I0821 02:29:58.869989 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0821 02:29:58.870320 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0821 02:29:58.870754 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0821 02:29:58.881210 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0821 02:29:58.882122 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0821 02:29:58.882222 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0821 02:29:58.882304 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0821 02:29:58.884667 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0821 02:29:58.900248 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0821 02:29:58.905601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0821 02:29:58.910329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0821 02:29:58.916754 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0821 02:29:58.916844 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0821 02:29:58.919601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0821 02:29:58.922224 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0821 02:29:58.922393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0821 02:29:58.924491 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0821 02:29:58.924628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0821 02:29:58.926826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0821 02:29:58.928567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0821 02:29:58.934005 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0821 02:29:58.934044 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0821 02:29:58.934377 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0821 02:29:58.938538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0821 02:29:58.940960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0821 02:29:58.942990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0821 02:29:58.944955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0821 02:29:58.946757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0821 02:29:58.948622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0821 02:29:58.950343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0821 02:29:58.952139 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0821 02:29:58.958073 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0821 02:29:58.958248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0821 02:29:58.961942 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:58.962359 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:58.962450 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:58.962989 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:58.981969 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:59.017277 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:59.051036 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:59.059195 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:59.067220 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:29:59.120865 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0821 02:30:11.433370 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-21 02:30:11.433345671 +0000 UTC m=+12.596351163 I0821 02:30:12.162705 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-21 02:30:12.162693363 +0000 UTC m=+13.325698825 I0821 02:30:12.162952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:12.163052 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-21 02:30:12.163042514 +0000 UTC m=+13.326048006 I0821 02:30:12.197820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:12.197945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:12.198013 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-21 02:30:12.198003362 +0000 UTC m=+13.361008854 E0821 02:30:12.206742 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0821 02:30:12.206846 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-21 02:30:12.206839567 +0000 UTC m=+13.369845029 E0821 02:30:12.206870 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:30:12.228361 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0821 02:30:12.228524 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:30:12.228571 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:30:12.228614 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0821 02:30:12.286781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:12.287534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b97kr" condition "Approved" to 2026-08-21 02:30:12.287514449 +0000 UTC m=+13.450519931 I0821 02:30:12.316575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b97kr" condition "Ready" to 2026-08-21 02:30:12.316555085 +0000 UTC m=+13.479560567 I0821 02:30:12.358666 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:12.358648733 +0000 UTC m=+13.521654245 I0821 02:30:12.381733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:12.382309 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:12.382297646 +0000 UTC m=+13.545303128 I0821 02:30:12.407590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:17.229084 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:17.229064501 +0000 UTC m=+18.392069953 I0821 02:30:37.702033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:37.702075 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-21 02:30:37.701697283 +0000 UTC m=+38.864702775 I0821 02:30:37.702142 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-21 02:30:37.702129107 +0000 UTC m=+38.865134619 I0821 02:30:37.725593 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-21 02:30:37.725551242 +0000 UTC m=+38.888556694 I0821 02:30:37.728155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:37.729707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:30:37.729866 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-21 02:30:37.729855241 +0000 UTC m=+38.892860713 I0821 02:30:38.052240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2m9lf" condition "Approved" to 2026-08-21 02:30:38.052230608 +0000 UTC m=+39.215236070 I0821 02:30:38.092361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2m9lf" condition "Ready" to 2026-08-21 02:30:38.092335191 +0000 UTC m=+39.255340653 I0821 02:30:38.128613 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:30:38.128598561 +0000 UTC m=+39.291604023 I0821 02:30:38.149288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:30:38.208675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:35:30.637327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:35:30.637362 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-08-21 02:35:30.637354948 +0000 UTC m=+331.800360400 I0821 02:35:30.637844 