I0421 17:41:50.305733 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 17:41:50.305909 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 17:41:50.306077 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 17:41:50.311026 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 17:41:50.311388 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 17:41:50.311440 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 17:41:50.311505 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 17:41:50.314078 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 17:41:50.328621 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 17:41:50.335448 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 17:41:50.335486 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 17:41:50.335738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 17:41:50.339224 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 17:41:50.342719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 17:41:50.345328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 17:41:50.347638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 17:41:50.349304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 17:41:50.355574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 17:41:50.359848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 17:41:50.362477 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 17:41:50.365156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 17:41:50.367735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 17:41:50.369784 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 17:41:50.371528 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 17:41:50.371588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 17:41:50.373540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 17:41:50.376375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 17:41:50.382653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 17:41:50.385463 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 17:41:50.385491 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 17:41:50.385505 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 17:41:50.385578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 17:41:50.388733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 17:41:50.390763 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.390879 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.390979 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.391055 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.391671 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.392217 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.392611 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.392862 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.392915 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:41:50.474353 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:42:01.013010 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 17:42:01.012995287 +0000 UTC m=+10.741570309 I0421 17:42:01.754453 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:42:01.754433855 +0000 UTC m=+11.483008877 I0421 17:42:01.754468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:42:01.754564 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:42:01.754554088 +0000 UTC m=+11.483129110 E0421 17:42:01.769831 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:42:01.769978 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 17:42:01.769967711 +0000 UTC m=+11.498542753 E0421 17:42:01.770038 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:42:01.773091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:42:01.773193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:42:01.773241 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:42:01.773233016 +0000 UTC m=+11.501808028 E0421 17:42:01.784384 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 17:42:01.784538 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:42:01.784584 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:42:01.784629 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 17:42:01.824525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:42:01.831243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hf4rp" condition "Approved" to 2026-04-21 17:42:01.831227585 +0000 UTC m=+11.559802607 I0421 17:42:01.845559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hf4rp" condition "Ready" to 2026-04-21 17:42:01.845546996 +0000 UTC m=+11.574122018 I0421 17:42:01.870539 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:01.870521936 +0000 UTC m=+11.599096988 I0421 17:42:01.890205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:42:01.890727 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:01.890717929 +0000 UTC m=+11.619292951 I0421 17:42:01.896003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:42:01.906529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:42:01.906847 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:01.906838381 +0000 UTC m=+11.635413403 I0421 17:42:06.785833 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:06.785813605 +0000 UTC m=+16.514388647 I0421 17:42:27.267303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:42:27.267345 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 17:42:27.267335989 +0000 UTC m=+36.995911011 I0421 17:42:27.267673 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:42:27.267667968 +0000 UTC m=+36.996242990 I0421 17:42:27.287777 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 17:42:27.287766075 +0000 UTC m=+37.016341087 I0421 17:42:27.292435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:42:27.292513 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:42:27.292506732 +0000 UTC m=+37.021081744 I0421 17:42:27.552268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:42:27.590284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gngcb" condition "Approved" to 2026-04-21 17:42:27.590271083 +0000 UTC m=+37.318846095 I0421 17:42:27.630042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gngcb" condition "Ready" to 2026-04-21 17:42:27.630025891 +0000 UTC m=+37.358600944 I0421 17:42:27.668338 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:27.668325057 +0000 UTC m=+37.396900079 I0421 17:42:27.690025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:42:27.690315 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:27.690306408 +0000 UTC m=+37.418881430 I0421 17:42:27.712460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:44:11.972645 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-21 17:44:11.97260129 +0000 UTC m=+141.701176312 I0421 17:44:11.972814 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:44:11.972864 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-21 17:44:11.972854968 +0000 UTC m=+141.701429990 E0421 17:44:11.987599 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 17:44:11.987671 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-21 17:44:11.98766283 +0000 UTC m=+141.716237852 I0421 17:44:11.987714 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 17:44:11.990465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:44:11.990620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:44:11.990651 