I0423 09:52:51.909260 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0423 09:52:51.909349 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0423 09:52:51.909412 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0423 09:52:51.914765 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0423 09:52:51.915432 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0423 09:52:51.915782 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0423 09:52:51.916349 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0423 09:52:51.920435 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0423 09:52:51.940464 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0423 09:52:51.947140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0423 09:52:51.950590 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0423 09:52:51.950623 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0423 09:52:51.950632 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0423 09:52:51.950687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0423 09:52:51.953399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0423 09:52:51.960272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0423 09:52:51.962304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0423 09:52:51.965790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0423 09:52:51.967459 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0423 09:52:51.967490 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0423 09:52:51.967574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0423 09:52:51.969896 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0423 09:52:51.969982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0423 09:52:51.971781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0423 09:52:51.973710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0423 09:52:51.975838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0423 09:52:51.977993 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0423 09:52:51.979852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0423 09:52:51.984695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0423 09:52:51.987228 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0423 09:52:51.989781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0423 09:52:51.996254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0423 09:52:51.996332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0423 09:52:51.999564 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:51.999776 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:51.999954 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:52.000081 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:52.000206 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:52.000411 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:52.000720 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:52.001202 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:52.001809 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:52:52.114057 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 09:53:20.929843 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-23 09:53:20.929829604 +0000 UTC m=+29.053906031 I0423 09:53:21.761025 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 09:53:21.761007565 +0000 UTC m=+29.885084032 I0423 09:53:21.761792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:21.761876 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 09:53:21.761867605 +0000 UTC m=+29.885944052 E0423 09:53:21.776888 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 09:53:21.776937 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-23 09:53:21.776933287 +0000 UTC m=+29.901009714 E0423 09:53:21.776951 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 09:53:21.777404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:21.777443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:21.777456 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 09:53:21.777453668 +0000 UTC m=+29.901530095 E0423 09:53:21.791341 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0423 09:53:21.791382 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 09:53:21.791402 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 09:53:21.791433 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0423 09:53:21.822928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jrmpz" condition "Approved" to 2026-04-23 09:53:21.822916071 +0000 UTC m=+29.946992518 I0423 09:53:21.838900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jrmpz" condition "Ready" to 2026-04-23 09:53:21.838889643 +0000 UTC m=+29.962966070 I0423 09:53:21.862721 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:21.862709193 +0000 UTC m=+29.986785660 I0423 09:53:21.882435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:26.791754 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:26.791742868 +0000 UTC m=+34.915819295 I0423 09:53:27.729778 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-23 09:53:27.729759596 +0000 UTC m=+35.853836053 I0423 09:53:27.730327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:27.730462 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 09:53:27.7304364 +0000 UTC m=+35.854512837 I0423 09:53:27.791650 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-23 09:53:27.79163089 +0000 UTC m=+35.915707357 I0423 09:53:27.794030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:27.794097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:27.794122 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 09:53:27.794117584 +0000 UTC m=+35.918194021 I0423 09:53:28.865388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:28.881230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xnp2t" condition "Approved" to 2026-04-23 09:53:28.881219359 +0000 UTC m=+37.005295786 I0423 09:53:28.913874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xnp2t" condition "Ready" to 2026-04-23 09:53:28.913861321 +0000 UTC m=+37.037937758 I0423 09:53:28.941272 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:28.941252798 +0000 UTC m=+37.065329245 I0423 09:53:28.970990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:28.971518 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:28.971507978 +0000 UTC m=+37.095584415 I0423 09:53:28.993706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:28.993934 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:28.993928646 +0000 UTC m=+37.118005073 I0423 09:53:29.000974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:33.803653 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-23 09:53:33.803633209 +0000 UTC m=+41.927709676 I0423 09:53:33.803979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:33.804046 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-23 09:53:33.804034968 +0000 UTC m=+41.928111425 E0423 09:53:33.816656 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 09:53:33.816726 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-23 09:53:33.816717305 +0000 UTC m=+41.940793752 I0423 09:53:33.816780 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 09:53:33.824772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:33.824847 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-23 09:53:33.824839582 +0000 UTC m=+41.948916019 E0423 09:53:33.834000 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0423 09:53:33.834098 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 09:53:33.834156 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 09:53:33.834205 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0423 09:53:33.837785 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-23 09:53:33.837778454 +0000 UTC m=+41.961854881 I0423 09:53:33.837816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:33.837836 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-23 09:53:33.837830185 +0000 UTC m=+41.961906632 I0423 09:53:33.861797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:33.861861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:33.861885 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-23 09:53:33.861877559 +0000 UTC m=+41.985953996 I0423 09:53:33.977697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:34.110459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-7z4rp" condition "Approved" to 2026-04-23 09:53:34.110443449 +0000 UTC m=+42.234519876 E0423 09:53:34.118416 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"valkey-ca-nmdgx\" not found" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" I0423 09:53:34.119575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6hl7s" condition "Approved" to 2026-04-23 09:53:34.119563047 +0000 UTC m=+42.243639494 I0423 09:53:34.140664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-7z4rp" condition "Ready" to 2026-04-23 09:53:34.140648147 +0000 UTC m=+42.264724614 E0423 09:53:34.140755 1 selfsigned.go:127] "Referenced secret openstack/valkey-ca-kgx9v not found" err="secret \"valkey-ca-kgx9v\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="valkey-ca-7z4rp" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" I0423 09:53:34.150313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6hl7s" condition "Ready" to 2026-04-23 09:53:34.150292677 +0000 UTC m=+42.274369144 E0423 09:53:34.168577 1 selfsigned.go:127] "Referenced secret openstack/valkey-ca-kgx9v not found" err="secret \"valkey-ca-kgx9v\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="valkey-ca-7z4rp" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" I0423 09:53:34.290473 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" resource_name="valkey-ca" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="valkey-ca-7z4rp" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="valkey-ca-kgx9v" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" E0423 09:53:34.290943 1 selfsigned.go:187] "Error generating certificate template" err="CSR not signed by referenced private key" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="valkey-ca-7z4rp" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" E0423 09:53:34.332424 1 controller.go:167] "re-queuing item due to error processing" err="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"valkey-ca-7z4rp\": StorageError: invalid object, Code: 4, Key: /registry/cert-manager.io/certificaterequests/openstack/valkey-ca-7z4rp, ResourceVersion: 0, AdditionalErrorMsg: Precondition failed: UID in precondition: d24687ab-0fff-4976-b8c2-a08011886920, UID in object meta: " logger="cert-manager.certificaterequests-issuer-selfsigned" key="openstack/valkey-ca-7z4rp" I0423 09:53:34.351594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-m5pr9" condition "Approved" to 2026-04-23 09:53:34.351579505 +0000 UTC m=+42.475655942 I0423 09:53:34.366877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-m5pr9" condition "Ready" to 2026-04-23 09:53:34.366866528 +0000 UTC m=+42.490942965 I0423 09:53:34.473043 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-23 09:53:34.473028163 +0000 UTC m=+42.597104590 I0423 09:53:34.473131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:34.473174 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-23 09:53:34.473164885 +0000 UTC m=+42.597241322 I0423 09:53:34.523506 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:34.523494093 +0000 UTC m=+42.647570560 I0423 09:53:34.609724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:34.609820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:34.609842 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-23 09:53:34.609836345 +0000 UTC m=+42.733912782 I0423 09:53:34.717151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:34.717467 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:34.717461111 +0000 UTC m=+42.841537538 I0423 09:53:34.970127 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:34.97011393 +0000 UTC m=+43.094190357 I0423 09:53:35.111705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:35.165793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:35.179562 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-23 09:53:35.179546495 +0000 UTC m=+43.303622952 I0423 09:53:35.179709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:35.179725 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-23 09:53:35.179720099 +0000 UTC m=+43.303796566 I0423 09:53:35.214994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:35.461691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:35.461792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:53:35.461818 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-23 09:53:35.461811338 +0000 UTC m=+43.585887775 I0423 09:53:35.514732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:35.570200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-x4vc8" condition "Approved" to 2026-04-23 09:53:35.570184861 +0000 UTC m=+43.694261298 I0423 09:53:35.922765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-x4vc8" condition "Ready" to 2026-04-23 09:53:35.922754788 +0000 UTC m=+44.046831215 E0423 09:53:36.026369 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-vnc" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 09:53:36.026438 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-23 09:53:36.026426008 +0000 UTC m=+44.150502445 I0423 09:53:36.026503 1 sync.go:62] "Error initializing issuer: secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-vnc" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 09:53:36.281286 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-vnc" E0423 09:53:36.281419 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-vnc" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 09:53:36.281454 1 sync.go:62] "Error initializing issuer: secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-vnc" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 09:53:36.281508 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-vnc" I0423 09:53:36.465401 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:36.465386806 +0000 UTC m=+44.589463233 I0423 09:53:36.570449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-r8k2x" condition "Approved" to 2026-04-23 09:53:36.570433417 +0000 UTC m=+44.694509864 I0423 09:53:36.664812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" E0423 09:53:36.759346 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 09:53:36.759449 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-23 09:53:36.759434057 +0000 UTC m=+44.883510524 I0423 09:53:36.759648 1 sync.go:62] "Error initializing issuer: secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 09:53:37.072667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-r8k2x" condition "Ready" to 2026-04-23 09:53:37.072649225 +0000 UTC m=+45.196725692 E0423 09:53:37.219172 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-api" E0423 09:53:37.219289 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 09:53:37.219329 1 sync.go:62] "Error initializing issuer: secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 09:53:37.219375 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-api" I0423 09:53:37.613270 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:37.613257441 +0000 UTC m=+45.737333878 I0423 09:53:37.898796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:38.063818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:38.364196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:38.834395 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:38.834385182 +0000 UTC m=+46.958461619 I0423 09:53:38.848067 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-6hl7s" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:38.84804228 +0000 UTC m=+46.972118717 I0423 09:53:38.883567 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:38.883531344 +0000 UTC m=+47.007607781 I0423 09:53:38.909783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:39.064099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:53:41.282148 1 conditions.go:85] Found status change for Issuer "libvirt-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:41.282134224 +0000 UTC m=+49.406210681 I0423 09:53:42.219958 1 conditions.go:85] Found status change for Issuer "libvirt-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:53:42.219939618 +0000 UTC m=+50.344016085 I0423 09:57:30.005545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-90.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:57:30.005624 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-90.nip.io-tls" condition "Issuing" to 2026-04-23 09:57:30.005613806 +0000 UTC m=+278.129690273 I0423 09:57:30.005724 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-90.nip.io-tls" condition "Ready" to 2026-04-23 09:57:30.005594125 +0000 UTC m=+278.129670602 I0423 09:57:30.026324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-90.