I0423 13:41:06.539706 1 start.go:75] "cert-manager: starting controller" version="v1.12.10" git-commit="4131d77fe377e78a6fa562af6bdbd31532ddb1ad" I0423 13:41:06.539842 1 controller.go:262] "cert-manager/controller/build-context: configured acme dns01 nameservers" nameservers=["10.96.0.10:53"] W0423 13:41:06.539964 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0423 13:41:06.544943 1 controller.go:82] "cert-manager/controller: enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" I0423 13:41:06.545500 1 controller.go:156] "cert-manager/controller: starting leader election" I0423 13:41:06.545741 1 controller.go:149] "cert-manager/controller: starting healthz server" address="[::]:9403" I0423 13:41:06.545746 1 controller.go:103] "cert-manager/controller: starting metrics server" address="[::]:9402" I0423 13:41:06.548881 1 leaderelection.go:245] attempting to acquire leader lease cert-manager/cert-manager-controller... I0423 13:41:06.566124 1 leaderelection.go:255] successfully acquired lease cert-manager/cert-manager-controller I0423 13:41:06.570097 1 controller.go:226] "cert-manager/controller: starting controller" controller="issuers" I0423 13:41:06.576323 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="gateway-shim" I0423 13:41:06.576391 1 controller.go:226] "cert-manager/controller: starting controller" controller="challenges" I0423 13:41:06.579151 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-approver" I0423 13:41:06.580983 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-readiness" I0423 13:41:06.582712 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-trigger" I0423 13:41:06.582599 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-acme" I0423 13:41:06.582791 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-ca" I0423 13:41:06.582815 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-vault" I0423 13:41:06.584735 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-key-manager" I0423 13:41:06.586476 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-metrics" I0423 13:41:06.590757 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-acme" I0423 13:41:06.594705 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-selfsigned" I0423 13:41:06.597028 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-selfsigned" I0423 13:41:06.597052 1 controller.go:203] "cert-manager/controller: not starting controller as it's disabled" controller="certificatesigningrequests-issuer-venafi" I0423 13:41:06.597143 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-vault" I0423 13:41:06.599539 1 controller.go:226] "cert-manager/controller: starting controller" controller="clusterissuers" I0423 13:41:06.602023 1 controller.go:226] "cert-manager/controller: starting controller" controller="ingress-shim" I0423 13:41:06.604251 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-issuing" I0423 13:41:06.606675 1 controller.go:226] "cert-manager/controller: starting controller" controller="orders" I0423 13:41:06.608592 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-ca" I0423 13:41:06.610271 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificaterequests-issuer-venafi" I0423 13:41:06.612028 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-request-manager" I0423 13:41:06.616511 1 controller.go:226] "cert-manager/controller: starting controller" controller="certificates-revision-manager" I0423 13:41:17.597661 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-23 13:41:17.597618842 +0000 UTC m=+11.092555226 I0423 13:41:18.309952 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 13:41:18.309925557 +0000 UTC m=+11.804862041 I0423 13:41:18.310162 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:41:18.310252 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 13:41:18.310243014 +0000 UTC m=+11.805179408 E0423 13:41:18.330597 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 13:41:18.330679 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-23 13:41:18.330668556 +0000 UTC m=+11.825604920 E0423 13:41:18.330817 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 13:41:18.334401 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:41:18.334493 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 13:41:18.334471559 +0000 UTC m=+11.829407953 E0423 13:41:18.358758 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" E0423 13:41:18.359082 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 13:41:18.359129 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 13:41:18.359158 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" key="atmosphere" I0423 13:41:18.364853 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:41:18.364908 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 13:41:18.364900197 +0000 UTC m=+11.859836561 I0423 13:41:18.387804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f78xd" condition "Approved" to 2026-04-23 13:41:18.387791028 +0000 UTC m=+11.882727422 I0423 13:41:18.410418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f78xd" condition "Ready" to 2026-04-23 13:41:18.410402063 +0000 UTC m=+11.905338427 I0423 13:41:18.451898 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:41:18.451883782 +0000 UTC m=+11.946820176 I0423 13:41:18.497029 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:41:18.637547 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:41:23.359606 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:41:23.35959017 +0000 UTC m=+16.854526564 I0423 13:41:44.193869 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-23 13:41:44.193834886 +0000 UTC m=+37.688771280 I0423 13:41:44.193967 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:41:44.194047 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 13:41:44.194040301 +0000 UTC m=+37.688976665 I0423 13:41:44.202216 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-23 13:41:44.202200261 +0000 UTC m=+37.697136625 I0423 13:41:44.216526 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:41:44.216707 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:41:44.216784 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 13:41:44.216736688 +0000 UTC m=+37.711673052 I0423 13:41:44.399946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vn8nm" condition "Approved" to 2026-04-23 13:41:44.399929374 +0000 UTC m=+37.894865738 I0423 13:41:44.431156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vn8nm" condition "Ready" to 2026-04-23 13:41:44.43114269 +0000 UTC m=+37.926079054 I0423 13:41:44.467783 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:41:44.467761689 +0000 UTC m=+37.962698073 I0423 13:41:44.486777 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:41:44.487213 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:41:44.487208016 +0000 UTC m=+37.982144370 I0423 13:41:44.499106 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:41:44.506139 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:44:19.094404 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready" to 2026-04-23 13:44:19.094351745 +0000 UTC m=+192.589288099 I0423 13:44:19.094526 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-204-45-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:44:19.094594 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Issuing" to 2026-04-23 13:44:19.094586951 +0000 UTC m=+192.589523335 I0423 13:44:19.112744 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:44:19.112810 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="auth-system/keycloak.199-204-45-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:44:19.112839 