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-08-21 02:35:30.637838764 +0000 UTC m=+331.800844216 I0821 02:35:30.657847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:35:30.657911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:35:30.657926 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-08-21 02:35:30.657920141 +0000 UTC m=+331.820925603 I0821 02:35:31.295572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-4nq7f" condition "Approved" to 2026-08-21 02:35:31.295560167 +0000 UTC m=+332.458565659 I0821 02:35:31.322390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-4nq7f" condition "Ready" to 2026-08-21 02:35:31.322377932 +0000 UTC m=+332.485383404 I0821 02:35:31.349017 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:35:31.34900752 +0000 UTC m=+332.512012982 I0821 02:35:31.367813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:36:39.258370 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-21 02:36:39.258353124 +0000 UTC m=+400.421358866 I0821 02:36:39.258436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:36:39.258687 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-21 02:36:39.258671425 +0000 UTC m=+400.421676907 E0821 02:36:39.272357 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0821 02:36:39.272397 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-21 02:36:39.272388887 +0000 UTC m=+400.435394369 E0821 02:36:39.272450 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0821 02:36:39.274448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:36:39.274625 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-21 02:36:39.274616789 +0000 UTC m=+400.437622251 E0821 02:36:39.281888 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0821 02:36:39.281953 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:36:39.281984 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0821 02:36:39.282023 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0821 02:36:39.294772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:36:39.317800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-r7kqn" condition "Approved" to 2026-08-21 02:36:39.317790321 +0000 UTC m=+400.480795803 I0821 02:36:39.331412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-r7kqn" condition "Ready" to 2026-08-21 02:36:39.33140187 +0000 UTC m=+400.494407352 I0821 02:36:39.355316 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:36:39.355297941 +0000 UTC m=+400.518303403 I0821 02:36:39.374368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:36:39.416481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:36:44.283002 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:36:44.282988666 +0000 UTC m=+405.445994148 I0821 02:37:23.513778 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-21 02:37:23.513763303 +0000 UTC m=+444.676768755 I0821 02:37:23.514368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:37:23.515218 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-21 02:37:23.515208517 +0000 UTC m=+444.678213969 I0821 02:37:23.514393 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-21 02:37:23.514390047 +0000 UTC m=+444.677395499 I0821 02:37:23.516171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:37:23.516193 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-21 02:37:23.516189793 +0000 UTC m=+444.679195245 I0821 02:37:23.516775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:37:23.516793 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-21 02:37:23.516790375 +0000 UTC m=+444.679795827 I0821 02:37:23.519853 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-21 02:37:23.519843838 +0000 UTC m=+444.682849310 I0821 02:37:23.569751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.569831 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-21 02:37:23.569823959 +0000 UTC m=+444.732829421 I0821 02:37:23.572905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.572964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:37:23.572980 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-21 02:37:23.572974256 +0000 UTC m=+444.735979718 I0821 02:37:23.573230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.573313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:37:23.573350 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-21 02:37:23.57334235 +0000 UTC m=+444.736347812 I0821 02:37:23.640022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.674222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m9jgd" condition "Approved" to 2026-08-21 02:37:23.674208375 +0000 UTC m=+444.837213867 I0821 02:37:23.699504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m9jgd" condition "Ready" to 2026-08-21 02:37:23.699492952 +0000 UTC m=+444.862498414 I0821 02:37:23.741795 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:23.741778158 +0000 UTC m=+444.904783630 I0821 02:37:23.762314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.762338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.762620 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:23.762614049 +0000 UTC m=+444.925619501 I0821 02:37:23.775327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.775282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f2gdc" condition "Approved" to 2026-08-21 02:37:23.775255697 +0000 UTC m=+444.938261179 I0821 02:37:23.787753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.788068 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:23.788058081 +0000 UTC m=+444.951063543 I0821 02:37:23.794967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:23.801266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f2gdc" condition "Ready" to 2026-08-21 02:37:23.80125016 +0000 UTC m=+444.964255622 I0821 02:37:24.121968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:24.177880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kmb6p" condition "Approved" to 2026-08-21 02:37:24.177860308 +0000 UTC m=+445.340865770 I0821 02:37:24.221965 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:24.22195569 +0000 UTC m=+445.384961152 I0821 02:37:24.583406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kmb6p" condition "Ready" to 2026-08-21 02:37:24.583395385 +0000 UTC m=+445.746400837 I0821 02:37:24.672015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:24.672434 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:24.672426732 +0000 UTC m=+445.835432194 I0821 02:37:25.021069 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:25.021053663 +0000 UTC m=+446.184059125 I0821 02:37:25.072872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:25.171738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:25.172365 