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-90.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:57:30.026475 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-90.nip.io-tls" condition "Ready" to 2026-04-23 09:57:30.026459826 +0000 UTC m=+278.150536303 I0423 09:57:30.305013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-90.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-90.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:57:30.333097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-90.nip.io-tls-dztz6" condition "Approved" to 2026-04-23 09:57:30.33308516 +0000 UTC m=+278.457161587 I0423 09:57:30.355894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-90.nip.io-tls-dztz6" condition "Ready" to 2026-04-23 09:57:30.355882834 +0000 UTC m=+278.479959301 I0423 09:57:30.380470 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-90.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:57:30.380451805 +0000 UTC m=+278.504528272 I0423 09:57:30.399545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-90.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-90.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:57:30.399916 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-90.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:57:30.399907956 +0000 UTC m=+278.523984393 I0423 09:57:30.417988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-90.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-90.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:57:30.433999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-90.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-90.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:57:30.434433 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-90.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:57:30.434422483 +0000 UTC m=+278.558498940 I0423 09:58:41.212980 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:58:41.213029 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 09:58:41.213013893 +0000 UTC m=+349.337090350 I0423 09:58:41.213193 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 09:58:41.213168407 +0000 UTC m=+349.337244864 E0423 09:58:41.225963 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 09:58:41.226016 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-23 09:58:41.226005163 +0000 UTC m=+349.350081630 E0423 09:58:41.226081 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 09:58:41.227929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:58:41.228004 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 09:58:41.227996476 +0000 UTC m=+349.352072923 E0423 09:58:41.238861 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0423 09:58:41.238934 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 09:58:41.238962 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 09:58:41.238994 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0423 09:58:41.245495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:58:41.265802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pvktm" condition "Approved" to 2026-04-23 09:58:41.265786829 +0000 UTC m=+349.389863286 I0423 09:58:41.300684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pvktm" condition "Ready" to 2026-04-23 09:58:41.300665111 +0000 UTC m=+349.424741578 I0423 09:58:41.325255 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:58:41.325245711 +0000 UTC m=+349.449322128 I0423 09:58:41.345666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:58:41.387097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:58:46.239385 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:58:46.239369202 +0000 UTC m=+354.363445669 I0423 09:59:25.945257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:25.945289 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 09:59:25.945283003 +0000 UTC m=+394.069359440 I0423 09:59:25.945380 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 09:59:25.945364735 +0000 UTC m=+394.069441182 I0423 09:59:25.945415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:25.945432 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 09:59:25.945427416 +0000 UTC m=+394.069503853 I0423 09:59:25.945577 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 09:59:25.945572339 +0000 UTC m=+394.069648786 I0423 09:59:25.951584 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:25.951630 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 09:59:25.951622518 +0000 UTC m=+394.075698955 I0423 09:59:25.952336 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 09:59:25.952330063 +0000 UTC m=+394.076406500 I0423 09:59:25.969334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:25.969384 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 09:59:25.969378058 +0000 UTC m=+394.093454495 I0423 09:59:25.976203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:25.976255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:25.976274 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 09:59:25.976269766 +0000 UTC m=+394.100346203 I0423 09:59:25.976843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:25.976879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:25.976897 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 09:59:25.976893049 +0000 UTC m=+394.100969486 I0423 09:59:26.179431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:26.206391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-htzjz" condition "Approved" to 2026-04-23 09:59:26.206374312 +0000 UTC m=+394.330450769 I0423 09:59:26.237098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:26.262065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-htzjz" condition "Ready" to 2026-04-23 09:59:26.262055464 +0000 UTC m=+394.386131881 I0423 09:59:26.267300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k6xg6" condition "Approved" to 2026-04-23 09:59:26.267292287 +0000 UTC m=+394.391368714 I0423 09:59:26.283716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k6xg6" condition "Ready" to 2026-04-23 09:59:26.283704997 +0000 UTC m=+394.407781434 I0423 09:59:26.297572 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:26.297558594 +0000 UTC m=+394.421635031 I0423 09:59:26.316787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:26.317493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:26.317952 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:26.317941051 +0000 UTC m=+394.442017468 I0423 09:59:26.324819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4j8th" condition "Approved" to 2026-04-23 09:59:26.324801947 +0000 UTC m=+394.448878404 I0423 09:59:26.406752 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:26.406742531 +0000 UTC m=+394.530818958 I0423 09:59:26.481202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:26.689541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4j8th" condition "Ready" to 2026-04-23 09:59:26.689529655 +0000 UTC m=+394.813606082 I0423 09:59:26.931883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:26.932427 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:26.932418425 +0000 UTC m=+395.056494882 I0423 09:59:27.369541 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:27.369527313 +0000 UTC m=+395.493603770 I0423 09:59:27.381331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:27.481795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:27.482162 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:27.482154704 +0000 UTC m=+395.606231141 I0423 09:59:27.730165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:32.668454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:32.668479 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" condition "Issuing" to 2026-04-23 09:59:32.668473351 +0000 UTC m=+400.792549778 I0423 09:59:32.668860 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" condition "Ready" to 2026-04-23 09:59:32.668855959 +0000 UTC m=+400.792932386 I0423 09:59:32.687236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ks98p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:32.687308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:32.687327 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" condition "Issuing" to 2026-04-23 