I0414 12:08:58.486281 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 12:08:58.486421 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 12:08:58.486499 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 12:08:58.491900 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 12:08:58.492311 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 12:08:58.492439 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 12:08:58.492478 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 12:08:58.494886 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 12:08:58.520383 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 12:08:58.520753 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 12:08:58.525143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 12:08:58.529836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 12:08:58.532049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 12:08:58.536193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 12:08:58.538841 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 12:08:58.542592 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 12:08:58.542638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 12:08:58.544270 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 12:08:58.544340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 12:08:58.546062 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 12:08:58.547745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 12:08:58.549406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 12:08:58.552879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 12:08:58.557370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 12:08:58.562498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 12:08:58.564568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 12:08:58.566312 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 12:08:58.566465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 12:08:58.568418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 12:08:58.570479 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 12:08:58.570499 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 12:08:58.570553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 12:08:58.573407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 12:08:58.575905 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.575907 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.576139 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.576624 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.596746 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.620560 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.635224 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.650014 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.667045 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:08:58.683715 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:09:12.041561 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-14 12:09:12.041549778 +0000 UTC m=+13.586974010 I0414 12:09:12.771403 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 12:09:12.771378141 +0000 UTC m=+14.316802433 I0414 12:09:12.771557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:09:12.771599 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 12:09:12.771589776 +0000 UTC m=+14.317014048 E0414 12:09:12.787602 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 12:09:12.787707 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-14 12:09:12.787695405 +0000 UTC m=+14.333119677 E0414 12:09:12.787741 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 12:09:12.791427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:12.791587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:09:12.791619 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 12:09:12.791610674 +0000 UTC m=+14.337034916 E0414 12:09:12.803316 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0414 12:09:12.803443 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 12:09:12.803479 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 12:09:12.803514 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0414 12:09:12.841468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k86t4" condition "Approved" to 2026-04-14 12:09:12.841445293 +0000 UTC m=+14.386869565 I0414 12:09:12.856439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-k86t4" condition "Ready" to 2026-04-14 12:09:12.856426685 +0000 UTC m=+14.401850957 I0414 12:09:12.889420 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:09:12.889403529 +0000 UTC m=+14.434827781 I0414 12:09:12.909380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:12.954984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:17.804513 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:09:17.804498301 +0000 UTC m=+19.349922573 I0414 12:09:44.132260 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 12:09:44.132212008 +0000 UTC m=+45.677636250 I0414 12:09:44.132664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:09:44.132689 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 12:09:44.132684689 +0000 UTC m=+45.678108931 I0414 12:09:44.153552 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-14 12:09:44.153542626 +0000 UTC m=+45.698966848 I0414 12:09:44.161794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:44.161863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:09:44.161885 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 12:09:44.161880256 +0000 UTC m=+45.707304488 I0414 12:09:44.373336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:44.382531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vvtsw" condition "Approved" to 2026-04-14 12:09:44.3825174 +0000 UTC m=+45.927941672 I0414 12:09:44.414219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vvtsw" condition "Ready" to 2026-04-14 12:09:44.414208404 +0000 UTC m=+45.959632656 I0414 12:09:44.446184 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:09:44.446166555 +0000 UTC m=+45.991590827 I0414 12:09:44.477358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:09:44.547193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:40.849520 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-14 12:11:40.84950898 +0000 UTC m=+162.394933232 I0414 12:11:40.849519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:40.849603 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-14 12:11:40.849589322 +0000 UTC m=+162.395013794 E0414 12:11:40.865888 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 12:11:40.866075 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-14 12:11:40.866064179 +0000 UTC m=+162.411488421 I0414 12:11:40.866108 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 12:11:40.871390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:40.872394 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-14 12:11:40.872385663 +0000 UTC m=+162.417809895 E0414 12:11:40.880303 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0414 12:11:40.880344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:11:40.880379 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-14 12:11:40.880367455 +0000 UTC m=+162.425791697 E0414 12:11:40.880442 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 12:11:40.880468 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 12:11:40.880488 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-14 12:11:40.880478518 +0000 UTC m=+162.425902760 E0414 12:11:40.880506 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0414 12:11:40.895826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:40.895935 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-14 12:11:40.89592525 +0000 UTC m=+162.441349522 I0414 12:11:40.972740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:41.006126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-kxpbz" condition "Approved" to 2026-04-14 12:11:41.006110636 +0000 UTC m=+162.551534918 I0414 12:11:41.024860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-kxpbz" condition "Ready" to 2026-04-14 12:11:41.024841033 +0000 UTC m=+162.570265305 I0414 12:11:41.524431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:41.557766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pffxw" condition "Approved" to 2026-04-14 12:11:41.557750501 +0000 UTC m=+163.103174743 I0414 12:11:41.591379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pffxw" condition "Ready" to 2026-04-14 12:11:41.591364858 +0000 UTC m=+163.136789100 I0414 12:11:41.620605 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:41.620590585 +0000 UTC m=+163.166014817 I0414 12:11:41.641149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:41.641555 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:41.641548184 +0000 UTC m=+163.186972426 I0414 12:11:41.659887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:41.660183 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:41.660175739 +0000 UTC m=+163.205599971 I0414 12:11:41.662891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:45.881741 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:45.881720761 +0000 UTC m=+167.427145023 I0414 12:11:45.917736 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-kxpbz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:45.917720223 +0000 UTC m=+167.463144465 I0414 12:11:45.958652 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:45.958635208 +0000 UTC m=+167.504059470 I0414 12:11:45.988245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:11:45.988644 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:11:45.988634552 +0000 UTC m=+167.534058794 I0414 12:11:46.032820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:14:40.161659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:14:40.161708 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-14 12:14:40.161700393 +0000 UTC m=+341.707124625 I0414 12:14:40.161734 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-14 12:14:40.161716274 +0000 UTC m=+341.707140546 I0414 12:14:40.177149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:14:40.177264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:14:40.177290 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-14 12:14:40.177283778 +0000 UTC m=+341.722708020 I0414 12:14:40.407338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-9qnf9" condition "Approved" to 2026-04-14 12:14:40.407323555 +0000 UTC m=+341.952747797 I0414 12:14:40.426932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-9qnf9" condition "Ready" to 2026-04-14 12:14:40.426920811 +0000 UTC m=+341.972345053 I0414 12:14:40.455455 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:14:40.45543889 +0000 UTC m=+342.000863162 I0414 12:14:40.476879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:14:40.477282 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:14:40.477275108 +0000 UTC m=+342.022699350 I0414 12:14:40.500206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:14:40.500506 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:14:40.500496896 +0000 UTC m=+342.045921138 I0414 12:14:40.502963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:15:58.056096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:15:58.056150 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 12:15:58.056139885 +0000 UTC m=+419.601564157 I0414 12:15:58.056064 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 12:15:58.056023982 +0000 UTC m=+419.601448284 E0414 12:15:58.074974 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 12:15:58.075048 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-14 12:15:58.075039126 +0000 UTC m=+419.620463368 E0414 12:15:58.075080 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 12:15:58.079294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:15:58.079389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:15:58.079419 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 12:15:58.079411446 +0000 UTC m=+419.624835688 E0414 12:15:58.089786 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0414 12:15:58.090058 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 12:15:58.090113 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 12:15:58.090188 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0414 12:15:58.122573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n4z6d" condition "Approved" to 2026-04-14 12:15:58.122557669 +0000 UTC m=+419.667981931 I0414 12:15:58.135956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n4z6d" condition "Ready" to 2026-04-14 12:15:58.135942355 +0000 UTC m=+419.681366607 I0414 12:15:58.160618 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:15:58.160601557 +0000 UTC m=+419.706025799 I0414 12:15:58.176860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:15:58.220196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:03.090215 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:16:03.090198265 +0000 UTC m=+424.635622537 I0414 12:16:53.553928 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 12:16:53.553872169 +0000 UTC m=+475.099296431 I0414 12:16:53.554372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:16:53.554454 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 12:16:53.554444522 +0000 UTC m=+475.099868784 I0414 12:16:53.563003 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 12:16:53.562992866 +0000 UTC m=+475.108417108 I0414 12:16:53.563937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:16:53.563959 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 12:16:53.563956189 +0000 UTC m=+475.109380421 I0414 12:16:53.564169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:16:53.564185 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 12:16:53.564182194 +0000 UTC m=+475.109606416 I0414 12:16:53.564463 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 12:16:53.56445998 +0000 UTC m=+475.109884212 I0414 12:16:53.599935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:53.599984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:16:53.600003 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 12:16:53.599998201 +0000 UTC m=+475.145422433 I0414 12:16:53.671039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:53.671096 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 12:16:53.67108773 +0000 UTC m=+475.216511972 I0414 12:16:53.672433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:53.672608 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 12:16:53.672602235 +0000 UTC m=+475.218026497 I0414 12:16:53.820368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:53.826877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hh2jk" condition "Approved" to 2026-04-14 12:16:53.826864951 +0000 UTC m=+475.372289193 I0414 12:16:53.955507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:53.957615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hh2jk" condition "Ready" to 2026-04-14 12:16:53.957603289 +0000 UTC m=+475.503027531 I0414 12:16:54.035220 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:16:54.035191837 +0000 UTC m=+475.580616099 I0414 12:16:54.044138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r4gzx" condition "Approved" to 2026-04-14 12:16:54.04411416 +0000 UTC m=+475.589538422 I0414 12:16:54.070405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r4gzx" condition "Ready" to 2026-04-14 12:16:54.07039334 +0000 UTC m=+475.615817582 I0414 12:16:54.073671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:54.073990 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:16:54.073980502 +0000 UTC m=+475.619404734 I0414 12:16:54.081881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:54.100724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:54.100987 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:16:54.100977636 +0000 UTC m=+475.646401868 I0414 12:16:54.101638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:54.182395 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:16:54.182382612 +0000 UTC m=+475.727806854 I0414 12:16:54.227598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-926qg" condition "Approved" to 2026-04-14 12:16:54.227583112 +0000 UTC m=+475.773007344 I0414 12:16:54.368756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:54.369078 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:16:54.369071716 +0000 UTC m=+475.914495948 I0414 12:16:54.530323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-926qg" condition "Ready" to 2026-04-14 12:16:54.530309231 +0000 UTC m=+476.075733493 I0414 12:16:55.124980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:16:55.172045 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:16:55.172026875 +0000 UTC m=+476.717451137 I0414 12:16:55.304788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0414 12:16:55.535380 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-2qdw9\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0414 12:17:14.789791 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" condition "Ready" to 2026-04-14 12:17:14.7897748 +0000 UTC m=+496.335199032 I0414 12:17:14.789919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:17:14.789971 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" condition "Issuing" to 2026-04-14 12:17:14.789958844 +0000 UTC m=+496.335383116 I0414 12:17:14.808420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hncxz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:14.808516 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" condition "Ready" to 2026-04-14 12:17:14.808508376 +0000 UTC m=+496.353932618 I0414 12:17:16.168798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hncxz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:16.342968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hncxz-zth7t" condition "Approved" to 2026-04-14 12:17:16.342948275 +0000 UTC m=+497.888372537 I0414 12:17:16.540587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hncxz-zth7t" condition "Ready" to 2026-04-14 12:17:16.540570608 +0000 UTC m=+498.085994880 I0414 12:17:16.611674 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:17:16.611659448 +0000 UTC m=+498.157083710 I0414 12:17:16.646329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hncxz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:16.646845 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:17:16.646831479 +0000 UTC m=+498.192255751 I0414 12:17:16.703731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hncxz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hncxz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:57.002948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:17:57.002992 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 12:17:57.002981178 +0000 UTC m=+538.548405480 I0414 12:17:57.002990 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 12:17:57.002966448 +0000 UTC m=+538.548390760 I0414 12:17:57.023280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:57.023417 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:17:57.023451 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 12:17:57.023441375 +0000 UTC m=+538.568865637 I0414 12:17:57.212861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ngsp5" condition "Approved" to 2026-04-14 12:17:57.212846761 +0000 UTC m=+538.758271003 I0414 12:17:57.236013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ngsp5" condition "Ready" to 2026-04-14 12:17:57.235997179 +0000 UTC m=+538.781421431 I0414 12:17:57.272280 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:17:57.272253626 +0000 UTC m=+538.817677888 I0414 12:17:57.304956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:57.305537 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:17:57.305526143 +0000 UTC m=+538.850950415 I0414 12:17:57.322508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:17:57.322782 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:17:57.322774797 +0000 UTC m=+538.868199039 I0414 12:21:19.268714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:21:19.268787 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 12:21:19.268779313 +0000 UTC m=+740.814203555 I0414 12:21:19.268803 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 12:21:19.268771483 +0000 UTC m=+740.814195755 I0414 12:21:19.297396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:21:19.298072 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:21:19.298257 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 12:21:19.29811743 +0000 UTC m=+740.843541702 I0414 12:21:19.650754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w9pxg" condition "Approved" to 2026-04-14 12:21:19.650735209 +0000 UTC m=+741.196159471 I0414 12:21:19.670605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w9pxg" condition "Ready" to 2026-04-14 12:21:19.670592681 +0000 UTC m=+741.216016923 I0414 12:21:19.710267 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:21:19.710242504 +0000 UTC m=+741.255666766 I0414 12:21:19.735784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:21:19.736261 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:21:19.736251497 +0000 UTC m=+741.281675739 I0414 12:21:19.742649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:21:19.759079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:23:49.091165 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-14 12:23:49.091147582 +0000 UTC m=+890.636571854 I0414 12:23:49.091371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:23:49.091449 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-14 12:23:49.091432068 +0000 UTC m=+890.636856340 I0414 12:23:49.300139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:23:49.300208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:23:49.300224 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-14 12:23:49.300217511 +0000 UTC m=+890.845641743 I0414 12:23:49.572159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-gqf92" condition "Approved" to 2026-04-14 12:23:49.572139221 +0000 UTC m=+891.117563473 I0414 12:23:49.615561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-gqf92" condition "Ready" to 2026-04-14 12:23:49.615548099 +0000 UTC m=+891.160972341 I0414 12:23:49.734123 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:23:49.734102278 +0000 UTC m=+891.279526540 I0414 12:23:49.812779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:25:18.939316 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-14 12:25:18.939281831 +0000 UTC m=+980.484706103 I0414 12:25:18.939582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:25:18.941167 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-14 12:25:18.941156703 +0000 UTC m=+980.486580975 I0414 12:25:18.961616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:25:18.961836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:25:18.961931 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-14 12:25:18.961922496 +0000 UTC m=+980.507346758 I0414 12:25:19.287830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5spgn" condition "Approved" to 2026-04-14 12:25:19.287817543 +0000 UTC m=+980.833241785 I0414 12:25:19.314459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5spgn" condition "Ready" to 2026-04-14 12:25:19.314445548 +0000 UTC m=+980.859869800 I0414 12:25:19.360835 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:25:19.360822193 +0000 UTC m=+980.906246445 I0414 12:25:19.383162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:25:19.383412 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:25:19.383398976 +0000 UTC m=+980.928823208 I0414 12:25:19.385929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:25:19.404602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:25:19.405037 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:25:19.405030278 +0000 UTC m=+980.950454510 I0414 12:25:19.406225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:28:22.478461 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-14 12:28:22.478411051 +0000 UTC m=+1164.023835323 I0414 12:28:22.479172 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:28:22.479250 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-14 12:28:22.47923926 +0000 UTC m=+1164.024663532 I0414 12:28:22.519480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:28:22.519569 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-14 12:28:22.519560987 +0000 UTC m=+1164.064985229 I0414 12:28:22.753614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:28:22.938008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8m8jd" condition "Approved" to 2026-04-14 12:28:22.937987613 +0000 UTC m=+1164.483411885 I0414 