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Issuing" to 2026-04-23 13:44:19.112830012 +0000 UTC m=+192.607766376 I0423 13:44:19.304357 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:44:19.311508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-p8d7r" condition "Approved" to 2026-04-23 13:44:19.311494335 +0000 UTC m=+192.806430699 I0423 13:44:19.341114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-p8d7r" condition "Ready" to 2026-04-23 13:44:19.341102996 +0000 UTC m=+192.836039350 I0423 13:44:19.381556 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:44:19.381539084 +0000 UTC m=+192.876475438 I0423 13:44:19.398716 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:44:19.399332 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:44:19.399323763 +0000 UTC m=+192.894260117 I0423 13:44:19.417473 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:44:19.422775 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:44:19.423561 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:44:19.423518321 +0000 UTC m=+192.918454705 I0423 13:45:22.478064 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:45:22.478137 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 13:45:22.478123437 +0000 UTC m=+255.973059801 I0423 13:45:22.478067 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 13:45:22.478047375 +0000 UTC m=+255.972983729 E0423 13:45:22.490774 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 13:45:22.490826 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-23 13:45:22.49081654 +0000 UTC m=+255.985752904 E0423 13:45:22.490855 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 13:45:22.493453 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:45:22.493532 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 13:45:22.493524867 +0000 UTC m=+255.988461231 E0423 13:45:22.502763 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" E0423 13:45:22.502897 1 setup.go:48] "cert-manager/clusterissuers/setup: error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 13:45:22.502961 1 sync.go:62] "cert-manager/clusterissuers: error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 13:45:22.503052 1 controller.go:167] "cert-manager/clusterissuers: re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" key="kube-prometheus-stack" I0423 13:45:22.506103 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:45:22.509066 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:45:22.509187 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 13:45:22.509174284 +0000 UTC m=+256.004110678 I0423 13:45:22.509598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j76wf" condition "Approved" to 2026-04-23 13:45:22.509570684 +0000 UTC m=+256.004507068 I0423 13:45:22.520470 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 13:45:22.520455353 +0000 UTC m=+256.015391717 I0423 13:45:22.523204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j76wf" condition "Ready" to 2026-04-23 13:45:22.523188011 +0000 UTC m=+256.018124375 I0423 13:45:22.528090 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:45:22.550886 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:45:22.550866145 +0000 UTC m=+256.045802519 I0423 13:45:22.570652 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:45:22.621117 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:45:27.503453 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:45:27.503435039 +0000 UTC m=+260.998371433 I0423 13:46:05.203032 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 13:46:05.202977692 +0000 UTC m=+298.697914056 I0423 13:46:05.203514 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:05.203562 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 13:46:05.203553727 +0000 UTC m=+298.698490091 I0423 13:46:05.207880 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 13:46:05.207868234 +0000 UTC m=+298.702804598 I0423 13:46:05.208351 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:05.208572 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 13:46:05.208566731 +0000 UTC m=+298.703503115 I0423 13:46:05.209740 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 13:46:05.20973195 +0000 UTC m=+298.704668314 I0423 13:46:05.210022 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:05.210072 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 13:46:05.210061518 +0000 UTC m=+298.704997902 I0423 13:46:05.238636 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:05.238724 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:05.238754 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 13:46:05.238744057 +0000 UTC m=+298.733680641 I0423 13:46:05.242299 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:05.242401 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:05.242434 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 13:46:05.242426658 +0000 UTC m=+298.737363022 I0423 13:46:05.254781 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:05.254861 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:05.254882 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 13:46:05.254875696 +0000 UTC m=+298.749812040 I0423 13:46:05.423135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n574q" condition "Approved" to 2026-04-23 13:46:05.423111597 +0000 UTC m=+298.918047991 I0423 13:46:05.440933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n574q" condition "Ready" to 2026-04-23 13:46:05.440918817 +0000 UTC m=+298.935855181 I0423 13:46:05.518123 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:05.518592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gbzwc" condition "Approved" to 2026-04-23 13:46:05.518578108 +0000 UTC m=+299.013514492 I0423 13:46:05.537355 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:46:05.537337872 +0000 UTC m=+299.032274236 I0423 13:46:05.545682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gbzwc" condition "Ready" to 2026-04-23 13:46:05.545625157 +0000 UTC m=+299.040561531 I0423 13:46:05.566768 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:05.607294 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:46:05.607268931 +0000 UTC m=+299.102205305 I0423 13:46:05.692583 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:05.693104 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:46:05.693096953 +0000 UTC m=+299.188033317 I0423 13:46:05.748828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5d47n" condition "Approved" to 2026-04-23 13:46:05.748798151 +0000 UTC m=+299.243734515 I0423 13:46:06.099592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5d47n" condition "Ready" to 2026-04-23 13:46:06.099577876 +0000 UTC m=+299.594514240 I0423 13:46:06.336325 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:06.589428 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:46:06.589364778 +0000 UTC m=+300.084301162 I0423 13:46:06.692299 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:06.694417 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:46:06.694393366 +0000 UTC m=+300.189329760 I0423 13:46:06.942207 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:13.696617 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" condition "Ready" to 2026-04-23 13:46:13.696585572 +0000 UTC m=+307.191521966 I0423 13:46:13.696651 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:13.697399 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" condition "Issuing" to 2026-04-23 13:46:13.697368712 +0000 UTC m=+307.192305136 I0423 13:46:13.716512 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:13.716626 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" condition "Ready" to 2026-04-23 13:46:13.716615137 +0000 UTC m=+307.211551511 I0423 13:46:13.890649 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:13.927482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9r7xc-w5ttq" condition "Approved" to 2026-04-23 13:46:13.927464983 +0000 UTC m=+307.422401337 I0423 13:46:13.959547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9r7xc-w5ttq" condition "Ready" to 2026-04-23 13:46:13.959531295 +0000 UTC m=+307.454467669 I0423 13:46:13.994003 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:46:13.993989487 +0000 UTC m=+307.488925851 I0423 13:46:14.014313 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:14.014865 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:46:14.014856174 +0000 UTC m=+307.509792538 I0423 13:46:14.025823 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:14.045934 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9r7xc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:33.316576 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-23 13:46:33.316560059 +0000 UTC m=+326.811496413 I0423 13:46:33.316841 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:33.316869 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 13:46:33.316862396 +0000 UTC m=+326.811798780 I0423 13:46:33.399394 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:46:33.399605 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:46:33.399643 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 13:46:33.399632655 +0000 UTC m=+326.894569049 I0423 13:46:33.775587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n946q" condition "Approved" to 2026-04-23 13:46:33.775569961 +0000 UTC m=+327.270506315 I0423 13:46:33.808317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n946q" condition "Ready" to 2026-04-23 13:46:33.808117176 +0000 UTC m=+327.303053530 I0423 13:46:33.857696 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:46:33.857680762 +0000 UTC m=+327.352617126 I0423 13:46:33.883057 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:49:55.313332 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:49:55.313396 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 13:49:55.31338865 +0000 UTC m=+528.808325014 I0423 13:49:55.313428 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 13:49:55.313409771 +0000 UTC m=+528.808346135 I0423 13:49:55.330479 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:49:55.330546 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 13:49:55.330538035 +0000 UTC m=+528.825474399 I0423 13:49:55.544983 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:49:55.573067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4pwbc" condition "Approved" to 2026-04-23 13:49:55.573051206 +0000 UTC m=+529.067987570 I0423 13:49:55.591395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4pwbc" condition "Ready" to 2026-04-23 13:49:55.59137784 +0000 UTC m=+529.086314194 I0423 13:49:55.621719 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:49:55.621701582 +0000 UTC m=+529.116637946 I0423 13:49:55.639982 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:49:55.640466 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:49:55.640456987 +0000 UTC m=+529.135393341 I0423 13:49:55.667693 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:52:23.419382 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:52:23.419378 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-23 13:52:23.419322892 +0000 UTC m=+676.914259286 I0423 13:52:23.419433 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-23 13:52:23.419421504 +0000 UTC m=+676.914357868 I0423 13:52:23.438712 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:52:23.438816 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:52:23.438915 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-23 13:52:23.438842535 +0000 UTC m=+676.933778929 I0423 13:52:23.612120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-sxhdq" condition "Approved" to 2026-04-23 13:52:23.61210306 +0000 UTC m=+677.107039414 I0423 13:52:23.627527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-sxhdq" condition "Ready" to 2026-04-23 13:52:23.627508882 +0000 UTC m=+677.122445246 I0423 13:52:23.657892 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:52:23.657874494 +0000 UTC m=+677.152810858 I0423 13:52:23.681792 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:52:23.682506 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:52:23.682497605 +0000 UTC m=+677.177433989 I0423 13:52:23.705961 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:52:23.706815 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:53:25.783031 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-23 13:53:25.782999871 +0000 UTC m=+739.277936265 I0423 13:53:25.783497 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:53:25.783551 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-23 13:53:25.783545235 +0000 UTC m=+739.278481659 I0423 13:53:25.801870 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:53:25.801968 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:53:25.801987 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-23 13:53:25.801981331 +0000 UTC m=+739.296917695 I0423 13:53:26.011305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qld7p" condition "Approved" to 2026-04-23 13:53:26.011289972 +0000 UTC m=+739.506226336 I0423 13:53:26.032569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qld7p" condition "Ready" to 2026-04-23 13:53:26.032556979 +0000 UTC m=+739.527493343 I0423 13:53:26.059157 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:53:26.059144426 +0000 UTC m=+739.554080780 I0423 13:53:26.080513 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:56:23.099234 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:56:23.099294 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-23 13:56:23.099287134 +0000 UTC m=+916.594223508 I0423 13:56:23.099570 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-23 13:56:23.099555651 +0000 UTC m=+916.594492015 I0423 13:56:23.124754 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:56:23.124848 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 13:56:23.124902 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-23 13:56:23.124891098 +0000 UTC m=+916.619827492 I0423 13:56:23.413153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-g996t" condition "Approved" to 2026-04-23 13:56:23.413138523 +0000 UTC m=+916.908074907 I0423 13:56:23.432785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-g996t" condition "Ready" to 2026-04-23 13:56:23.432772619 +0000 UTC m=+916.927708984 I0423 13:56:23.471990 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 13:56:23.4719743 +0000 UTC m=+916.966910674 I0423 13:56:23.496864 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 13:56:23.553571 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:02:37.489360 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:02:37.489545 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-23 14:02:37.489534019 +0000 UTC m=+1290.984470433 I0423 14:02:37.489455 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-23 14:02:37.489432426 +0000 UTC m=+1290.984368790 I0423 14:02:37.506169 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:02:37.506283 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:02:37.506316 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-23 14:02:37.506307834 +0000 UTC m=+1291.001244208 I0423 14:02:37.796808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-bxtpq" condition "Approved" to 2026-04-23 14:02:37.796791917 +0000 UTC m=+1291.291728271 I0423 14:02:37.822442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-bxtpq" condition "Ready" to 2026-04-23 14:02:37.822429941 +0000 UTC m=+1291.317366305 I0423 14:02:37.854667 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:02:37.854650959 +0000 UTC m=+1291.349587323 I0423 14:02:37.875259 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:04:05.422004 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-23 14:04:05.421259272 +0000 UTC m=+1378.916195666 I0423 14:04:05.422973 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:04:05.423019 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-23 14:04:05.423010315 +0000 UTC m=+1378.917946669 I0423 14:04:05.441373 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:04:05.441869 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:04:05.441911 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-23 14:04:05.441882772 +0000 UTC m=+1378.936819136 I0423 14:04:05.722116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-5nft4" condition "Approved" to 2026-04-23 14:04:05.722091934 +0000 UTC m=+1379.217028318 I0423 14:04:05.741539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-5nft4" condition "Ready" to 2026-04-23 14:04:05.741515425 +0000 UTC m=+1379.236451809 I0423 14:04:05.777020 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:04:05.777006733 +0000 UTC m=+1379.271943097 I0423 14:04:05.800267 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:04:05.801321 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:04:05.801306744 +0000 UTC m=+1379.296243138 I0423 14:04:05.823919 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:04:05.824652 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.263897 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-23 14:05:00.263872764 +0000 UTC m=+1433.758809158 I0423 14:05:00.263926 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:05:00.263961 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-23 14:05:00.263953895 +0000 UTC m=+1433.758890279 I0423 14:05:00.283239 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.283337 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-23 14:05:00.283326355 +0000 UTC m=+1433.778262719 I0423 14:05:00.302739 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.303477 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.303580 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-23 14:05:00.303568816 +0000 UTC m=+1433.798505180 I0423 14:05:00.308359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-7t8td" condition "Approved" to 2026-04-23 14:05:00.308348474 +0000 UTC m=+1433.803284868 I0423 14:05:00.325595 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-23 14:05:00.32558003 +0000 UTC m=+1433.820516384 I0423 14:05:00.332471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-7t8td" condition "Ready" to 2026-04-23 14:05:00.33246311 +0000 UTC m=+1433.827399474 I0423 14:05:00.337231 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.357907 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:05:00.357886999 +0000 UTC m=+1433.852823353 I0423 14:05:00.386154 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.441324 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.895630 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-23 14:05:00.895605072 +0000 UTC m=+1434.390541436 I0423 14:05:00.895693 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:05:00.895773 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-23 14:05:00.895765045 +0000 UTC m=+1434.390701409 I0423 14:05:00.913588 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.913675 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-23 14:05:00.913665119 +0000 UTC m=+1434.408601483 I0423 14:05:00.935707 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:00.960990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-ptb9d" condition "Approved" to 2026-04-23 14:05:00.960966119 +0000 UTC m=+1434.455902503 I0423 14:05:00.985813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-ptb9d" condition "Ready" to 2026-04-23 14:05:00.985798513 +0000 UTC m=+1434.480734867 I0423 14:05:01.012849 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:05:01.012831372 +0000 UTC m=+1434.507767736 I0423 14:05:01.035022 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:01.091023 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:01.650960 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-23 14:05:01.650943869 +0000 UTC m=+1435.145880213 I0423 14:05:02.327467 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-23 14:05:02.327454074 +0000 UTC m=+1435.822390438 I0423 14:05:51.012460 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-23 14:05:51.012412958 +0000 UTC m=+1484.507349312 I0423 14:05:51.013159 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:05:51.013177 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-23 14:05:51.013173858 +0000 UTC m=+1484.508110212 I0423 14:05:51.044122 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:05:51.044247 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:05:51.044278 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-23 14:05:51.044272388 +0000 UTC m=+1484.539208752 I0423 14:05:55.160969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-br7fw" condition "Approved" to 2026-04-23 14:05:55.160954001 +0000 UTC m=+1488.655890365 I0423 14:05:55.194718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-br7fw" condition "Ready" to 2026-04-23 14:05:55.194705626 +0000 UTC m=+1488.689641990 I0423 14:05:55.237355 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:05:55.23734137 +0000 UTC m=+1488.732277724 I0423 14:05:55.265021 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:08:23.313329 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-23 14:08:23.312792974 +0000 UTC m=+1636.807729328 I0423 14:08:23.313644 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:08:23.313676 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-23 14:08:23.313673127 +0000 UTC m=+1636.808609481 I0423 14:08:23.336504 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:08:23.336772 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:08:23.336814 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-23 14:08:23.336803249 +0000 UTC m=+1636.831739643 I0423 14:08:23.441585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-brcz2" condition "Approved" to 2026-04-23 14:08:23.441571393 +0000 UTC m=+1636.936507757 I0423 14:08:23.465009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-brcz2" condition "Ready" to 2026-04-23 14:08:23.464988644 +0000 UTC m=+1636.959925008 I0423 14:08:23.509720 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:08:23.509704452 +0000 UTC m=+1637.004640816 I0423 14:08:23.529239 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:08:23.529910 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:08:23.529903231 +0000 UTC m=+1637.024839595 I0423 14:08:23.553037 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:08:24.775197 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-23 14:08:24.775185522 +0000 UTC m=+1638.270121886 I0423 14:08:24.775516 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:08:24.775788 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-23 14:08:24.775782026 +0000 UTC m=+1638.270718390 I0423 14:08:24.797504 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:08:24.797568 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:08:24.797582 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-23 