09:59:32.687322624 +0000 UTC m=+400.811399051 I0423 09:59:32.870354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ks98p-62xp4" condition "Approved" to 2026-04-23 09:59:32.870339313 +0000 UTC m=+400.994415780 I0423 09:59:32.917665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ks98p-62xp4" condition "Ready" to 2026-04-23 09:59:32.917628095 +0000 UTC m=+401.041704562 I0423 09:59:33.105229 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:33.1052113 +0000 UTC m=+401.229287737 I0423 09:59:33.129212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ks98p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:33.129577 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:33.129567042 +0000 UTC m=+401.253643479 I0423 09:59:33.142227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ks98p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:33.142572 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ks98p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:33.14256298 +0000 UTC m=+401.266639427 I0423 09:59:44.244669 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-23 09:59:44.244651795 +0000 UTC m=+412.368728232 I0423 09:59:44.244690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:44.244808 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 09:59:44.244798628 +0000 UTC m=+412.368875075 I0423 09:59:44.259626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:44.259711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 09:59:44.259743 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 09:59:44.259736537 +0000 UTC m=+412.383812974 I0423 09:59:44.486527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dgtm9" condition "Approved" to 2026-04-23 09:59:44.486509982 +0000 UTC m=+412.610586429 I0423 09:59:44.507953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dgtm9" condition "Ready" to 2026-04-23 09:59:44.507941191 +0000 UTC m=+412.632017628 I0423 09:59:44.537577 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:44.537565995 +0000 UTC m=+412.661642422 I0423 09:59:44.555623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:44.555992 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:44.555982259 +0000 UTC m=+412.680058706 I0423 09:59:44.574002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 09:59:44.574259 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 09:59:44.574252131 +0000 UTC m=+412.698328558 I0423 10:01:08.971978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:01:08.971989 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 10:01:08.971970144 +0000 UTC m=+497.096046611 I0423 10:01:08.972010 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 10:01:08.972002744 +0000 UTC m=+497.096079181 I0423 10:01:08.986170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:01:08.986237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:01:08.986253 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 10:01:08.986247958 +0000 UTC m=+497.110324385 I0423 10:01:09.338093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xrfgq" condition "Approved" to 2026-04-23 10:01:09.338077926 +0000 UTC m=+497.462154373 I0423 10:01:09.359643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xrfgq" condition "Ready" to 2026-04-23 10:01:09.359627905 +0000 UTC m=+497.483704362 I0423 10:01:09.388940 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:01:09.388926921 +0000 UTC m=+497.513003358 I0423 10:01:09.408055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:01:09.408307 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:01:09.408300624 +0000 UTC m=+497.532377061 I0423 10:01:09.429044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:02:11.494032 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 10:02:11.494013755 +0000 UTC m=+559.618090182 I0423 10:02:11.494632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:02:11.494676 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-23 10:02:11.49466512 +0000 UTC m=+559.618741557 I0423 10:02:11.639060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:02:11.639186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:02:11.639215 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-23 10:02:11.639206597 +0000 UTC m=+559.763283034 I0423 10:02:11.874288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pml8x" condition "Approved" to 2026-04-23 10:02:11.87427042 +0000 UTC m=+559.998346857 I0423 10:02:11.897736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-pml8x" condition "Ready" to 2026-04-23 10:02:11.8977226 +0000 UTC m=+560.021799037 I0423 10:02:11.944855 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:02:11.944840087 +0000 UTC m=+560.068916534 I0423 10:02:11.966386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:02:11.966793 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:02:11.966780696 +0000 UTC m=+560.090857133 I0423 10:02:12.002629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:02:12.002885 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:02:12.002873628 +0000 UTC m=+560.126950075 I0423 10:02:27.153282 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-23 10:02:27.15326749 +0000 UTC m=+575.277343917 I0423 10:02:27.153960 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:02:27.153985 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-23 10:02:27.153980805 +0000 UTC m=+575.278057232 I0423 10:02:27.173675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:02:27.173780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:02:27.173806 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-23 10:02:27.173796899 +0000 UTC m=+575.297873326 I0423 10:02:27.431903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fnhpk" condition "Approved" to 2026-04-23 10:02:27.431889914 +0000 UTC m=+575.555966331 I0423 10:02:27.457723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fnhpk" condition "Ready" to 2026-04-23 10:02:27.457704195 +0000 UTC m=+575.581780622 I0423 10:02:27.493602 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:02:27.493578472 +0000 UTC m=+575.617654929 I0423 10:02:27.516217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:02:27.516445 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:02:27.51643669 +0000 UTC m=+575.640513107 I0423 10:02:27.533368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:02:27.533727 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:02:27.533717659 +0000 UTC m=+575.657794086 I0423 10:03:08.418224 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-23 10:03:08.418205953 +0000 UTC m=+616.542282380 I0423 10:03:08.418525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:03:08.418567 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-23 10:03:08.418558641 +0000 UTC m=+616.542635068 I0423 10:03:08.445411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:03:08.445470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:03:08.445488 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-23 10:03:08.445481896 +0000 UTC m=+616.569558323 I0423 10:03:08.632994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:03:08.642121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-x8qmc" condition "Approved" to 2026-04-23 10:03:08.642113157 +0000 UTC m=+616.766189584 I0423 10:03:08.675225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-x8qmc" condition "Ready" to 2026-04-23 10:03:08.675214054 +0000 UTC m=+616.799290481 I0423 10:03:08.704077 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:03:08.70406115 +0000 UTC m=+616.828137587 I0423 10:03:08.735837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:03:08.737404 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:03:08.736555955 +0000 UTC m=+616.860632392 I0423 10:03:08.758304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:03:08.758722 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:03:08.758711028 +0000 UTC m=+616.882787455 I0423 10:03:08.762150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:04:15.988496 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-23 10:04:15.98848098 +0000 UTC m=+684.112557407 I0423 10:04:15.988615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:04:15.988766 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-23 10:04:15.988699065 +0000 UTC m=+684.112775502 I0423 10:04:16.011944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:04:16.012098 