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-21 17:44:11.990644065 +0000 UTC m=+141.719219077 E0421 17:44:11.999362 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0421 17:44:11.999476 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 17:44:11.999509 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0421 17:44:11.999549 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0421 17:44:11.999903 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-21 17:44:11.999885489 +0000 UTC m=+141.728460511 I0421 17:44:11.999942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:44:11.999977 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-21 17:44:11.999969091 +0000 UTC m=+141.728544113 I0421 17:44:12.018370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:44:12.018456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:44:12.018476 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-21 17:44:12.01846992 +0000 UTC m=+141.747044942 I0421 17:44:12.161420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-khvxp" condition "Approved" to 2026-04-21 17:44:12.161404209 +0000 UTC m=+141.889979231 I0421 17:44:12.181490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-khvxp" condition "Ready" to 2026-04-21 17:44:12.181473012 +0000 UTC m=+141.910048024 I0421 17:44:12.421446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fl5sx" condition "Approved" to 2026-04-21 17:44:12.421421731 +0000 UTC m=+142.149996783 I0421 17:44:12.447755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fl5sx" condition "Ready" to 2026-04-21 17:44:12.447742041 +0000 UTC m=+142.176317063 I0421 17:44:12.474082 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:44:12.474063842 +0000 UTC m=+142.202638874 I0421 17:44:12.491671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:44:12.491948 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:44:12.491941633 +0000 UTC m=+142.220516655 I0421 17:44:12.511505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:44:12.511552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:44:12.511848 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:44:12.511838641 +0000 UTC m=+142.240413663 I0421 17:44:17.001096 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:44:17.001082778 +0000 UTC m=+146.729657850 I0421 17:44:17.021097 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-khvxp" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:44:17.021081339 +0000 UTC m=+146.749656361 I0421 17:44:17.053932 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:44:17.053915696 +0000 UTC m=+146.782490748 I0421 17:44:17.077183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:46:48.194120 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready" to 2026-04-21 17:46:48.194083786 +0000 UTC m=+297.922658808 I0421 17:46:48.194521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-3.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:46:48.194542 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Issuing" to 2026-04-21 17:46:48.194538289 +0000 UTC m=+297.923113311 I0421 17:46:48.217479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:46:48.217566 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready" to 2026-04-21 17:46:48.217558411 +0000 UTC m=+297.946133423 I0421 17:46:48.488565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:46:48.520094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-3.nip.io-tls-vqw8t" condition "Approved" to 2026-04-21 17:46:48.520077447 +0000 UTC m=+298.248652489 I0421 17:46:48.540350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-3.nip.io-tls-vqw8t" condition "Ready" to 2026-04-21 17:46:48.540332711 +0000 UTC m=+298.268907753 I0421 17:46:48.594545 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-3.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:46:48.594536365 +0000 UTC m=+298.323111377 I0421 17:46:48.616197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:46:48.666913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-3.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-3.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:00.114742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:00.114817 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:48:00.114782337 +0000 UTC m=+369.843357379 I0421 17:48:00.115224 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 17:48:00.11520202 +0000 UTC m=+369.843777062 E0421 17:48:00.125878 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:48:00.125941 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 17:48:00.125927452 +0000 UTC m=+369.854502514 E0421 17:48:00.126079 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:48:00.131316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:00.131365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:00.131381 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:48:00.131376916 +0000 UTC m=+369.859951938 E0421 17:48:00.134814 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 17:48:00.134902 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:48:00.134948 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:48:00.134989 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 17:48:00.167979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lt8zc" condition "Approved" to 2026-04-21 17:48:00.16796471 +0000 UTC m=+369.896539752 I0421 17:48:00.181748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lt8zc" condition "Ready" to 2026-04-21 17:48:00.181737929 +0000 UTC m=+369.910312951 I0421 17:48:00.206415 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:00.206404766 +0000 UTC m=+369.934979778 I0421 17:48:00.225780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:00.226065 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:00.226054462 +0000 UTC m=+369.954629514 I0421 17:48:00.240064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:00.240334 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:00.240326755 +0000 UTC m=+369.968901777 I0421 17:48:05.135887 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:05.135873341 +0000 UTC m=+374.864448383 I0421 17:48:44.266692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:44.266731 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:48:44.266724166 +0000 UTC m=+413.995299168 I0421 17:48:44.267784 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 17:48:44.267777225 +0000 UTC m=+413.996352237 I0421 17:48:44.268084 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 17:48:44.268080005 +0000 UTC m=+413.996655027 I0421 17:48:44.268464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:44.268487 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:48:44.268483346 +0000 UTC m=+413.997058358 I0421 17:48:44.272089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:44.272145 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:48:44.272118859 +0000 UTC m=+414.000693871 I0421 17:48:44.272614 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:48:44.272606502 +0000 UTC m=+414.001181514 I0421 17:48:44.290524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.290601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:44.290623 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:48:44.290618423 +0000 UTC m=+414.019193435 I0421 