14:08:24.797576806 +0000 UTC m=+1638.292513170 I0423 14:08:24.987529 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:08:25.009193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4lx5r" condition "Approved" to 2026-04-23 14:08:25.009173696 +0000 UTC m=+1638.504110060 I0423 14:08:25.036639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4lx5r" condition "Ready" to 2026-04-23 14:08:25.036625616 +0000 UTC m=+1638.531561990 I0423 14:08:25.073621 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:08:25.073610072 +0000 UTC m=+1638.568546426 I0423 14:08:25.098494 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:08:25.099373 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:08:25.099361659 +0000 UTC m=+1638.594298053 I0423 14:08:25.126178 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:08:25.126730 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:08:25.126681266 +0000 UTC m=+1638.621617630 I0423 14:11:26.333971 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-23 14:11:26.333931929 +0000 UTC m=+1819.828868323 I0423 14:11:26.334003 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:11:26.334030 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-23 14:11:26.334024082 +0000 UTC m=+1819.828960436 I0423 14:11:26.350062 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:11:26.350221 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-23 14:11:26.350208833 +0000 UTC m=+1819.845145227 I0423 14:11:26.412186 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:11:26.454021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-v6lmf" condition "Approved" to 2026-04-23 14:11:26.454005223 +0000 UTC m=+1819.948941587 I0423 14:11:26.473147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-v6lmf" condition "Ready" to 2026-04-23 14:11:26.473133737 +0000 UTC m=+1819.968070141 I0423 14:11:26.505269 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:11:26.505254642 +0000 UTC m=+1820.000190996 I0423 14:11:26.541721 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:11:26.542388 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:11:26.542381151 +0000 UTC m=+1820.037317505 I0423 14:11:26.563489 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:11:26.564062 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:11:26.564053258 +0000 UTC m=+1820.058989622 I0423 14:12:19.464503 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mf92x-vnc" condition "Ready" to 2026-04-23 14:12:19.464456659 +0000 UTC m=+1872.959393023 I0423 14:12:19.464638 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-mf92x-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:12:19.464676 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mf92x-vnc" condition "Issuing" to 2026-04-23 14:12:19.464666744 +0000 UTC m=+1872.959603138 I0423 14:12:19.471664 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mf92x-api" condition "Ready" to 2026-04-23 14:12:19.471645466 +0000 UTC m=+1872.966581860 I0423 14:12:19.471710 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-mf92x-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:12:19.471756 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mf92x-api" condition "Issuing" to 2026-04-23 14:12:19.471743838 +0000 UTC m=+1872.966680232 I0423 14:12:19.516630 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-mf92x-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mf92x-api\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:12:19.516726 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mf92x-api" condition "Ready" to 2026-04-23 14:12:19.516715483 +0000 UTC m=+1873.011651847 I0423 14:12:19.520984 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-mf92x-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mf92x-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:12:19.521159 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/libvirt-libvirt-default-mf92x-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:12:19.521192 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mf92x-vnc" condition "Issuing" to 2026-04-23 14:12:19.521182383 +0000 UTC m=+1873.016118747 I0423 14:12:19.815935 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-mf92x-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mf92x-api\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:12:19.868781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mf92x-api-4wz86" condition "Approved" to 2026-04-23 14:12:19.868765991 +0000 UTC m=+1873.363702365 I0423 14:12:19.899583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mf92x-api-4wz86" condition "Ready" to 2026-04-23 14:12:19.899572154 +0000 UTC m=+1873.394508508 I0423 14:12:19.934462 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mf92x-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:12:19.934442458 +0000 UTC m=+1873.429378842 I0423 14:12:19.984561 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-mf92x-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mf92x-api\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:12:20.013663 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-mf92x-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mf92x-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:12:20.027986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mf92x-vnc-rdfb4" condition "Approved" to 2026-04-23 14:12:20.027966324 +0000 UTC m=+1873.522902678 I0423 14:12:20.051357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mf92x-vnc-rdfb4" condition "Ready" to 2026-04-23 14:12:20.051346793 +0000 UTC m=+1873.546283157 I0423 14:12:20.114746 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mf92x-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:12:20.114731163 +0000 UTC m=+1873.609667537 I0423 14:12:20.179547 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-mf92x-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mf92x-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:12:20.180108 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mf92x-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:12:20.180100562 +0000 UTC m=+1873.675036916 I0423 14:12:20.207323 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/libvirt-libvirt-default-mf92x-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mf92x-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:14:29.300811 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-23 14:14:29.300768116 +0000 UTC m=+2002.795704500 I0423 14:14:29.301064 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:14:29.303175 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-23 14:14:29.303165105 +0000 UTC m=+2002.798101509 I0423 14:14:29.321319 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:14:29.321403 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-23 14:14:29.321394016 +0000 UTC m=+2002.816330380 I0423 14:14:29.525898 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:14:29.565229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-6fddb" condition "Approved" to 2026-04-23 14:14:29.565215817 +0000 UTC m=+2003.060152181 I0423 14:14:29.585832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-6fddb" condition "Ready" to 2026-04-23 14:14:29.585816785 +0000 UTC m=+2003.080753149 I0423 14:14:29.611975 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:14:29.61196283 +0000 UTC m=+2003.106899184 I0423 14:14:29.645742 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:14:29.646321 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:14:29.646312649 +0000 UTC m=+2003.141249003 I0423 14:14:29.669221 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:14:29.669737 