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-23 10:04:16.012085502 +0000 UTC m=+684.136161959 I0423 10:04:16.120457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:04:16.150556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-clvcv" condition "Approved" to 2026-04-23 10:04:16.150541031 +0000 UTC m=+684.274617458 I0423 10:04:16.168043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-clvcv" condition "Ready" to 2026-04-23 10:04:16.168031253 +0000 UTC m=+684.292107680 I0423 10:04:16.211776 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:04:16.211754784 +0000 UTC m=+684.335831221 I0423 10:04:16.233694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:04:16.234140 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:04:16.234130581 +0000 UTC m=+684.358207028 I0423 10:04:16.239543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:04:16.263818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:04:42.428145 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-23 10:04:42.428125327 +0000 UTC m=+710.552201764 I0423 10:04:42.428441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:04:42.428476 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-23 10:04:42.428469474 +0000 UTC m=+710.552545901 I0423 10:04:42.443382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:04:42.443456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:04:42.443479 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-23 10:04:42.443471033 +0000 UTC m=+710.567547460 I0423 10:04:42.823353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-drld7" condition "Approved" to 2026-04-23 10:04:42.823317891 +0000 UTC m=+710.947394318 I0423 10:04:42.846494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-drld7" condition "Ready" to 2026-04-23 10:04:42.846477644 +0000 UTC m=+710.970554111 I0423 10:04:42.880496 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:04:42.880475348 +0000 UTC m=+711.004551805 I0423 10:04:42.909698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:04:42.910291 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:04:42.910282043 +0000 UTC m=+711.034358490 I0423 10:04:42.934336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:35.129003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:05:35.129040 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-23 10:05:35.129031646 +0000 UTC m=+763.253108073 I0423 10:05:35.129046 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-23 10:05:35.129030236 +0000 UTC m=+763.253106673 I0423 10:05:35.143163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:35.143264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:05:35.143292 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-23 10:05:35.143285138 +0000 UTC m=+763.267361575 I0423 10:05:35.384473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-w8j6j" condition "Approved" to 2026-04-23 10:05:35.384456022 +0000 UTC m=+763.508532459 I0423 10:05:35.402418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-w8j6j" condition "Ready" to 2026-04-23 10:05:35.402405961 +0000 UTC m=+763.526482398 I0423 10:05:35.433513 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:05:35.433504369 +0000 UTC m=+763.557580796 I0423 10:05:35.455225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:35.455455 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:05:35.455449444 +0000 UTC m=+763.579525871 I0423 10:05:35.472256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:35.472599 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:05:35.472588647 +0000 UTC m=+763.596665084 I0423 10:05:36.516436 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-23 10:05:36.516423189 +0000 UTC m=+764.640499626 I0423 10:05:36.516566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:05:36.516768 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-23 10:05:36.516750066 +0000 UTC m=+764.640826533 I0423 10:05:36.537728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:36.537842 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-23 10:05:36.537828361 +0000 UTC m=+764.661904828 I0423 10:05:36.818098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:36.848993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-8zvs2" condition "Approved" to 2026-04-23 10:05:36.848979047 +0000 UTC m=+764.973055504 I0423 10:05:36.874906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-8zvs2" condition "Ready" to 2026-04-23 10:05:36.874892946 +0000 UTC m=+764.998969383 I0423 10:05:36.903564 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:05:36.903521641 +0000 UTC m=+765.027598078 I0423 10:05:36.928392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:36.928991 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:05:36.92897886 +0000 UTC m=+765.053055297 I0423 10:05:36.933418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:36.943335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:05:36.944243 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:05:36.944234453 +0000 UTC m=+765.068310890 I0423 10:06:46.205957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:06:46.205994 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-23 10:06:46.20598639 +0000 UTC m=+834.330062827 I0423 10:06:46.206597 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-23 10:06:46.206586222 +0000 UTC m=+834.330662659 I0423 10:06:46.220833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:06:46.220908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:06:46.220928 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-23 10:06:46.220920834 +0000 UTC m=+834.344997281 I0423 10:06:46.375882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:06:46.383262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-6cktv" condition "Approved" to 2026-04-23 10:06:46.383251381 +0000 UTC m=+834.507327808 I0423 10:06:46.403066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-6cktv" condition "Ready" to 2026-04-23 10:06:46.403057389 +0000 UTC m=+834.527133816 I0423 10:06:46.425679 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:06:46.425668477 +0000 UTC m=+834.549744914 I0423 10:06:46.441213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:06:46.493870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:34.265463 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-23 10:07:34.265451 +0000 UTC m=+882.389527427 I0423 10:07:34.265726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:07:34.265741 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-23 10:07:34.265738747 +0000 UTC m=+882.389815174 I0423 10:07:34.308190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:34.308252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:07:34.308270 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-23 10:07:34.308263137 +0000 UTC m=+882.432339574 I0423 10:07:36.385585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:36.406056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-l5bhh" condition "Approved" to 2026-04-23 10:07:36.40603786 +0000 UTC m=+884.530114307 I0423 10:07:36.430246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-l5bhh" condition "Ready" to 2026-04-23 10:07:36.430236062 +0000 UTC m=+884.554312489 I0423 10:07:36.467278 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:36.467267475 +0000 UTC m=+884.591343902 I0423 10:07:36.493338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:36.494070 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:36.494059793 +0000 UTC m=+884.618136260 I0423 10:07:36.514829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:40.745532 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-23 10:07:40.745517474 +0000 UTC m=+888.869593911 I0423 10:07:40.762388 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-23 10:07:40.762375471 +0000 UTC m=+888.886451908 I0423 10:07:40.762394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:07:40.762590 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-23 10:07:40.762569235 +0000 UTC m=+888.886645712 I0423 10:07:40.778210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:40.778320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:07:40.778353 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-23 10:07:40.778342548 +0000 UTC m=+888.902419005 E0423 10:07:40.792574 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0423 10:07:40.845504 