12:28:22.980485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8m8jd" condition "Ready" to 2026-04-14 12:28:22.980474878 +0000 UTC m=+1164.525899120 I0414 12:28:23.081499 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:28:23.081478692 +0000 UTC m=+1164.626902964 I0414 12:28:23.143622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:28:23.144089 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:28:23.144079895 +0000 UTC m=+1164.689504147 I0414 12:28:23.196223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:34:36.663967 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:34:36.664034 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-14 12:34:36.664026675 +0000 UTC m=+1538.209450917 I0414 12:34:36.664725 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-14 12:34:36.664708851 +0000 UTC m=+1538.210133123 I0414 12:34:36.682997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:34:36.683087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:34:36.683111 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-14 12:34:36.683103048 +0000 UTC m=+1538.228527320 I0414 12:34:37.003833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:34:37.012695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-5qj8l" condition "Approved" to 2026-04-14 12:34:37.012681129 +0000 UTC m=+1538.558105401 I0414 12:34:37.028772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-5qj8l" condition "Ready" to 2026-04-14 12:34:37.028759365 +0000 UTC m=+1538.574183607 I0414 12:34:37.050003 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:34:37.049989796 +0000 UTC m=+1538.595414038 I0414 12:34:37.075033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:34:37.075527 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:34:37.075518045 +0000 UTC m=+1538.620942287 I0414 12:34:37.080637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:34:37.095565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:34:37.095861 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:34:37.095851946 +0000 UTC m=+1538.641276178 I0414 12:36:04.542677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:36:04.542782 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-14 12:36:04.542771137 +0000 UTC m=+1626.088195419 I0414 12:36:04.542816 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-14 12:36:04.542793368 +0000 UTC m=+1626.088217650 I0414 12:36:04.593682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:36:04.593734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:36:04.593746 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-14 12:36:04.593741763 +0000 UTC m=+1626.139165985 I0414 12:36:04.943645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:36:04.948780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-dcq72" condition "Approved" to 2026-04-14 12:36:04.948769255 +0000 UTC m=+1626.494193497 I0414 12:36:04.970340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-dcq72" condition "Ready" to 2026-04-14 12:36:04.970328804 +0000 UTC m=+1626.515753046 I0414 12:36:05.009534 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:36:05.009515233 +0000 UTC m=+1626.554939495 I0414 12:36:05.027671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:36:05.028389 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:36:05.028382111 +0000 UTC m=+1626.573806353 I0414 12:36:05.033900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:36:05.051333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:18.541023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:40:18.541132 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-14 12:40:18.541118831 +0000 UTC m=+1880.086543113 I0414 12:40:18.541693 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-14 12:40:18.541670005 +0000 UTC m=+1880.087094277 I0414 12:40:18.584006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:18.584726 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-14 12:40:18.584706599 +0000 UTC m=+1880.130130901 I0414 12:40:18.635103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:18.767233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8t6th" condition "Approved" to 2026-04-14 12:40:18.767218725 +0000 UTC m=+1880.312642957 I0414 12:40:18.805911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8t6th" condition "Ready" to 2026-04-14 12:40:18.805900942 +0000 UTC m=+1880.351325174 I0414 12:40:18.847758 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:40:18.84774049 +0000 UTC m=+1880.393164732 I0414 12:40:18.956851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:18.957272 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:40:18.957261422 +0000 UTC m=+1880.502685664 I0414 12:40:19.080974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:19.184559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:40:19.184582 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-14 12:40:19.184552363 +0000 UTC m=+1880.729976635 I0414 12:40:19.184620 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-14 12:40:19.184606394 +0000 UTC m=+1880.730030666 I0414 12:40:19.233573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:19.233762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:40:19.233816 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-14 12:40:19.233802259 +0000 UTC m=+1880.779226531 I0414 12:40:19.483567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:19.520523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-l8chn" condition "Approved" to 2026-04-14 12:40:19.520504216 +0000 UTC m=+1881.065928488 I0414 12:40:19.740857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-l8chn" condition "Ready" to 2026-04-14 12:40:19.740838329 +0000 UTC m=+1881.286262591 I0414 12:40:20.002056 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:40:20.002040498 +0000 UTC m=+1881.547464770 I0414 12:40:20.121668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:20.122035 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:40:20.122024777 +0000 UTC m=+1881.667449039 I0414 12:40:20.204475 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-14 12:40:20.204461265 +0000 UTC m=+1881.749885517 I0414 12:40:20.305905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:20.305906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:40:20.948408 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-14 12:40:20.948388523 +0000 UTC m=+1882.493812785 I0414 12:41:05.965325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:41:05.965356 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-14 12:41:05.965349068 +0000 UTC m=+1927.510773300 I0414 12:41:05.965386 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-14 12:41:05.965368709 +0000 UTC m=+1927.510792951 I0414 12:41:05.988745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:41:05.988839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:41:05.988863 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-14 12:41:05.988857202 +0000 UTC m=+1927.534281434 I0414 12:41:09.973667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:41:09.998615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-frjzp" condition "Approved" to 2026-04-14 12:41:09.998600797 +0000 UTC m=+1931.544025039 I0414 12:41:10.021612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-frjzp" condition "Ready" to 2026-04-14 12:41:10.021594438 +0000 UTC m=+1931.567018710 I0414 12:41:10.055831 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:41:10.055822024 +0000 UTC m=+1931.601246256 I0414 12:41:10.075961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:41:10.141712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:40.225003 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-14 12:43:40.224982258 +0000 UTC m=+2081.770406520 I0414 12:43:40.225028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:43:40.225122 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-14 12:43:40.225111591 +0000 UTC m=+2081.770535853 I0414 12:43:40.247609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:40.247763 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-14 12:43:40.247751254 +0000 UTC m=+2081.793175496 I0414 12:43:40.432474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:40.467161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-zzsz4" condition "Approved" to 2026-04-14 12:43:40.467145236 +0000 UTC m=+2082.012569478 I0414 12:43:40.488082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-zzsz4" condition "Ready" to 2026-04-14 12:43:40.48807242 +0000 UTC m=+2082.033496652 I0414 12:43:40.529272 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:43:40.529251154 +0000 UTC m=+2082.074675426 I0414 12:43:40.554226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:40.554626 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:43:40.554618888 +0000 UTC m=+2082.100043130 I0414 12:43:40.579193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:41.829064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:43:41.829080 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-14 12:43:41.829061019 +0000 UTC m=+2083.374485261 I0414 12:43:41.829112 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-14 12:43:41.82910091 +0000 UTC m=+2083.374525152 I0414 12:43:41.849028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:41.849134 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-14 12:43:41.849120323 +0000 UTC m=+2083.394544565 I0414 12:43:42.341403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:42.372553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-wv46n" condition "Approved" to 2026-04-14 12:43:42.372535185 +0000 UTC m=+2083.917959437 I0414 12:43:42.392108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-wv46n" condition "Ready" to 2026-04-14 12:43:42.392096728 +0000 UTC m=+2083.937520960 I0414 12:43:42.419072 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:43:42.419058748 +0000 UTC m=+2083.964482990 I0414 12:43:42.447066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:42.447449 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:43:42.447439731 +0000 UTC m=+2083.992863973 I0414 12:43:42.458565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:43:42.492392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:47:04.255543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:47:04.255609 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-14 12:47:04.255602177 +0000 UTC m=+2285.801026419 I0414 12:47:04.255768 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-14 12:47:04.255751051 +0000 UTC m=+2285.801175323 I0414 12:47:04.270894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:47:04.271082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:47:04.271104 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-14 12:47:04.271098239 +0000 UTC m=+2285.816522471 I0414 12:47:04.603092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:47:04.607853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-vc2jg" condition "Approved" to 2026-04-14 12:47:04.607841608 +0000 UTC m=+2286.153265850 I0414 12:47:04.745697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-vc2jg" condition "Ready" to 2026-04-14 12:47:04.74567803 +0000 UTC m=+2286.291102302 I0414 12:47:04.783085 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:47:04.783070718 +0000 UTC m=+2286.328494960 I0414 12:47:04.804006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:47:04.804442 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:47:04.804435791 +0000 UTC m=+2286.349860043 I0414 12:47:04.827587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:47:04.832500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:01.611251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-cl82b-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:50:01.611343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-cl82b-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:50:01.611386 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cl82b-vnc" condition "Issuing" to 2026-04-14 12:50:01.611378217 +0000 UTC m=+2463.156802459 I0414 12:50:01.611242 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cl82b-api" condition "Ready" to 2026-04-14 12:50:01.611204503 +0000 UTC m=+2463.156628735 I0414 12:50:01.611379 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cl82b-api" condition "Issuing" to 2026-04-14 12:50:01.611366326 +0000 UTC m=+2463.156790598 I0414 12:50:01.611585 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cl82b-vnc" condition "Ready" to 2026-04-14 12:50:01.611569001 +0000 UTC m=+2463.156993233 I0414 12:50:03.507060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-cl82b-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-api\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:03.507193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-cl82b-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:50:03.507215 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cl82b-api" condition "Issuing" to 2026-04-14 12:50:03.50720874 +0000 UTC m=+2465.052633002 I0414 12:50:03.508022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-cl82b-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:03.508087 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cl82b-vnc" condition "Ready" to 2026-04-14 12:50:03.508083599 +0000 UTC m=+2465.053507841 I0414 12:50:04.521969 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cl82b-vnc" condition "Ready" to 2026-04-14 12:50:04.5219551 +0000 UTC m=+2466.067379362 I0414 12:50:04.522175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-cl82b-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 12:50:04.522221 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cl82b-api" condition "Issuing" to 2026-04-14 12:50:04.522212306 +0000 UTC m=+2466.067636568 I0414 12:50:05.074920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-cl82b-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:05.074930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-cl82b-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-api\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:06.196417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-cl82b-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:06.977465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cl82b-api-qfksv" condition "Approved" to 2026-04-14 12:50:06.977456212 +0000 UTC m=+2468.522880474 I0414 12:50:06.998917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-cl82b-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-api\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:11.792872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cl82b-vnc-hrp9w" condition "Approved" to 2026-04-14 12:50:11.792858382 +0000 UTC m=+2473.338282644 I0414 12:50:11.792985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cl82b-api-qfksv" condition "Ready" to 2026-04-14 12:50:11.792970104 +0000 UTC m=+2473.338394386 I0414 12:50:17.070853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cl82b-vnc-hrp9w" condition "Ready" to 2026-04-14 12:50:17.070844493 +0000 UTC m=+2478.616268715 E0414 12:50:24.070457 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0414 12:50:24.073806 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{libvirt-libvirt-default-cl82b-vnc-hrp9w.18a63a1fea573e15 openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:libvirt-libvirt-default-cl82b-vnc-hrp9w,UID:13380843-9024-4631-a649-fe5f4e167e4d,APIVersion:cert-manager.io/v1,ResourceVersion:19295,FieldPath:,},Reason:WaitingForApproval,Message:Not signing CertificateRequest until it is Approved,Source:EventSource{Component:cert-manager-certificaterequests-issuer-ca,Host:,},FirstTimestamp:2026-04-14 12:50:11.794222613 +0000 UTC m=+2473.339646885,LastTimestamp:2026-04-14 12:50:11.794222613 +0000 UTC m=+2473.339646885,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-ca,ReportingInstance:,}" E0414 12:50:24.076951 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{libvirt-libvirt-default-cl82b-vnc-hrp9w.18a63a21248a7413 openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:libvirt-libvirt-default-cl82b-vnc-hrp9w,UID:13380843-9024-4631-a649-fe5f4e167e4d,APIVersion:cert-manager.io/v1,ResourceVersion:19295,FieldPath:,},Reason:cert-manager.io,Message:Certificate request has been approved by cert-manager.io,Source:EventSource{Component:cert-manager-certificaterequests-approver,Host:,},FirstTimestamp:2026-04-14 12:50:17.065624595 +0000 UTC m=+2478.611048877,LastTimestamp:2026-04-14 12:50:17.065624595 +0000 UTC m=+2478.611048877,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-approver,ReportingInstance:,}" E0414 12:50:24.082543 1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificaterequests-issuer-ca" key="openstack/libvirt-libvirt-default-cl82b-vnc-hrp9w" E0414 12:50:27.068977 1 controller.go:167] "re-queuing item due to error processing" err="failed to apply secret openstack/libvirt-libvirt-default-cl82b-api: Patch \"https://10.96.0.1:443/api/v1/namespaces/openstack/secrets/libvirt-libvirt-default-cl82b-api?