17:48:44.306101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.306176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:44.306199 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:48:44.306192913 +0000 UTC m=+414.034767925 I0421 17:48:44.311245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.311328 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:44.311351 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:48:44.311345349 +0000 UTC m=+414.039920371 I0421 17:48:44.496365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.504697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xhdt2" condition "Approved" to 2026-04-21 17:48:44.504668742 +0000 UTC m=+414.233243774 I0421 17:48:44.504838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.515446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8hgvr" condition "Approved" to 2026-04-21 17:48:44.515422637 +0000 UTC m=+414.243997689 I0421 17:48:44.522354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xhdt2" condition "Ready" to 2026-04-21 17:48:44.522334822 +0000 UTC m=+414.250909864 I0421 17:48:44.531926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8hgvr" condition "Ready" to 2026-04-21 17:48:44.531912354 +0000 UTC m=+414.260487376 I0421 17:48:44.588360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:44.588394 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:48:44.588387463 +0000 UTC m=+414.316962485 I0421 17:48:44.590302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:44.590519 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:48:44.590512983 +0000 UTC m=+414.319088005 I0421 17:48:44.599872 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:44.599863967 +0000 UTC m=+414.328438979 I0421 17:48:44.600190 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:44.600187136 +0000 UTC m=+414.328762148 I0421 17:48:44.658017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.754417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.802112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.802583 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:44.802572146 +0000 UTC m=+414.531147188 I0421 17:48:44.856758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:44.857542 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:44.857527922 +0000 UTC m=+414.586102984 I0421 17:48:45.310020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lwzmv" condition "Approved" to 2026-04-21 17:48:45.310000193 +0000 UTC m=+415.038575245 I0421 17:48:45.419353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zs4zl" condition "Approved" to 2026-04-21 17:48:45.419333568 +0000 UTC m=+415.147908610 I0421 17:48:45.568390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lwzmv" condition "Ready" to 2026-04-21 17:48:45.568374887 +0000 UTC m=+415.296949939 I0421 17:48:45.856514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:45.920456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6jnr8" condition "Approved" to 2026-04-21 17:48:45.920440404 +0000 UTC m=+415.649015426 I0421 17:48:45.971880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zs4zl" condition "Ready" to 2026-04-21 17:48:45.97186437 +0000 UTC m=+415.700439412 I0421 17:48:46.462818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6jnr8" condition "Ready" to 2026-04-21 17:48:46.462807909 +0000 UTC m=+416.191382931 I0421 17:48:47.158652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:47.260697 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:47.260680838 +0000 UTC m=+416.989255850 I0421 17:48:47.354775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:47.655233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:47.763488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:48.354503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:48.406425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:52.592984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:52.593062 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls" condition "Issuing" to 2026-04-21 17:48:52.593017532 +0000 UTC m=+422.321592574 I0421 17:48:52.593609 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls" condition "Ready" to 2026-04-21 17:48:52.593598729 +0000 UTC m=+422.322173771 I0421 17:48:52.611147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:52.611222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:52.611239 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls" condition "Issuing" to 2026-04-21 17:48:52.611233678 +0000 UTC m=+422.339808680 I0421 17:48:52.754214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kv6gf-4zjvt" condition "Approved" to 2026-04-21 17:48:52.754199886 +0000 UTC m=+422.482774908 I0421 17:48:52.774827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-kv6gf-4zjvt" condition "Ready" to 2026-04-21 17:48:52.774811399 +0000 UTC m=+422.503386441 I0421 17:48:52.805597 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:52.805586521 +0000 UTC m=+422.534161543 I0421 17:48:52.826660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-kv6gf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:20.393419 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 17:49:20.393404382 +0000 UTC m=+450.121979404 I0421 17:49:20.393549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:49:20.393595 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:49:20.393584467 +0000 UTC m=+450.122159499 I0421 17:49:20.412363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:20.412475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:49:20.412510 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:49:20.412502153 +0000 UTC m=+450.141077175 I0421 17:49:20.633921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:20.644910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-59dbg" condition "Approved" to 2026-04-21 17:49:20.644892052 +0000 UTC m=+450.373467104 I0421 17:49:20.664718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-59dbg" condition "Ready" to 2026-04-21 17:49:20.664702993 +0000 UTC m=+450.393278015 I0421 17:49:20.695671 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:20.695651279 +0000 UTC m=+450.424226311 I0421 17:49:20.714064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:20.714403 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:20.71439687 +0000 UTC m=+450.442971892 I0421 17:49:20.731011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:20.731558 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:20.731546416 +0000 UTC m=+450.460121468 I0421 17:52:33.485136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:52:33.485275 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:52:33.485234766 +0000 UTC m=+643.213809858 I0421 17:52:33.485742 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:52:33.485236286 +0000 UTC m=+643.213811378 I0421 17:52:33.501648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:33.501728 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:52:33.501720614 +0000 UTC m=+643.230295636 I0421 17:52:33.628797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:33.659954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-47q9q" condition "Approved" to 2026-04-21 17:52:33.659936781 +0000 UTC m=+643.388511803 I0421 17:52:33.684756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-47q9q" condition "Ready" to 2026-04-21 17:52:33.684744415 +0000 UTC m=+643.413319437 I0421 17:52:33.718637 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:33.718621045 +0000 UTC m=+643.447196067 I0421 17:52:33.742365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:33.742735 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:33.742728038 +0000 UTC m=+643.471303060 I0421 17:52:33.763162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:33.763189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:33.763565 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:33.763555899 +0000 UTC m=+643.492130921 I0421 17:54:59.840000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:54:59.840101 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-21 17:54:59.840065479 +0000 UTC m=+789.568640491 I0421 17:54:59.840186 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-21 17:54:59.840169682 +0000 UTC m=+789.568744704 I0421 17:54:59.857734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:59.857874 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-21 17:54:59.857862441 +0000 UTC m=+789.586437493 I0421 17:54:59.981711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:00.018547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xs88w" condition "Approved" to 2026-04-21 17:55:00.018531244 +0000 UTC m=+789.747106266 I0421 17:55:00.036896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xs88w" condition "Ready" to 2026-04-21 17:55:00.036886652 +0000 UTC m=+789.765461654 I0421 17:55:00.071016 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:00.070994494 +0000 UTC m=+789.799569546 I0421 17:55:00.098457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:00.098801 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:00.098794388 +0000 UTC m=+789.827369410 I0421 17:55:00.105327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:00.115746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:00.115993 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:00.115986293 +0000 UTC m=+789.844561315 I0421 17:56:02.843293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:56:02.843394 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-21 17:56:02.843361116 +0000 UTC m=+852.571936158 I0421 17:56:02.843846 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-21 17:56:02.843829399 +0000 UTC m=+852.572404421 I0421 17:56:02.860939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:56:02.861072 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-21 17:56:02.861061785 +0000 UTC m=+852.589636817 I0421 17:56:02.991080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:56:03.020653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-c9ht9" condition "Approved" to 2026-04-21 17:56:03.020644038 +0000 UTC m=+852.749219050 I0421 17:56:03.044946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-c9ht9" condition "Ready" to 2026-04-21 17:56:03.044932543 +0000 UTC m=+852.773507585 I0421 17:56:03.075687 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:56:03.07567295 +0000 UTC m=+852.804247972 I0421 17:56:03.098741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:56:03.099150 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:56:03.099142222 +0000 UTC m=+852.827717244 I0421 17:56:03.120998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:56:03.121605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:59:06.190895 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-21 17:59:06.190858804 +0000 UTC m=+1035.919433816 I0421 17:59:06.191040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:59:06.191144 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-21 17:59:06.191132781 +0000 UTC m=+1035.919707823 I0421 17:59:06.210361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:59:06.210456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:59:06.210481 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-21 17:59:06.210472787 +0000 UTC m=+1035.939047809 I0421 17:59:06.415466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qr66f" condition "Approved" to 2026-04-21 17:59:06.415454282 +0000 UTC m=+1036.144029294 I0421 17:59:06.438033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qr66f" condition "Ready" to 2026-04-21 17:59:06.438020378 +0000 UTC m=+1036.166595400 I0421 17:59:06.471668 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:59:06.471656218 +0000 UTC m=+1036.200231240 I0421 17:59:06.493782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:18.276783 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:05:18.276855 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-21 18:05:18.276820212 +0000 UTC m=+1408.005395264 I0421 18:05:18.276985 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-21 18:05:18.276967876 +0000 UTC m=+1408.005542908 I0421 18:05:18.293763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:18.293888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:05:18.293918 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-21 18:05:18.293910497 +0000 UTC m=+1408.022485529 I0421 18:05:18.522942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-s7xrv" condition "Approved" to 2026-04-21 18:05:18.522929994 +0000 UTC m=+1408.251505016 I0421 18:05:18.542844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-s7xrv" condition "Ready" to 2026-04-21 18:05:18.542831028 +0000 UTC m=+1408.271406050 I0421 18:05:18.580488 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:18.580470696 +0000 UTC m=+1408.309045748 I0421 18:05:18.600730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:18.601075 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:18.601066791 +0000 UTC m=+1408.329641823 I0421 18:05:18.630032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:06:49.472135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:06:49.472199 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-21 18:06:49.472193197 +0000 UTC m=+1499.200768209 I0421 18:06:49.479447 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-21 18:06:49.472150456 +0000 UTC m=+1499.200725478 I0421 18:06:49.499493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:06:49.499571 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-21 18:06:49.499564524 +0000 UTC m=+1499.228139536 I0421 18:06:49.853532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:06:49.882248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-9czp8" condition "Approved" to 2026-04-21 18:06:49.882237405 +0000 UTC m=+1499.610812427 I0421 18:06:49.912287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-9czp8" condition "Ready" to 2026-04-21 18:06:49.912277407 +0000 UTC m=+1499.640852429 I0421 18:06:49.946115 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:06:49.946100827 +0000 UTC m=+1499.674675839 I0421 18:06:49.972000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:06:49.972376 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:06:49.972366962 +0000 UTC m=+1499.700941984 I0421 18:06:49.993907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:06:49.994644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:44.038402 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-21 18:07:44.038386451 +0000 UTC m=+1553.766961473 I0421 18:07:44.039380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:07:44.039398 