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-23 10:07:40.8454798 +0000 UTC m=+888.969556267 I0423 10:07:40.863803 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-23 10:07:40.863784597 +0000 UTC m=+888.987861084 I0423 10:07:40.863850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:07:40.863883 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-23 10:07:40.863874699 +0000 UTC m=+888.987951166 I0423 10:07:40.879146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:40.879237 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-23 10:07:40.879229504 +0000 UTC m=+889.003305941 E0423 10:07:41.101599 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0423 10:07:41.121695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:41.161051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-j6pmv" condition "Approved" to 2026-04-23 10:07:41.161036821 +0000 UTC m=+889.285113248 I0423 10:07:41.203228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-j6pmv" condition "Ready" to 2026-04-23 10:07:41.203217734 +0000 UTC m=+889.327294161 I0423 10:07:41.252048 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:41.252036627 +0000 UTC m=+889.376113054 I0423 10:07:41.281208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:41.281437 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:41.28143129 +0000 UTC m=+889.405507717 I0423 10:07:41.290422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:41.304017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:41.602093 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-23 10:07:41.602074138 +0000 UTC m=+889.726150595 I0423 10:07:41.625031 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:07:41.625069 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-23 10:07:41.625062215 +0000 UTC m=+889.749138652 I0423 10:07:41.625116 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-23 10:07:41.625098766 +0000 UTC m=+889.749175203 I0423 10:07:41.645075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:41.645167 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-23 10:07:41.645159201 +0000 UTC m=+889.769235638 I0423 10:07:41.932037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:41.996639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lmdrf" condition "Approved" to 2026-04-23 10:07:41.996624941 +0000 UTC m=+890.120701368 I0423 10:07:42.016542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lmdrf" condition "Ready" to 2026-04-23 10:07:42.016527042 +0000 UTC m=+890.140603479 I0423 10:07:42.023997 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-23 10:07:42.023982951 +0000 UTC m=+890.148059388 I0423 10:07:42.044243 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:42.044227869 +0000 UTC m=+890.168304316 I0423 10:07:42.047840 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-23 10:07:42.047826936 +0000 UTC m=+890.171903403 I0423 10:07:42.048260 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:07:42.048280 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-23 10:07:42.048276015 +0000 UTC m=+890.172352452 I0423 10:07:42.064588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:42.064658 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-23 10:07:42.064651982 +0000 UTC m=+890.188728409 I0423 10:07:42.065341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:42.065547 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:42.065544441 +0000 UTC m=+890.189620858 I0423 10:07:42.073272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:42.088325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:42.088966 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:42.088957066 +0000 UTC m=+890.213033503 I0423 10:07:42.092662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:42.377564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:42.413612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lzbm2" condition "Approved" to 2026-04-23 10:07:42.413598079 +0000 UTC m=+890.537674506 I0423 10:07:42.451967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lzbm2" condition "Ready" to 2026-04-23 10:07:42.451956502 +0000 UTC m=+890.576032929 I0423 10:07:42.494349 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-23 10:07:42.494329569 +0000 UTC m=+890.618406036 I0423 10:07:42.520644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:07:42.520679 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-23 10:07:42.520672116 +0000 UTC m=+890.644748543 I0423 10:07:42.520910 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-23 10:07:42.520906081 +0000 UTC m=+890.644982508 I0423 10:07:42.752529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:42.752697 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-23 10:07:42.752686668 +0000 UTC m=+890.876763135 I0423 10:07:42.821469 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:42.821452505 +0000 UTC m=+890.945528942 I0423 10:07:43.055405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:43.055822 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:43.055815206 +0000 UTC m=+891.179891643 I0423 10:07:43.206907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:43.318401 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:43.318349155 +0000 UTC m=+891.442425622 I0423 10:07:43.356055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:43.459960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:43.558651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-nvdn8" condition "Approved" to 2026-04-23 10:07:43.558638732 +0000 UTC m=+891.682715149 I0423 10:07:43.601286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:43.974004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-nvdn8" condition "Ready" to 2026-04-23 10:07:43.973989656 +0000 UTC m=+892.098066113 I0423 10:07:44.210937 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:44.210923952 +0000 UTC m=+892.335000389 I0423 10:07:44.311169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:07:44.311432 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:07:44.31142624 +0000 UTC m=+892.435502667 I0423 10:07:44.560868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:20.074749 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-23 10:10:20.074710649 +0000 UTC m=+1048.198787106 I0423 10:10:20.075486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:10:20.075604 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-23 10:10:20.075594437 +0000 UTC m=+1048.199670904 I0423 10:10:20.115457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:20.115568 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-23 10:10:20.115559676 +0000 UTC m=+1048.239636113 I0423 10:10:20.392482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:20.509264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-gxnls" condition "Approved" to 2026-04-23 10:10:20.509253296 +0000 UTC m=+1048.633329733 I0423 10:10:20.573790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-gxnls" condition "Ready" to 2026-04-23 10:10:20.573772565 +0000 UTC m=+1048.697849022 I0423 10:10:20.650510 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:10:20.650498533 +0000 UTC m=+1048.774574970 I0423 10:10:20.694392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:20.695168 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:10:20.69515198 +0000 UTC m=+1048.819228447 I0423 10:10:20.702039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:20.749310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:20.750031 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:10:20.750018993 +0000 UTC m=+1048.874095450 I0423 10:10:21.470790 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-23 10:10:21.470769492 +0000 UTC m=+1049.594845949 I0423 10:10:21.471061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:10:21.471113 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-23 10:10:21.47110013 +0000 UTC m=+1049.595176597 I0423 10:10:21.498035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:21.498262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:10:21.498351 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-23 10:10:21.498338487 +0000 UTC m=+1049.622414954 I0423 10:10:21.623551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:21.628290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-9pb87" condition "Approved" to 2026-04-23 10:10:21.628280054 +0000 UTC