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-cl82b-api" I0414 12:50:29.085030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cl82b-vnc-hrp9w" condition "Ready" to 2026-04-14 12:50:29.085012491 +0000 UTC m=+2490.630436753 I0414 12:50:33.863072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificaterequests-issuer-ca" key="openstack/libvirt-libvirt-default-cl82b-vnc-hrp9w" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"libvirt-libvirt-default-cl82b-vnc-hrp9w\": the object has been modified; please apply your changes to the latest version and try again" E0414 12:50:38.071212 1 controller.go:167] "re-queuing item due to error processing" err="failed to apply secret openstack/libvirt-libvirt-default-cl82b-api: Patch \"https://10.96.0.1:443/api/v1/namespaces/openstack/secrets/libvirt-libvirt-default-cl82b-api?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-cl82b-api" I0414 12:50:38.503328 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-cl82b-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:50:38.503311466 +0000 UTC m=+2500.048735718 I0414 12:50:38.556418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-cl82b-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:38.556686 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-cl82b-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:50:38.556681385 +0000 UTC m=+2500.102105617 I0414 12:50:38.603391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-cl82b-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0414 12:50:40.091604 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-cl82b-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 12:50:40.091594 +0000 UTC m=+2501.637018232 I0414 12:50:40.119635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-cl82b-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cl82b-api\": the object has been modified; please apply your changes to the latest version and try again" E0414 12:55:19.871201 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0414 12:55:37.544945 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:55:37.603777 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:55:39.006996 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:55:39.413995 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:55:40.361719 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:55:42.037883 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:55:42.276878 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:55:43.389205 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 12:55:44.138632 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 13:01:15.056757 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-14 13:01:15.056695033 +0000 UTC m=+3136.602119315 I0414 13:01:15.057201 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:01:15.057256 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-14 13:01:15.057250396 +0000 UTC m=+3136.602674648 I0414 13:01:15.110422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:01:15.110562 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-14 13:01:15.110550813 +0000 UTC m=+3136.655975085 I0414 13:01:15.377290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:01:15.469757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-lftjl" condition "Approved" to 2026-04-14 13:01:15.46974612 +0000 UTC m=+3137.015170362 I0414 13:01:15.565144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-lftjl" condition "Ready" to 2026-04-14 13:01:15.56512612 +0000 UTC m=+3137.110550382 I0414 13:01:15.702162 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:01:15.702143944 +0000 UTC m=+3137.247568206 I0414 13:01:15.757913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:01:15.758585 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:01:15.758574352 +0000 UTC m=+3137.303998624 I0414 13:01:15.956669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:01:16.562978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:01:16.562987 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-14 13:01:16.562968643 +0000 UTC m=+3138.108392915 I0414 13:01:16.563009 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-14 13:01:16.563001624 +0000 UTC m=+3138.108425866 I0414 13:01:16.970918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:01:16.971174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:01:16.971233 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-14 13:01:16.97120164 +0000 UTC m=+3138.516625902 I0414 13:01:20.993175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:01:20.993824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-sdmdd" condition "Approved" to 2026-04-14 13:01:20.993810687 +0000 UTC m=+3142.539234929 I0414 13:01:21.207876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-sdmdd" condition "Ready" to 2026-04-14 13:01:21.207867387 +0000 UTC m=+3142.753291619 I0414 13:01:21.975730 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:01:21.975719109 +0000 UTC m=+3143.521143371 I0414 13:01:22.537605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:01:22.537978 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:01:22.537968236 +0000 UTC m=+3144.083392498 I0414 13:01:24.358390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:01:24.576961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:26.646873 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-14 13:07:26.646815439 +0000 UTC m=+3508.192239711 I0414 13:07:26.646894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:07:26.647088 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-14 13:07:26.647080465 +0000 UTC m=+3508.192504697 E0414 13:07:27.240497 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 13:07:27.240642 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-14 13:07:27.240629831 +0000 UTC m=+3508.786054073 I0414 13:07:27.240672 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 13:07:27.245705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:27.245823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:07:27.245855 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-14 13:07:27.245846189 +0000 UTC m=+3508.791270431 E0414 13:07:27.298961 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0414 13:07:27.299087 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 13:07:27.299127 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 13:07:27.299316 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0414 13:07:29.360386 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-14 13:07:29.360367827 +0000 UTC m=+3510.905792079 I0414 13:07:29.360624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:07:29.360675 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-14 13:07:29.360663174 +0000 UTC m=+3510.906087406 I0414 13:07:29.362519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:29.363354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-7pjlr" condition "Approved" to 2026-04-14 13:07:29.363346295 +0000 UTC m=+3510.908770537 I0414 13:07:29.619373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-7pjlr" condition "Ready" to 2026-04-14 13:07:29.61936083 +0000 UTC m=+3511.164785082 I0414 13:07:29.620334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:29.620394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:07:29.620406 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-14 13:07:29.620402713 +0000 UTC m=+3511.165826935 E0414 13:07:29.818594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 13:07:29.818628 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-14 13:07:29.818620741 +0000 UTC m=+3511.364044963 I0414 13:07:29.818667 