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:14:29.669729337 +0000 UTC m=+2003.164665691 I0423 14:14:29.679807 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:18:09.206289 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-23 14:18:09.206242734 +0000 UTC m=+2222.701179128 I0423 14:18:09.206623 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:18:09.207061 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-23 14:18:09.207038654 +0000 UTC m=+2222.701975038 I0423 14:18:09.224299 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:18:09.224385 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:18:09.224404 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-23 14:18:09.224398014 +0000 UTC m=+2222.719334378 I0423 14:18:09.356068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-7w7k6" condition "Approved" to 2026-04-23 14:18:09.356046841 +0000 UTC m=+2222.850983195 I0423 14:18:09.372906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-7w7k6" condition "Ready" to 2026-04-23 14:18:09.372660512 +0000 UTC m=+2222.867596876 I0423 14:18:09.405062 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:18:09.405045922 +0000 UTC m=+2222.899982286 I0423 14:18:09.429437 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:18:10.771384 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:18:10.771434 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-23 14:18:10.771423696 +0000 UTC m=+2224.266360120 I0423 14:18:10.771507 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-23 14:18:10.771440696 +0000 UTC m=+2224.266377060 I0423 14:18:10.787765 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:18:10.787931 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-23 14:18:10.787914554 +0000 UTC m=+2224.282850988 I0423 14:18:10.898881 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:18:10.930821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-wmhqd" condition "Approved" to 2026-04-23 14:18:10.930794679 +0000 UTC m=+2224.425731073 I0423 14:18:10.951847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-wmhqd" condition "Ready" to 2026-04-23 14:18:10.951833259 +0000 UTC m=+2224.446769623 I0423 14:18:10.980013 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:18:10.980001786 +0000 UTC m=+2224.474938140 I0423 14:18:10.997061 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:26.331456 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-23 14:20:26.331415985 +0000 UTC m=+2359.826352369 I0423 14:20:26.331844 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:20:26.331913 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-23 14:20:26.331905827 +0000 UTC m=+2359.826842181 E0423 14:20:26.347872 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 14:20:26.347973 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-23 14:20:26.347961494 +0000 UTC m=+2359.842897888 I0423 14:20:26.348005 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 14:20:26.352023 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:26.352203 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:20:26.352245 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-23 14:20:26.35223524 +0000 UTC m=+2359.847171614 E0423 14:20:26.357521 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client" E0423 14:20:26.357649 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 14:20:26.357700 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-client-ca\" not found" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 14:20:26.357755 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" key="openstack/octavia-client" I0423 14:20:26.412845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-vhcrs" condition "Approved" to 2026-04-23 14:20:26.412820158 +0000 UTC m=+2359.907756522 I0423 14:20:26.430262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-vhcrs" condition "Ready" to 2026-04-23 14:20:26.430055846 +0000 UTC m=+2359.924992210 I0423 14:20:26.460329 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:26.460309754 +0000 UTC m=+2359.955246108 I0423 14:20:26.483983 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:27.035901 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:20:27.036028 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-23 14:20:27.036018136 +0000 UTC m=+2360.530954530 I0423 14:20:27.035927 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-23 14:20:27.035906624 +0000 UTC m=+2360.530842988 E0423 14:20:27.051369 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 14:20:27.051407 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-23 14:20:27.051399016 +0000 UTC m=+2360.546335380 I0423 14:20:27.051448 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 14:20:27.052093 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:27.052213 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:20:27.052232 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-23 14:20:27.052227708 +0000 UTC m=+2360.547164082 E0423 14:20:27.066413 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server" E0423 14:20:27.066513 1 setup.go:48] "cert-manager/issuers/setup: error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 14:20:27.066546 1 sync.go:62] "cert-manager/issuers: Error initializing issuer: secret \"octavia-server-ca\" not found" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 14:20:27.066575 1 controller.go:167] "cert-manager/issuers: re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" key="openstack/octavia-server" I0423 14:20:27.092048 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:27.100510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-z7fr8" condition "Approved" to 2026-04-23 14:20:27.100486181 +0000 UTC m=+2360.595422545 I0423 14:20:27.116323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-z7fr8" condition "Ready" to 2026-04-23 14:20:27.116307843 +0000 UTC m=+2360.611244217 I0423 14:20:27.155489 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:27.155475882 +0000 UTC m=+2360.650412226 I0423 14:20:27.177467 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:27.180276 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:27.180267595 +0000 UTC m=+2360.675203959 I0423 14:20:27.185769 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:27.194863 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:27.195178 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:27.195168544 +0000 UTC m=+2360.690104908 I0423 14:20:27.849251 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-23 14:20:27.849232515 +0000 UTC m=+2361.344168899 I0423 14:20:27.849530 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:20:27.849736 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-23 14:20:27.849561813 +0000 UTC m=+2361.344498207 I0423 14:20:27.866464 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:27.866566 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-23 14:20:27.866556203 +0000 UTC m=+2361.361492567 I0423 14:20:27.890452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-fz6f2" condition "Approved" to 2026-04-23 14:20:27.890425034 +0000 UTC m=+2361.385361388 I0423 14:20:27.892579 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:27.892918 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-23 14:20:27.892907906 +0000 UTC m=+2361.387844300 I0423 14:20:27.920022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-fz6f2" condition "Ready" to 2026-04-23 14:20:27.919998365 +0000 UTC m=+2361.414934759 I0423 14:20:31.358010 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:31.357996359 +0000 UTC m=+2364.852932753 