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-21 18:07:44.039393269 +0000 UTC m=+1553.767968291 I0421 18:07:44.059702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:44.059893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:07:44.059938 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-21 18:07:44.059932701 +0000 UTC m=+1553.788507713 I0421 18:07:44.107128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-bqrnr" condition "Approved" to 2026-04-21 18:07:44.107117561 +0000 UTC m=+1553.835692593 I0421 18:07:44.122265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-bqrnr" condition "Ready" to 2026-04-21 18:07:44.122254431 +0000 UTC m=+1553.850829443 I0421 18:07:44.152731 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:44.152718885 +0000 UTC m=+1553.881293897 I0421 18:07:44.184744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:44.185325 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:44.18529915 +0000 UTC m=+1553.913874202 I0421 18:07:44.210530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:44.744157 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-21 18:07:44.744136699 +0000 UTC m=+1554.472711741 I0421 18:07:44.744809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:07:44.745202 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-21 18:07:44.745187519 +0000 UTC m=+1554.473762651 I0421 18:07:44.759316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:44.759388 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-21 18:07:44.759382852 +0000 UTC m=+1554.487957884 I0421 18:07:44.780197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:44.810742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-w872q" condition "Approved" to 2026-04-21 18:07:44.810720068 +0000 UTC m=+1554.539295120 I0421 18:07:44.827259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-w872q" condition "Ready" to 2026-04-21 18:07:44.827247868 +0000 UTC m=+1554.555822890 I0421 18:07:44.852935 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:44.852920506 +0000 UTC m=+1554.581495518 I0421 18:07:44.872348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:44.873486 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:44.87346297 +0000 UTC m=+1554.602037972 I0421 18:07:44.895779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:45.443644 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-21 18:07:45.44362919 +0000 UTC m=+1555.172204232 I0421 18:07:46.072582 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-21 18:07:46.072570489 +0000 UTC m=+1555.801145511 I0421 18:08:31.110191 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:08:31.110268 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-21 18:08:31.110231759 +0000 UTC m=+1600.838806811 I0421 18:08:31.112820 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-21 18:08:31.112804082 +0000 UTC m=+1600.841379104 I0421 18:08:31.154045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:08:31.155474 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-21 18:08:31.154163605 +0000 UTC m=+1600.882738617 I0421 18:08:34.939599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:08:34.984713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-82hvm" condition "Approved" to 2026-04-21 18:08:34.984689693 +0000 UTC m=+1604.713264745 I0421 18:08:35.010475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-82hvm" condition "Ready" to 2026-04-21 18:08:35.010459675 +0000 UTC m=+1604.739034717 I0421 18:08:35.051078 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:08:35.051066907 +0000 UTC m=+1604.779641929 I0421 18:08:35.085637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:08:35.086178 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:08:35.086171503 +0000 UTC m=+1604.814746525 I0421 18:08:35.106260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:08:35.106894 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:08:35.106887451 +0000 UTC m=+1604.835462473 I0421 18:08:35.107883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:11:11.662697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:11:11.663071 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-21 18:11:11.662761935 +0000 UTC m=+1761.391336947 I0421 18:11:11.663201 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-21 18:11:11.662523779 +0000 UTC m=+1761.391098811 I0421 18:11:11.690277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:11:11.690771 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-21 18:11:11.690721898 +0000 UTC m=+1761.419296910 I0421 18:11:11.905435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:11:11.941987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-pqb24" condition "Approved" to 2026-04-21 18:11:11.941976321 +0000 UTC m=+1761.670551333 I0421 18:11:11.966262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-pqb24" condition "Ready" to 2026-04-21 18:11:11.96624713 +0000 UTC m=+1761.694822172 I0421 18:11:12.002269 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:12.002255021 +0000 UTC m=+1761.730830063 I0421 18:11:12.025737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:11:12.026321 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:12.026312652 +0000 UTC m=+1761.754887674 I0421 18:11:12.053243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:11:13.204236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:11:13.204268 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-21 18:11:13.204255647 +0000 UTC m=+1762.932830699 I0421 18:11:13.204267 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-21 18:11:13.204260898 +0000 UTC m=+1762.932835910 I0421 18:11:13.233274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:11:13.233447 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-21 18:11:13.233438204 +0000 UTC m=+1762.962013226 I0421 18:11:13.569591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:11:13.612005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-gt9kw" condition "Approved" to 2026-04-21 18:11:13.611990216 +0000 UTC m=+1763.340565228 I0421 18:11:13.642611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-gt9kw" condition "Ready" to 2026-04-21 18:11:13.642599294 +0000 UTC m=+1763.371174326 I0421 18:11:13.677898 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:13.677849793 +0000 UTC m=+1763.406424815 I0421 18:11:13.707148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:14:29.922484 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-21 18:14:29.922449835 +0000 UTC m=+1959.651024837 I0421 18:14:29.922551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:14:29.922611 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-21 18:14:29.9226037 +0000 UTC m=+1959.651178732 I0421 18:14:29.943056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:14:29.943178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:14:29.943203 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-21 18:14:29.943194155 +0000 UTC m=+1959.671769197 I0421 18:14:30.137667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-mvxqm" condition "Approved" to 2026-04-21 18:14:30.137641438 +0000 UTC m=+1959.866216530 I0421 18:14:30.165737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-mvxqm" condition "Ready" to 2026-04-21 18:14:30.165722545 +0000 UTC m=+1959.894297557 