m=+1049.752356491 I0423 10:10:21.642878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-9pb87" condition "Ready" to 2026-04-23 10:10:21.642869693 +0000 UTC m=+1049.766946120 I0423 10:10:21.670149 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:10:21.670136362 +0000 UTC m=+1049.794212799 I0423 10:10:21.690562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:10:21.736927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:11:14.801270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:11:14.801268 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-23 10:11:14.801256586 +0000 UTC m=+1102.925333063 I0423 10:11:14.801305 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-23 10:11:14.801299617 +0000 UTC m=+1102.925376054 I0423 10:11:14.815053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:11:14.815203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:11:14.815280 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-23 10:11:14.815272734 +0000 UTC m=+1102.939349171 I0423 10:11:15.013438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-b2gmp" condition "Approved" to 2026-04-23 10:11:15.013427077 +0000 UTC m=+1103.137503504 I0423 10:11:15.040294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-b2gmp" condition "Ready" to 2026-04-23 10:11:15.040273887 +0000 UTC m=+1103.164350334 I0423 10:11:15.081929 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:11:15.081913273 +0000 UTC m=+1103.205989700 I0423 10:11:15.109315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:11:15.109728 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:11:15.109718764 +0000 UTC m=+1103.233795201 I0423 10:11:15.137983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:11:17.292672 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-23 10:11:17.292661314 +0000 UTC m=+1105.416737731 I0423 10:11:17.292880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:11:17.292890 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-23 10:11:17.292888129 +0000 UTC m=+1105.416964556 I0423 10:11:17.314503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:11:17.314726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:11:17.314768 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-23 10:11:17.314761604 +0000 UTC m=+1105.438838051 I0423 10:11:17.622297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-j8pxh" condition "Approved" to 2026-04-23 10:11:17.622283122 +0000 UTC m=+1105.746359549 I0423 10:11:17.647139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-j8pxh" condition "Ready" to 2026-04-23 10:11:17.64712735 +0000 UTC m=+1105.771203777 I0423 10:11:17.671458 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:11:17.671447457 +0000 UTC m=+1105.795523884 I0423 10:11:17.694792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:04.285155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:15:04.285230 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-23 10:15:04.285220822 +0000 UTC m=+1332.409297279 I0423 10:15:04.285270 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-23 10:15:04.285254213 +0000 UTC m=+1332.409330650 I0423 10:15:04.301341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:04.301400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:15:04.301413 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-23 10:15:04.301407276 +0000 UTC m=+1332.425483713 I0423 10:15:04.419817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:04.431329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-xcbbp" condition "Approved" to 2026-04-23 10:15:04.43131437 +0000 UTC m=+1332.555390827 I0423 10:15:04.450110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-xcbbp" condition "Ready" to 2026-04-23 10:15:04.450097099 +0000 UTC m=+1332.574173536 I0423 10:15:04.485001 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:15:04.484988169 +0000 UTC m=+1332.609064616 I0423 10:15:04.504347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:04.504777 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:15:04.504770469 +0000 UTC m=+1332.628846906 I0423 10:15:04.526241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:04.532936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:17.768169 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gqlhl-vnc" condition "Ready" to 2026-04-23 10:15:17.76815462 +0000 UTC m=+1345.892231057 I0423 10:15:17.768537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gqlhl-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:15:17.768557 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gqlhl-vnc" condition "Issuing" to 2026-04-23 10:15:17.768553408 +0000 UTC m=+1345.892629845 I0423 10:15:17.769021 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gqlhl-api" condition "Ready" to 2026-04-23 10:15:17.769016309 +0000 UTC m=+1345.893092746 I0423 10:15:17.769209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gqlhl-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:15:17.769239 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gqlhl-api" condition "Issuing" to 2026-04-23 10:15:17.769235333 +0000 UTC m=+1345.893311760 I0423 10:15:17.789983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gqlhl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gqlhl-api\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:17.790053 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gqlhl-api" condition "Ready" to 2026-04-23 10:15:17.790047424 +0000 UTC m=+1345.914123851 I0423 10:15:17.793225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gqlhl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gqlhl-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:17.793273 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gqlhl-vnc" condition "Ready" to 2026-04-23 10:15:17.793269053 +0000 UTC m=+1345.917345480 I0423 10:15:17.985047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gqlhl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gqlhl-api\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:18.021333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gqlhl-api-glbx2" condition "Approved" to 2026-04-23 10:15:18.021320179 +0000 UTC m=+1346.145396616 I0423 10:15:18.042209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gqlhl-api-glbx2" condition "Ready" to 2026-04-23 10:15:18.042198772 +0000 UTC m=+1346.166275189 I0423 10:15:18.075667 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gqlhl-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:15:18.075652561 +0000 UTC m=+1346.199729018 I0423 10:15:18.081064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gqlhl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gqlhl-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:18.096605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gqlhl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gqlhl-api\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:18.097550 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gqlhl-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:15:18.097536905 +0000 UTC m=+1346.221613372 I0423 10:15:18.113048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gqlhl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gqlhl-api\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:18.113434 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gqlhl-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:15:18.113426573 +0000 UTC m=+1346.237503000 I0423 10:15:18.116382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gqlhl-vnc-92hj8" condition "Approved" to 2026-04-23 10:15:18.116365905 +0000 UTC m=+1346.240442372 I0423 10:15:18.133106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gqlhl-vnc-92hj8" condition "Ready" to 2026-04-23 10:15:18.133094529 +0000 UTC m=+1346.257170976 I0423 10:15:18.171866 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gqlhl-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:15:18.17183515 +0000 UTC m=+1346.295911577 I0423 10:15:18.190366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-gqlhl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gqlhl-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:15:18.240110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gqlhl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gqlhl-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:00.222733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:18:00.222850 