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:25.172355236 +0000 UTC m=+446.335360728 I0821 02:37:25.470149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:25.521969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:32.381932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:37:32.381953 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" condition "Ready" to 2026-08-21 02:37:32.381938104 +0000 UTC m=+453.544943566 I0821 02:37:32.381984 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" condition "Issuing" to 2026-08-21 02:37:32.381971635 +0000 UTC m=+453.544977157 I0821 02:37:32.416977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:32.417113 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" condition "Ready" to 2026-08-21 02:37:32.417101686 +0000 UTC m=+453.580107168 I0821 02:37:32.990292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:33.042816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p6fwn-cb6qm" condition "Approved" to 2026-08-21 02:37:33.042794968 +0000 UTC m=+454.205800470 I0821 02:37:33.060967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-p6fwn-cb6qm" condition "Ready" to 2026-08-21 02:37:33.06095595 +0000 UTC m=+454.223961412 I0821 02:37:33.109576 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:33.109567091 +0000 UTC m=+454.272572533 I0821 02:37:33.133691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:33.134465 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:33.134453262 +0000 UTC m=+454.297458744 I0821 02:37:33.147115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:33.158864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-p6fwn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:59.684880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:37:59.684914 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-21 02:37:59.684905183 +0000 UTC m=+480.847910645 I0821 02:37:59.685072 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-21 02:37:59.685066389 +0000 UTC m=+480.848071851 I0821 02:37:59.705322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:59.705440 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-21 02:37:59.705434133 +0000 UTC m=+480.868439595 I0821 02:37:59.913399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:37:59.948424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ffl4j" condition "Approved" to 2026-08-21 02:37:59.948403611 +0000 UTC m=+481.111409103 I0821 02:37:59.967568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ffl4j" condition "Ready" to 2026-08-21 02:37:59.967445386 +0000 UTC m=+481.130450878 I0821 02:37:59.999756 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:37:59.999736182 +0000 UTC m=+481.162741674 I0821 02:38:00.024002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:38:00.024316 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:38:00.024307842 +0000 UTC m=+481.187313304 I0821 02:38:00.040477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:38:00.040978 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:38:00.040968859 +0000 UTC m=+481.203974321 I0821 02:41:16.617407 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-21 02:41:16.617374413 +0000 UTC m=+677.780379895 I0821 02:41:16.617650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:41:16.617763 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-21 02:41:16.617728796 +0000 UTC m=+677.780734288 I0821 02:41:16.636578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:41:16.636679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:41:16.636710 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-21 02:41:16.636700619 +0000 UTC m=+677.799706091 I0821 02:41:16.750047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:41:16.758477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ppsfs" condition "Approved" to 2026-08-21 02:41:16.757939769 +0000 UTC m=+677.920945231 I0821 02:41:16.779003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ppsfs" condition "Ready" to 2026-08-21 02:41:16.778990548 +0000 UTC m=+677.941996010 I0821 02:41:16.812194 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:41:16.812182747 +0000 UTC m=+677.975188209 I0821 02:41:16.834520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:41:16.835611 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:41:16.835595354 +0000 UTC m=+677.998600836 I0821 02:41:16.855961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:41:16.856255 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:41:16.856247139 +0000 UTC m=+678.019252601 I0821 02:43:38.099673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:43:38.100178 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-08-21 02:43:38.100150416 +0000 UTC m=+819.263155938 I0821 02:43:38.100640 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-21 02:43:38.100623821 +0000 UTC m=+819.263629293 I0821 02:43:38.204950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:43:38.205032 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-21 02:43:38.205024706 +0000 UTC m=+819.368030168 I0821 02:43:38.649229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:43:38.723898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wxfwq" condition "Approved" to 2026-08-21 02:43:38.723885824 +0000 UTC m=+819.886891286 I0821 02:43:38.863293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wxfwq" condition "Ready" to 2026-08-21 02:43:38.863272298 +0000 UTC m=+820.026277750 I0821 02:43:39.363988 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:43:39.363959089 +0000 UTC m=+820.526964571 I0821 02:43:39.519067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:45:19.213737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:45:19.213745 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-21 02:45:19.213721228 +0000 UTC m=+920.376726690 I0821 02:45:19.213797 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-21 02:45:19.21378732 +0000 UTC m=+920.376792792 I0821 02:45:19.238262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:45:19.238362 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-21 02:45:19.23835413 +0000 UTC m=+920.401359582 I0821 02:45:19.461709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:45:19.496011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ptjvn" condition "Approved" to 2026-08-21 02:45:19.495981932 +0000 UTC m=+920.658987414 I0821 02:45:19.515485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ptjvn" condition "Ready" to 2026-08-21 02:45:19.515469499 +0000 UTC m=+920.678474961 I0821 02:45:19.568510 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:45:19.568496313 +0000 UTC m=+920.731501795 I0821 02:45:19.600321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:45:19.600808 