I0421 18:14:30.197439 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:14:30.197424016 +0000 UTC m=+1959.925999038 I0421 18:14:30.220837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:14:30.221331 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:14:30.221323414 +0000 UTC m=+1959.949898436 I0421 18:14:30.245720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:09.297948 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2mwdp-api" condition "Ready" to 2026-04-21 18:15:09.297921352 +0000 UTC m=+1999.026496394 I0421 18:15:09.298929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2mwdp-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:15:09.298961 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2mwdp-api" condition "Issuing" to 2026-04-21 18:15:09.298955421 +0000 UTC m=+1999.027530443 I0421 18:15:09.300916 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2mwdp-vnc" condition "Ready" to 2026-04-21 18:15:09.300907287 +0000 UTC m=+1999.029482309 I0421 18:15:09.301336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2mwdp-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:15:09.301357 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2mwdp-vnc" condition "Issuing" to 2026-04-21 18:15:09.301351339 +0000 UTC m=+1999.029926361 I0421 18:15:09.326235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2mwdp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2mwdp-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:09.326384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2mwdp-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:15:09.326456 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2mwdp-api" condition "Issuing" to 2026-04-21 18:15:09.326449392 +0000 UTC m=+1999.055024414 I0421 18:15:09.337683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2mwdp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2mwdp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:09.337870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2mwdp-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:15:09.337911 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2mwdp-vnc" condition "Issuing" to 2026-04-21 18:15:09.337899667 +0000 UTC m=+1999.066474689 I0421 18:15:09.557496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-2mwdp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2mwdp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:09.566738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2mwdp-vnc-t2cvd" condition "Approved" to 2026-04-21 18:15:09.566717557 +0000 UTC m=+1999.295292579 I0421 18:15:09.592242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2mwdp-vnc-t2cvd" condition "Ready" to 2026-04-21 18:15:09.592230631 +0000 UTC m=+1999.320805643 I0421 18:15:09.631681 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2mwdp-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:09.631664491 +0000 UTC m=+1999.360239513 I0421 18:15:09.655685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-2mwdp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2mwdp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:09.656035 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2mwdp-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:09.656026683 +0000 UTC m=+1999.384601695 I0421 18:15:09.682123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-2mwdp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2mwdp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:09.682180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-2mwdp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2mwdp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:09.682511 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2mwdp-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:09.682501785 +0000 UTC m=+1999.411076807 I0421 18:15:10.056263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-2mwdp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2mwdp-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:10.072315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2mwdp-api-bw7wm" condition "Approved" to 2026-04-21 18:15:10.072296937 +0000 UTC m=+1999.800871979 I0421 18:15:10.096905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2mwdp-api-bw7wm" condition "Ready" to 2026-04-21 18:15:10.096885534 +0000 UTC m=+1999.825460556 I0421 18:15:10.135852 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2mwdp-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:10.135830791 +0000 UTC m=+1999.864405813 I0421 18:15:10.162896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-2mwdp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2mwdp-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:08.258051 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:08.258147 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-21 18:19:08.258140171 +0000 UTC m=+2237.986715183 I0421 18:19:08.258593 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-21 18:19:08.258571734 +0000 UTC m=+2237.987146746 I0421 18:19:08.277999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:08.278202 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-21 18:19:08.278190607 +0000 UTC m=+2238.006765629 I0421 18:19:08.562180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:08.594607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-xhl9l" condition "Approved" to 2026-04-21 18:19:08.594588884 +0000 UTC m=+2238.323163916 I0421 18:19:08.634948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-xhl9l" condition "Ready" to 2026-04-21 18:19:08.634932903 +0000 UTC m=+2238.363507945 I0421 18:19:08.672930 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:08.672910034 +0000 UTC m=+2238.401485056 I0421 18:19:08.693606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:08.693961 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:08.693953358 +0000 UTC m=+2238.422528380 I0421 18:19:08.734673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:10.120925 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-21 18:19:10.120907014 +0000 UTC m=+2239.849482026 I0421 18:19:10.121007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:19:10.121130 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-21 18:19:10.12111692 +0000 UTC m=+2239.849691962 I0421 18:19:10.140685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:10.141187 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-21 18:19:10.141175266 +0000 UTC m=+2239.869750318 I0421 18:19:10.479146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:19:10.520977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-s6l8m" condition "Approved" to 2026-04-21 18:19:10.520959263 +0000 UTC m=+2240.249534285 I0421 18:19:10.548746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-s6l8m" condition "Ready" to 2026-04-21 18:19:10.548732551 +0000 UTC m=+2240.277307573 I0421 18:19:10.610727 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:19:10.610710002 +0000 UTC m=+2240.339285014 I0421 18:19:10.655424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:18.666596 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-21 18:22:18.666551853 +0000 UTC m=+2428.395126885 I0421 18:22:18.667450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:22:18.667511 