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-23 10:18:00.222835499 +0000 UTC m=+1508.346911966 I0423 10:18:00.222830 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-23 10:18:00.222817338 +0000 UTC m=+1508.346893805 E0423 10:18:00.240498 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 10:18:00.240564 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-23 10:18:00.240556786 +0000 UTC m=+1508.364633223 I0423 10:18:00.241645 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 10:18:00.242413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:00.242550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:18:00.242583 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-23 10:18:00.242573998 +0000 UTC m=+1508.366650455 E0423 10:18:00.255098 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0423 10:18:00.255214 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 10:18:00.255268 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 10:18:00.255304 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0423 10:18:00.298165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-5h6zl" condition "Approved" to 2026-04-23 10:18:00.298147759 +0000 UTC m=+1508.422224226 I0423 10:18:00.315833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-5h6zl" condition "Ready" to 2026-04-23 10:18:00.315821355 +0000 UTC m=+1508.439897792 I0423 10:18:00.340118 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:00.34010274 +0000 UTC m=+1508.464179207 I0423 10:18:00.370251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:00.371879 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:00.371871246 +0000 UTC m=+1508.495947683 I0423 10:18:00.377233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:00.399903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:00.400387 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:00.400375441 +0000 UTC m=+1508.524451868 I0423 10:18:00.403836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:01.001813 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-23 10:18:01.001795631 +0000 UTC m=+1509.125872108 I0423 10:18:01.002200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:18:01.002224 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-23 10:18:01.00221792 +0000 UTC m=+1509.126294407 E0423 10:18:01.015466 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 10:18:01.015501 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-23 10:18:01.015494222 +0000 UTC m=+1509.139570679 I0423 10:18:01.015575 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 10:18:01.020649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:01.020712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:18:01.020733 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-23 10:18:01.020727393 +0000 UTC m=+1509.144803850 E0423 10:18:01.026625 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0423 10:18:01.026687 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 10:18:01.026714 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 10:18:01.026751 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0423 10:18:01.072405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-lxcjv" condition "Approved" to 2026-04-23 10:18:01.072383941 +0000 UTC m=+1509.196460408 I0423 10:18:01.086305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-lxcjv" condition "Ready" to 2026-04-23 10:18:01.086290717 +0000 UTC m=+1509.210367164 I0423 10:18:01.112299 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:01.112283059 +0000 UTC m=+1509.236359496 I0423 10:18:01.135468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:01.135886 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:01.13587732 +0000 UTC m=+1509.259953757 I0423 10:18:01.145529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:01.160904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:01.851359 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-23 10:18:01.851335143 +0000 UTC m=+1509.975411620 I0423 10:18:01.851685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:18:01.851762 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-23 10:18:01.851742022 +0000 UTC m=+1509.975818489 I0423 10:18:01.870052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:01.870145 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:18:01.870172 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-23 10:18:01.870163583 +0000 UTC m=+1509.994240020 I0423 10:18:01.921474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-h4h6f" condition "Approved" to 2026-04-23 10:18:01.921456773 +0000 UTC m=+1510.045533210 I0423 10:18:01.941987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-h4h6f" condition "Ready" to 2026-04-23 10:18:01.941976109 +0000 UTC m=+1510.066052536 I0423 10:18:05.256038 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:05.256021399 +0000 UTC m=+1513.380097866 I0423 10:18:05.276663 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-h4h6f" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:05.276649187 +0000 UTC m=+1513.400725634 I0423 10:18:05.325403 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:05.325391723 +0000 UTC m=+1513.449468150 I0423 10:18:05.352909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:05.353294 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:05.353271476 +0000 UTC m=+1513.477347913 I0423 10:18:05.387844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:05.388193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:18:06.027478 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:18:06.027464882 +0000 UTC m=+1514.151541349 I0423 10:19:29.664093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:19:29.664151 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-23 10:19:29.664138078 +0000 UTC m=+1597.788214595 I0423 10:19:29.664917 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-23 10:19:29.664904834 +0000 UTC m=+1597.788981311 I0423 10:19:29.685808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:19:29.685973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:19:29.686006 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-23 10:19:29.685997953 +0000 UTC m=+1597.810074390 I0423 10:19:29.840326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-gkp7r" condition "Approved" to 2026-04-23 10:19:29.840313299 +0000 UTC m=+1597.964389746 I0423 10:19:29.857041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-gkp7r" condition "Ready" to 2026-04-23 10:19:29.857032354 +0000 UTC m=+1597.981108781 I0423 10:19:29.888601 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:19:29.888589844 +0000 UTC m=+1598.012666281 I0423 10:19:29.911334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:19:29.973553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:20:41.824509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 10:20:41.824548 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-23 10:20:41.824541895 +0000 UTC m=+1669.948618322 I0423 10:20:41.824773 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-23 10:20:41.824766509 +0000 UTC m=+1669.948842946 I0423 10:20:41.839495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:20:41.839641 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-23 10:20:41.839633735 +0000 UTC m=+1669.963710182 I0423 10:20:42.061282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:20:42.096299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-cjjtm" condition "Approved" to 2026-04-23 10:20:42.096284411 +0000 UTC m=+1670.220360848 I0423 10:20:42.121824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-cjjtm" condition "Ready" to 2026-04-23 10:20:42.121814292 +0000 UTC m=+1670.245890719 I0423 10:20:42.167981 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:20:42.167970292 +0000 UTC m=+1670.292046729 I0423 10:20:42.195276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:20:42.195781 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:20:42.195772672 +0000 UTC m=+1670.319849099 I0423 10:20:42.198306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:20:42.219216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 10:20:42.219488 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 10:20:42.219480995 +0000 UTC m=+1670.343557432 I0423 10:20:42.224341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"