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 13:07:30.042853 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0414 13:07:30.043252 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 13:07:30.043337 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 13:07:30.043431 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0414 13:07:30.106388 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:07:30.106379505 +0000 UTC m=+3511.651803737 I0414 13:07:31.091639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:31.091913 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:07:31.091880485 +0000 UTC m=+3512.637304727 I0414 13:07:31.142182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-5d7kq" condition "Approved" to 2026-04-14 13:07:31.142164343 +0000 UTC m=+3512.687588595 I0414 13:07:31.659148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:32.300170 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:07:32.300153677 +0000 UTC m=+3513.845577939 I0414 13:07:32.839530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:07:32.839593 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-14 13:07:32.839580547 +0000 UTC m=+3514.385004819 I0414 13:07:32.840291 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-14 13:07:32.840280204 +0000 UTC m=+3514.385704466 I0414 13:07:32.840847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-5d7kq" condition "Ready" to 2026-04-14 13:07:32.840836096 +0000 UTC m=+3514.386260328 I0414 13:07:33.793781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:33.793874 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-14 13:07:33.7938686 +0000 UTC m=+3515.339292842 I0414 13:07:34.901522 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-14 13:07:34.901502435 +0000 UTC m=+3516.446926787 E0414 13:07:35.043496 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 13:07:35.043536 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 13:07:35.043583 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0414 13:07:35.520401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:36.098317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:36.098765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:36.936038 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:07:36.936018212 +0000 UTC m=+3518.481442454 I0414 13:07:38.226394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:39.307698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vm247" condition "Approved" to 2026-04-14 13:07:39.30766759 +0000 UTC m=+3520.853091862 I0414 13:07:40.077941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vm247" condition "Ready" to 2026-04-14 13:07:40.077924746 +0000 UTC m=+3521.623348988 I0414 13:07:42.405115 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:07:42.405094318 +0000 UTC m=+3523.950518580 I0414 13:07:42.405452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:43.219059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:43.219467 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:07:43.219456364 +0000 UTC m=+3524.764880606 I0414 13:07:46.704714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:46.706971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:07:55.044223 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:07:55.044208778 +0000 UTC m=+3536.589633040 I0414 13:14:07.904333 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-14 13:14:07.904291432 +0000 UTC m=+3909.449715684 I0414 13:14:07.904637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:14:07.904692 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-14 13:14:07.904687331 +0000 UTC m=+3909.450111573 I0414 13:14:08.098721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:14:08.098883 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-14 13:14:08.098872052 +0000 UTC m=+3909.644296324 I0414 13:14:09.030164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:14:09.222601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-nsct5" condition "Approved" to 2026-04-14 13:14:09.222584294 +0000 UTC m=+3910.768008556 I0414 13:14:09.313895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-nsct5" condition "Ready" to 2026-04-14 13:14:09.313880109 +0000 UTC m=+3910.859304371 I0414 13:14:09.464806 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:14:09.464794462 +0000 UTC m=+3911.010218694 I0414 13:14:09.498533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:14:09.499032 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:14:09.499023995 +0000 UTC m=+3911.044448257 I0414 13:14:09.506221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:14:09.518051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:14:09.518343 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:14:09.518335062 +0000 UTC m=+3911.063759304 I0414 13:15:43.878796 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-14 13:15:43.878716071 +0000 UTC m=+4005.424140343 I0414 13:15:44.167564 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-14 13:15:44.167543002 +0000 UTC m=+4005.712967274 I0414 13:15:44.167995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:15:44.168048 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-14 13:15:44.168041473 +0000 UTC m=+4005.713465715 I0414 13:15:44.424540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:15:44.424638 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-14 13:15:44.424627816 +0000 UTC m=+4005.970052088 E0414 13:15:44.437277 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0414 13:15:44.505301 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-14 13:15:44.50528487 +0000 UTC m=+4006.050709112 I0414 13:15:44.533481 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-14 13:15:44.533459527 +0000 UTC m=+4006.078883799 I0414 13:15:44.533948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:15:44.533973 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-14 13:15:44.533966469 +0000 UTC m=+4006.079390741 I0414 13:15:44.560344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:15:44.560515 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-14 13:15:44.560496208 +0000 UTC m=+4006.105920490 E0414 13:15:44.590848 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0414 13:15:44.801542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:15:44.848746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-zqzll" condition "Approved" to 2026-04-14 13:15:44.848726857 +0000 UTC m=+4006.394151149 I0414 13:15:44.873216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-zqzll" condition "Ready" to 2026-04-14 13:15:44.87320376 +0000 UTC m=+4006.418627992 I0414 13:15:44.952393 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:15:44.952384751 +0000 UTC m=+4006.497808993 I0414 13:15:45.083391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:15:45.657642 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-14 13:15:45.65762645 +0000 UTC m=+4007.203050692 I0414 13:15:45.692758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:15:45.692787 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-14 13:15:45.692779774 +0000 UTC m=+4007.238204006 I0414 13:15:45.695105 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-14 13:15:45.695096977 +0000 UTC m=+4007.240521209 I0414 13:15:45.721906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:15:45.722043 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-14 13:15:45.722028676 +0000 UTC m=+4007.267452948 I0414 13:15:45.877092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:15:46.043018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-7hvnm" condition "Approved" to 2026-04-14 13:15:46.043004134 +0000 UTC m=+4007.588428386 I0414 13:15:46.086699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-7hvnm" condition "Ready" to 2026-04-14 13:15:46.086686792 +0000 UTC m=+4007.632111024 I0414 13:15:46.137354 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:15:46.137329878 +0000 UTC m=+4007.682754120 I0414 13:15:46.167172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:15:47.137402 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-14 13:15:47.137389594 +0000 UTC m=+4008.682813836 I0414 13:15:47.330635 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-14 13:15:47.330623193 +0000 UTC m=+4008.876047425 I0414 13:15:47.330973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:15:47.331118 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-14 13:15:47.331106964 +0000 UTC m=+4008.876531206 I0414 13:15:47.598220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:15:47.598364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:15:47.598440 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-14 13:15:47.598432879 +0000 UTC m=+4009.143857111 I0414 13:15:51.741447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-247mv" condition "Approved" to 2026-04-14 13:15:51.7414295 +0000 UTC m=+4013.286853742 I0414 13:15:52.935336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-247mv" condition "Ready" to 2026-04-14 13:15:52.93531133 +0000 UTC m=+4014.480735602 E0414 13:16:05.456088 1 controller.go:167] "re-queuing item due to error processing" err="failed to apply secret capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-webhook-service-cert: Patch \"https://10.96.0.1:443/api/v1/namespaces/capi-kubeadm-control-plane-system/secrets/capi-kubeadm-control-plane-webhook-service-cert?