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-21 18:22:18.66750428 +0000 UTC m=+2428.396079322 E0421 18:22:18.682945 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:22:18.683013 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-21 18:22:18.683004835 +0000 UTC m=+2428.411579857 I0421 18:22:18.683032 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:22:18.684012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:18.684092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:22:18.684110 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-21 18:22:18.684105186 +0000 UTC m=+2428.412680208 E0421 18:22:18.695319 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0421 18:22:18.695408 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:22:18.695435 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0421 18:22:18.695466 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0421 18:22:18.740808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-5hfkg" condition "Approved" to 2026-04-21 18:22:18.740786195 +0000 UTC m=+2428.469361237 I0421 18:22:18.758937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-5hfkg" condition "Ready" to 2026-04-21 18:22:18.758923146 +0000 UTC m=+2428.487498168 I0421 18:22:18.799001 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:22:18.798983296 +0000 UTC m=+2428.527558318 I0421 18:22:18.818321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:18.818658 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:22:18.818645351 +0000 UTC m=+2428.547220363 I0421 18:22:18.839696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:19.474549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:22:19.474595 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-21 18:22:19.474588251 +0000 UTC m=+2429.203163283 I0421 18:22:19.474546 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-21 18:22:19.474528319 +0000 UTC m=+2429.203103351 E0421 18:22:19.487771 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:22:19.487829 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-21 18:22:19.487816751 +0000 UTC m=+2429.216391793 I0421 18:22:19.487894 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:22:19.490164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:19.490368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:22:19.490399 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-21 18:22:19.490389125 +0000 UTC m=+2429.218964147 E0421 18:22:19.500895 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0421 18:22:19.501080 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:22:19.501143 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0421 18:22:19.501237 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0421 18:22:19.545732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-gklqm" condition "Approved" to 2026-04-21 18:22:19.545708824 +0000 UTC m=+2429.274283866 I0421 18:22:19.572477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-gklqm" condition "Ready" to 2026-04-21 18:22:19.572461712 +0000 UTC m=+2429.301036734 I0421 18:22:19.608358 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:22:19.608338622 +0000 UTC m=+2429.336913634 I0421 18:22:19.627782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:20.346307 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-21 18:22:20.346283848 +0000 UTC m=+2430.074858890 I0421 18:22:20.346587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:22:20.346610 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-21 18:22:20.346607147 +0000 UTC m=+2430.075182159 I0421 18:22:20.367841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:20.368111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:22:20.368180 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-21 18:22:20.368166506 +0000 UTC m=+2430.096741528 I0421 18:22:20.430675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-wdwqg" condition "Approved" to 2026-04-21 18:22:20.430658821 +0000 UTC m=+2430.159233843 I0421 18:22:20.451036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-wdwqg" condition "Ready" to 2026-04-21 18:22:20.451016896 +0000 UTC m=+2430.179591908 I0421 18:22:23.696488 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:22:23.696476041 +0000 UTC m=+2433.425051053 I0421 18:22:23.721643 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-wdwqg" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:22:23.721627864 +0000 UTC m=+2433.450202886 I0421 18:22:23.774288 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:22:23.774270776 +0000 UTC m=+2433.502845798 I0421 18:22:23.802248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:23.802636 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:22:23.80262376 +0000 UTC m=+2433.531198782 I0421 18:22:23.812351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:23.839026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:22:24.502474 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:22:24.502452631 +0000 UTC m=+2434.231027643 I0421 18:24:48.310133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:24:48.310174 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-21 18:24:48.310165124 +0000 UTC m=+2578.038740156 I0421 18:24:48.310194 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-21 18:24:48.310174534 +0000 UTC m=+2578.038749556 I0421 18:24:48.330453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:24:48.330584 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-21 18:24:48.33057308 +0000 UTC m=+2578.059148102 I0421 18:24:48.472511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:24:48.506597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-qccwj" condition "Approved" to 2026-04-21 18:24:48.506579725 +0000 UTC m=+2578.235154747 I0421 18:24:48.529804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-qccwj" condition "Ready" to 2026-04-21 18:24:48.529790031 +0000 UTC m=+2578.258365063 I0421 18:24:48.566338 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:24:48.5663195 +0000 UTC m=+2578.294894522 I0421 18:24:48.592962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:35.223707 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-21 18:25:35.223659896 +0000 UTC m=+2624.952234958 I0421 18:25:35.245208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:25:35.245214 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-21 18:25:35.245195325 +0000 UTC m=+2624.973770347 I0421 18:25:35.245255 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-21 18:25:35.245244246 +0000 UTC m=+2624.973819268 I0421 18:25:35.265571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:35.265685 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-21 18:25:35.265675843 +0000 UTC m=+2624.994250865 E0421 18:25:35.277159 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0421 18:25:35.339217 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-21 18:25:35.339197964 +0000 UTC m=+2625.067772976 I0421 18:25:35.362157 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-21 18:25:35.362138554 +0000 UTC m=+2625.090713566 I0421 18:25:35.362567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:25:35.362591 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-21 18:25:35.362586937 +0000 UTC m=+2625.091161949 I0421 18:25:35.380661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:35.380791 