082743 I0227 02:14:15.322024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 02:14:15.341521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0227 02:15:19.119620 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0227 02:16:58.390145 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0227 02:17:14.055813 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0227 02:17:14.055956 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0227 02:17:28.620554 1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again I0227 02:17:28.621588 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0227 02:17:28.621629 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0227 02:17:28.621649 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0227 02:17:28.621673 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0227 02:17:28.621697 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0227 02:17:28.621712 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0227 02:17:28.621731 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0227 02:17:28.621746 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0227 02:17:28.621769 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0227 02:17:28.621791 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0227 02:17:28.621814 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0227 02:17:28.621836 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0227 02:17:28.621855 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0227 02:17:28.621873 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0227 02:17:28.621894 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0227 02:17:28.621909 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0227 02:17:28.621927 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0227 02:17:28.621944 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" E0227 02:17:28.622618 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"