I0423 14:20:31.372192 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-fz6f2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:31.37217884 +0000 UTC m=+2364.867115194 I0423 14:20:31.399670 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:31.39965048 +0000 UTC m=+2364.894586874 I0423 14:20:31.424776 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:31.425021 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:31.425012967 +0000 UTC m=+2364.919949331 I0423 14:20:31.443859 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:20:31.444086 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:31.444078908 +0000 UTC m=+2364.939015272 I0423 14:20:32.067240 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:20:32.067227175 +0000 UTC m=+2365.562163529 I0423 14:22:48.733919 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-23 14:22:48.733761895 +0000 UTC m=+2502.228698269 I0423 14:22:48.735070 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:22:48.735408 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-23 14:22:48.735397236 +0000 UTC m=+2502.230333600 I0423 14:22:48.754877 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:22:48.755185 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:22:48.755271 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-23 14:22:48.755258137 +0000 UTC m=+2502.250194521 I0423 14:22:48.972160 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:22:48.974299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-kjdgr" condition "Approved" to 2026-04-23 14:22:48.974274205 +0000 UTC m=+2502.469210569 I0423 14:22:49.000309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-kjdgr" condition "Ready" to 2026-04-23 14:22:49.000287669 +0000 UTC m=+2502.495224053 I0423 14:22:49.036413 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:22:49.036397462 +0000 UTC m=+2502.531333826 I0423 14:22:49.068200 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:22:49.068764 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:22:49.068756963 +0000 UTC m=+2502.563693317 I0423 14:22:49.075258 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:22:49.100785 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:34.890463 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-23 14:23:34.89044268 +0000 UTC m=+2548.385379044 I0423 14:23:34.913697 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:34.913759 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-23 14:23:34.913748646 +0000 UTC m=+2548.408685030 I0423 14:23:34.914347 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-23 14:23:34.91433899 +0000 UTC m=+2548.409275384 E0423 14:23:34.934372 1 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"selfsigned-cert.18a902719ad01668", GenerateName:"", Namespace:"cert-manager-test", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Certificate", Namespace:"cert-manager-test", Name:"selfsigned-cert", UID:"a737ee17-2f6b-4fdc-bf3d-a5713c2806fc", APIVersion:"cert-manager.io/v1", ResourceVersion:"25462", FieldPath:""}, Reason:"Issuing", Message:"Issuing certificate as Secret does not exist", Source:v1.EventSource{Component:"cert-manager-certificates-trigger", Host:""}, FirstTimestamp:time.Date(2026, time.April, 23, 14, 23, 34, 926259816, time.Local), LastTimestamp:time.Date(2026, time.April, 23, 14, 23, 34, 926259816, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'events "selfsigned-cert.18a902719ad01668" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated' (will not retry!) I0423 14:23:34.935062 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:34.935164 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-23 14:23:34.935155216 +0000 UTC m=+2548.430091590 E0423 14:23:34.946139 1 controller.go:134] "cert-manager/issuers: issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" I0423 14:23:35.003021 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-23 14:23:35.003006014 +0000 UTC m=+2548.497942378 I0423 14:23:35.025690 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-23 14:23:35.025672945 +0000 UTC m=+2548.520609289 I0423 14:23:35.025840 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:35.025894 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-23 14:23:35.02588601 +0000 UTC m=+2548.520822374 I0423 14:23:35.045452 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:35.045524 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:35.045540 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-23 14:23:35.045534846 +0000 UTC m=+2548.540471200 I0423 14:23:35.440594 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" E0423 14:23:35.450709 1 controller.go:167] "cert-manager/certificates-key-manager: re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" key="cert-manager-test/selfsigned-cert" I0423 14:23:35.453112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-97ktl" condition "Approved" to 2026-04-23 14:23:35.453084039 +0000 UTC m=+2548.948020393 I0423 14:23:35.480372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-97ktl" condition "Ready" to 2026-04-23 14:23:35.480355913 +0000 UTC m=+2548.975292277 I0423 14:23:35.522413 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:23:35.522396613 +0000 UTC m=+2549.017332977 I0423 14:23:35.554113 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:35.624096 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:35.860941 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-23 14:23:35.860917128 +0000 UTC m=+2549.355853522 I0423 14:23:35.889352 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-23 14:23:35.889329731 +0000 UTC m=+2549.384266105 I0423 14:23:35.890094 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:35.890127 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-23 14:23:35.890118961 +0000 UTC m=+2549.385055335 I0423 14:23:35.909420 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:35.909526 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:35.909552 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-23 14:23:35.909545091 +0000 UTC m=+2549.404481455 I0423 14:23:36.083895 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:36.117253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-gghsd" condition "Approved" to 2026-04-23 14:23:36.11724076 +0000 UTC m=+2549.612177124 I0423 14:23:36.158798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-gghsd" condition "Ready" to 2026-04-23 14:23:36.158785837 +0000 UTC m=+2549.653722211 I0423 14:23:36.199465 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:23:36.199450473 +0000 UTC m=+2549.694386827 I0423 14:23:36.225511 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:36.480047 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:36.761739 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-23 14:23:36.761722134 +0000 UTC m=+2550.256658498 I0423 14:23:36.786562 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-23 14:23:36.786543128 +0000 UTC m=+2550.281479492 I0423 14:23:36.786620 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:36.786662 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-23 14:23:36.786653431 +0000 UTC m=+2550.281589795 I0423 14:23:36.808127 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:36.808239 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:36.808266 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-23 14:23:36.808261375 +0000 UTC m=+2550.303197729 I0423 14:23:37.185539 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:37.188539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-gzrqr" condition "Approved" to 2026-04-23 14:23:37.188524222 +0000 UTC m=+2550.683460586 I0423 14:23:37.217763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-gzrqr" condition "Ready" to 2026-04-23 14:23:37.217739505 +0000 UTC m=+2550.712675889 I0423 14:23:37.262351 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:23:37.262334298 +0000 UTC m=+2550.757270662 I0423 14:23:37.293023 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:37.293486 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:23:37.293478479 +0000 UTC m=+2550.788414823 I0423 14:23:37.295216 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:37.300638 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-23 14:23:37.300620595 +0000 UTC m=+2550.795556959 I0423 14:23:37.314535 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:37.315201 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:23:37.315191276 +0000 UTC m=+2550.810127640 I0423 14:23:37.324304 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-23 14:23:37.324283011 +0000 UTC m=+2550.819219395 I0423 14:23:37.324738 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:37.324769 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-23 14:23:37.324765493 +0000 UTC m=+2550.819701857 I0423 14:23:37.346102 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:37.346193 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:23:37.346220 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-23 14:23:37.346210733 +0000 UTC m=+2550.841147127 I0423 14:23:37.944839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-2cd8c" condition "Approved" to 2026-04-23 14:23:37.944822703 +0000 UTC m=+2551.439759057 I0423 14:23:37.962467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-2cd8c" condition "Ready" to 2026-04-23 14:23:37.962456328 +0000 UTC m=+2551.457392682 I0423 14:23:38.110428 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:23:38.110402979 +0000 UTC m=+2551.605339333 I0423 14:23:38.255528 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:38.256407 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:23:38.256397531 +0000 UTC m=+2551.751333895 I0423 14:23:38.503960 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:23:38.558120 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:27:13.752885 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:27:13.752922 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-23 14:27:13.752915342 +0000 UTC m=+2767.247851696 I0423 14:27:13.752948 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-23 14:27:13.752927282 +0000 UTC m=+2767.247863676 I0423 14:27:13.807420 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:27:13.807544 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:27:13.807573 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-23 14:27:13.807567256 +0000 UTC m=+2767.302503610 I0423 14:27:14.022166 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:27:14.261137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-m2lvx" condition "Approved" to 2026-04-23 14:27:14.261113298 +0000 UTC m=+2767.756049692 I0423 14:27:14.446153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-m2lvx" condition "Ready" to 2026-04-23 14:27:14.44613686 +0000 UTC m=+2767.941073224 I0423 14:27:14.842083 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:27:14.842064635 +0000 UTC m=+2768.337001019 I0423 14:27:14.870812 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:27:18.357181 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:27:18.357232 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-23 14:27:18.357223141 +0000 UTC m=+2771.852159535 I0423 14:27:18.357177 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-23 14:27:18.357154549 +0000 UTC m=+2771.852090943 I0423 14:27:18.488558 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:27:18.488657 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-23 14:27:18.488647336 +0000 UTC m=+2771.983583700 I0423 14:27:18.748025 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:27:19.126545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-94v4j" condition "Approved" to 2026-04-23 14:27:19.126528844 +0000 UTC m=+2772.621465208 I0423 14:27:19.314820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-94v4j" condition "Ready" to 2026-04-23 14:27:19.314801976 +0000 UTC m=+2772.809738360 I0423 14:27:19.404116 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:27:19.404097388 +0000 UTC m=+2772.899033782 I0423 14:27:19.493359 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:27:19.493956 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:27:19.493947213 +0000 UTC m=+2772.988883577 I0423 14:27:19.838606 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:27:19.841173 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:32:45.190758 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-23 14:32:45.190738702 +0000 UTC m=+3098.685675086 I0423 14:32:45.190998 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:32:45.191067 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-23 14:32:45.19106074 +0000 UTC m=+3098.685997104 I0423 14:32:45.210267 1 controller.go:162] "cert-manager/certificates-trigger: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:32:45.210393 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:32:45.210421 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-23 14:32:45.210414289 +0000 UTC m=+3098.705350653 I0423 14:32:45.375259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-6mgq8" condition "Approved" to 2026-04-23 14:32:45.375248691 +0000 UTC m=+3098.870185055 I0423 14:32:45.396593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-6mgq8" condition "Ready" to 2026-04-23 14:32:45.396582929 +0000 UTC m=+3098.891519293 I0423 14:32:45.427116 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:32:45.427100855 +0000 UTC m=+3098.922037219 I0423 14:32:45.447415 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:32:45.447943 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:32:45.447936781 +0000 UTC m=+3098.942873145 I0423 14:32:45.461935 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:32:45.476466 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:33:23.786004 1 trigger_controller.go:194] "cert-manager/certificates-trigger: Certificate must be re-issued" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 14:33:23.786037 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-23 14:33:23.786028699 +0000 UTC m=+3137.280965053 I0423 14:33:23.788488 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 14:33:23.788466619 +0000 UTC m=+3137.283403013 I0423 14:33:23.815780 1 controller.go:162] "cert-manager/certificates-readiness: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:33:23.815877 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 14:33:23.815867728 +0000 UTC m=+3137.310804082 I0423 14:33:24.206625 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:33:24.245611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-swwtl" condition "Approved" to 2026-04-23 14:33:24.24559573 +0000 UTC m=+3137.740532094 I0423 14:33:24.267138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-swwtl" condition "Ready" to 2026-04-23 14:33:24.267119744 +0000 UTC m=+3137.762056138 I0423 14:33:24.294605 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 14:33:24.294584674 +0000 UTC m=+3137.789521038 I0423 14:33:24.319325 1 controller.go:162] "cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 14:33:24.376290 1 controller.go:162] "cert-manager/certificates-key-manager: re-queuing item due to optimistic locking on resource" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"