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-21 18:25:35.380778328 +0000 UTC m=+2625.109353360 E0421 18:25:35.440780 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0421 18:25:35.597974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:35.645555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-znwn2" condition "Approved" to 2026-04-21 18:25:35.645535153 +0000 UTC m=+2625.374110165 I0421 18:25:35.668001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-znwn2" condition "Ready" to 2026-04-21 18:25:35.667987388 +0000 UTC m=+2625.396562400 I0421 18:25:35.712473 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:25:35.712451685 +0000 UTC m=+2625.441026707 I0421 18:25:35.749474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:35.753380 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:25:35.75335975 +0000 UTC m=+2625.481934762 I0421 18:25:35.772438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:35.798635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:36.225482 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-21 18:25:36.22546408 +0000 UTC m=+2625.954039092 I0421 18:25:36.263969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:25:36.264004 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-21 18:25:36.263996206 +0000 UTC m=+2625.992571218 I0421 18:25:36.264397 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-21 18:25:36.264392068 +0000 UTC m=+2625.992967080 I0421 18:25:36.295644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:36.295743 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-21 18:25:36.295735018 +0000 UTC m=+2626.024310030 I0421 18:25:36.590927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:36.661675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-dvq7l" condition "Approved" to 2026-04-21 18:25:36.661658257 +0000 UTC m=+2626.390233269 I0421 18:25:36.711304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-dvq7l" condition "Ready" to 2026-04-21 18:25:36.711282213 +0000 UTC m=+2626.439857225 I0421 18:25:36.738248 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-21 18:25:36.738227807 +0000 UTC m=+2626.466802829 I0421 18:25:36.751643 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:25:36.751622132 +0000 UTC m=+2626.480197154 I0421 18:25:36.764618 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-21 18:25:36.764594784 +0000 UTC m=+2626.493169846 I0421 18:25:36.765397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:25:36.765485 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-21 18:25:36.76547227 +0000 UTC m=+2626.494047282 I0421 18:25:36.782676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:36.795201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:36.795406 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:25:36.795466 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-21 18:25:36.795457271 +0000 UTC m=+2626.524032293 I0421 18:25:36.974695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-kcm8j" condition "Approved" to 2026-04-21 18:25:36.974683418 +0000 UTC m=+2626.703258430 I0421 18:25:36.996466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-kcm8j" condition "Ready" to 2026-04-21 18:25:36.996454444 +0000 UTC m=+2626.725029446 I0421 18:25:37.035877 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:25:37.035860055 +0000 UTC m=+2626.764435067 I0421 18:25:37.070258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:37.231059 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-21 18:25:37.231040222 +0000 UTC m=+2626.959615244 I0421 18:25:37.254559 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-21 18:25:37.254542326 +0000 UTC m=+2626.983117338 I0421 18:25:37.254749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:25:37.254771 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-21 18:25:37.254767902 +0000 UTC m=+2626.983342914 I0421 18:25:37.437175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:37.437289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:25:37.437317 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-21 18:25:37.437308645 +0000 UTC m=+2627.165883667 I0421 18:25:37.482154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:37.790652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-68hkj" condition "Approved" to 2026-04-21 18:25:37.790631873 +0000 UTC m=+2627.519206895 I0421 18:25:37.916351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-68hkj" condition "Ready" to 2026-04-21 18:25:37.916335534 +0000 UTC m=+2627.644910546 I0421 18:25:38.359156 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:25:38.359135352 +0000 UTC m=+2628.087710404 I0421 18:25:38.484506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:25:38.484829 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:25:38.484818462 +0000 UTC m=+2628.213393484 I0421 18:25:38.687156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:29:19.445350 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-21 18:29:19.445327662 +0000 UTC m=+2849.173902684 I0421 18:29:19.446428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:29:19.446456 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-21 18:29:19.446450664 +0000 UTC m=+2849.175025716 I0421 18:29:19.463470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:29:19.463792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:29:19.463843 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-21 18:29:19.463833972 +0000 UTC m=+2849.192408994 I0421 18:29:19.723912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-vv9fb" condition "Approved" to 2026-04-21 18:29:19.72389196 +0000 UTC m=+2849.452466972 I0421 18:29:19.746488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-vv9fb" condition "Ready" to 2026-04-21 18:29:19.746471486 +0000 UTC m=+2849.475046518 I0421 18:29:19.777605 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:29:19.777574167 +0000 UTC m=+2849.506149199 I0421 18:29:19.802110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:29:22.386453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:29:22.386469 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-21 18:29:22.386456314 +0000 UTC m=+2852.115031336 I0421 18:29:22.386484 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-21 18:29:22.386479405 +0000 UTC m=+2852.115054407 I0421 18:29:22.409762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:29:22.409956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:29:22.409990 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-21 18:29:22.409980459 +0000 UTC m=+2852.138555461 I0421 18:29:22.699011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-2l5rd" condition "Approved" to 2026-04-21 18:29:22.698989086 +0000 UTC m=+2852.427564118 I0421 18:29:22.728981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-2l5rd" condition "Ready" to 2026-04-21 18:29:22.728968115 +0000 UTC m=+2852.457543137 I0421 18:29:22.769033 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:29:22.769015801 +0000 UTC m=+2852.497590823 I0421 18:29:22.797225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:29:22.797804 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:29:22.797789435 +0000 UTC m=+2852.526364487 I0421 18:29:22.834720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"