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0414 13:16:14.886452 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:16:14.88643676 +0000 UTC m=+4036.431860992 E0414 13:16:16.458248 1 controller.go:167] "re-queuing item due to error processing" err="failed to apply secret capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-webhook-service-cert: Patch \"https://10.96.0.1:443/api/v1/namespaces/capi-kubeadm-control-plane-system/secrets/capi-kubeadm-control-plane-webhook-service-cert?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" I0414 13:16:21.820596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:16:51.000837 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-14 13:16:51.000820926 +0000 UTC m=+4072.546245168 I0414 13:16:51.335112 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-14 13:16:51.335083645 +0000 UTC m=+4072.880507917 I0414 13:16:51.335254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:16:51.335301 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-14 13:16:51.335290219 +0000 UTC m=+4072.880714481 I0414 13:16:51.379850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:16:51.379918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:16:51.379939 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-14 13:16:51.379933109 +0000 UTC m=+4072.925357341 I0414 13:16:51.998051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-vj99l" condition "Approved" to 2026-04-14 13:16:51.998032107 +0000 UTC m=+4073.543456349 I0414 13:16:53.036803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-vj99l" condition "Ready" to 2026-04-14 13:16:53.036788588 +0000 UTC m=+4074.582212840 I0414 13:16:53.207022 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:16:53.206999618 +0000 UTC m=+4074.752423890 I0414 13:16:53.289004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:16:53.290077 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:16:53.290068396 +0000 UTC m=+4074.835492628 I0414 13:16:53.426946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:16:53.427408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:24:03.696244 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-14 13:24:03.696116748 +0000 UTC m=+4505.241541010 I0414 13:24:03.696480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:24:03.696526 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-14 13:24:03.696515408 +0000 UTC m=+4505.241939670 I0414 13:24:03.769413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:24:03.770830 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-14 13:24:03.770820437 +0000 UTC m=+4505.316244669 I0414 13:24:03.959539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:24:04.096623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-pkbjm" condition "Approved" to 2026-04-14 13:24:04.096605915 +0000 UTC m=+4505.642030147 I0414 13:24:04.143187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-pkbjm" condition "Ready" to 2026-04-14 13:24:04.143177748 +0000 UTC m=+4505.688601980 I0414 13:24:04.183725 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:24:04.183714805 +0000 UTC m=+4505.729139027 I0414 13:24:04.223428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:24:06.610464 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-14 13:24:06.610450854 +0000 UTC m=+4508.155875086 I0414 13:24:06.610759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:24:06.610903 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-14 13:24:06.610895494 +0000 UTC m=+4508.156319726 I0414 13:24:06.669508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:24:06.669649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:24:06.669674 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-14 13:24:06.669668513 +0000 UTC m=+4508.215092745 I0414 13:24:07.204513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-psxv4" condition "Approved" to 2026-04-14 13:24:07.204499508 +0000 UTC m=+4508.749923750 I0414 13:24:07.286795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-psxv4" condition "Ready" to 2026-04-14 13:24:07.286779428 +0000 UTC m=+4508.832203670 I0414 13:24:07.413131 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:24:07.413117515 +0000 UTC m=+4508.958541747 I0414 13:24:07.508025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:24:07.508428 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:24:07.50841489 +0000 UTC m=+4509.053839112 I0414 13:24:07.547391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0414 13:25:42.828297 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out I0414 13:35:27.088470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:35:27.088541 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-14 13:35:27.088532323 +0000 UTC m=+5188.633956595 I0414 13:35:27.088513 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-14 13:35:27.088489562 +0000 UTC m=+5188.633913834 I0414 13:35:27.136304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:35:27.136387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:35:27.136407 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-14 13:35:27.136399135 +0000 UTC m=+5188.681823377 I0414 13:35:27.470042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:35:27.478548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-kzbzc" condition "Approved" to 2026-04-14 13:35:27.478540252 +0000 UTC m=+5189.023964484 I0414 13:35:27.507788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-kzbzc" condition "Ready" to 2026-04-14 13:35:27.507776843 +0000 UTC m=+5189.053201075 I0414 13:35:27.574596 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:35:27.574585463 +0000 UTC m=+5189.120009705 I0414 13:35:27.619345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:36:13.079597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 13:36:13.079656 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-14 13:36:13.079644545 +0000 UTC m=+5234.625068807 I0414 13:36:13.081491 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 13:36:13.081446206 +0000 UTC m=+5234.626870458 I0414 13:36:13.115074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:36:13.115389 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-14 13:36:13.115365593 +0000 UTC m=+5234.660789855 I0414 13:36:13.685521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:36:13.763993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4pc7x" condition "Approved" to 2026-04-14 13:36:13.763980599 +0000 UTC m=+5235.309404851 I0414 13:36:13.822036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4pc7x" condition "Ready" to 2026-04-14 13:36:13.822027592 +0000 UTC m=+5235.367451844 I0414 13:36:13.854547 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:36:13.854537168 +0000 UTC m=+5235.399961400 I0414 13:36:13.879777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:36:13.880161 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 13:36:13.880154397 +0000 UTC m=+5235.425578649 I0414 13:36:13.888942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 13:36:13.923464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"