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:45:19.600786431 +0000 UTC m=+920.763791893 I0821 02:45:19.623198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:45:19.623672 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:45:19.623661236 +0000 UTC m=+920.786666708 I0821 02:48:32.263638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:48:32.263673 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-21 02:48:32.263654251 +0000 UTC m=+1113.426659743 I0821 02:48:32.263724 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-21 02:48:32.263711102 +0000 UTC m=+1113.426716594 I0821 02:48:32.281682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:48:32.281770 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-21 02:48:32.281762569 +0000 UTC m=+1113.444768031 I0821 02:48:32.375105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:48:32.405561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6qkph" condition "Approved" to 2026-08-21 02:48:32.405548042 +0000 UTC m=+1113.568553504 I0821 02:48:32.432057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6qkph" condition "Ready" to 2026-08-21 02:48:32.432040018 +0000 UTC m=+1113.595045480 I0821 02:48:32.465512 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:48:32.465491287 +0000 UTC m=+1113.628496749 I0821 02:48:32.483657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:48:32.484040 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:48:32.484031649 +0000 UTC m=+1113.647037121 I0821 02:48:32.491680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:48:32.512287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:56:26.537122 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:56:26.537106 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-21 02:56:26.537052792 +0000 UTC m=+1587.700058274 I0821 02:56:26.537182 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-21 02:56:26.537166595 +0000 UTC m=+1587.700172088 I0821 02:56:26.557059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:56:26.557160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:56:26.557185 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-21 02:56:26.55717641 +0000 UTC m=+1587.720181872 I0821 02:56:26.777563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:56:26.790217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-9qxp4" condition "Approved" to 2026-08-21 02:56:26.790196505 +0000 UTC m=+1587.953201957 I0821 02:56:26.816149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-9qxp4" condition "Ready" to 2026-08-21 02:56:26.81613606 +0000 UTC m=+1587.979141522 I0821 02:56:26.847248 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:56:26.847235692 +0000 UTC m=+1588.010241154 I0821 02:56:26.874097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:56:26.874558 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:56:26.874552062 +0000 UTC m=+1588.037557504 I0821 02:56:26.894895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:56:26.897445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:56:26.897707 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:56:26.897699658 +0000 UTC m=+1588.060705110 I0821 02:57:51.329104 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-21 02:57:51.329068946 +0000 UTC m=+1672.492074428 I0821 02:57:51.329240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:57:51.329284 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-21 02:57:51.329279643 +0000 UTC m=+1672.492285095 I0821 02:57:51.350499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:57:51.350604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:57:51.350634 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-21 02:57:51.350624769 +0000 UTC m=+1672.513630251 I0821 02:57:51.480575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-jn256" condition "Approved" to 2026-08-21 02:57:51.480565215 +0000 UTC m=+1672.643570667 I0821 02:57:51.503138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-jn256" condition "Ready" to 2026-08-21 02:57:51.503125279 +0000 UTC m=+1672.666130771 I0821 02:57:51.532662 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:57:51.532650751 +0000 UTC m=+1672.695656203 I0821 02:57:51.550380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:57:51.551046 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:57:51.551033875 +0000 UTC m=+1672.714039367 I0821 02:57:51.571777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:46.910888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:58:46.910930 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-08-21 02:58:46.910912 +0000 UTC m=+1728.073917462 I0821 02:58:46.910927 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-21 02:58:46.91091953 +0000 UTC m=+1728.073924992 I0821 02:58:46.925942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:46.926014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:58:46.926034 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-21 02:58:46.926028256 +0000 UTC m=+1728.089033718 I0821 02:58:46.970436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:46.975169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-c44ms" condition "Approved" to 2026-08-21 02:58:46.975149676 +0000 UTC m=+1728.138155158 I0821 02:58:46.992351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-c44ms" condition "Ready" to 2026-08-21 02:58:46.992339649 +0000 UTC m=+1728.155345091 I0821 02:58:47.022626 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:58:47.022609402 +0000 UTC m=+1728.185614874 I0821 02:58:47.044980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:47.045413 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:58:47.045403335 +0000 UTC m=+1728.208408797 I0821 02:58:47.066704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:47.561651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:58:47.561697 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-21 02:58:47.56168665 +0000 UTC m=+1728.724692132 I0821 02:58:47.562226 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-21 02:58:47.562218248 +0000 UTC m=+1728.725223730 I0821 02:58:47.581835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:47.581913 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-21 02:58:47.581905721 +0000 UTC m=+1728.744911183 I0821 02:58:47.598722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:47.598773 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-21 02:58:47.598768253 +0000 UTC m=+1728.761773735 I0821 02:58:47.600590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:47.602878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-q269n" condition "Approved" to 2026-08-21 02:58:47.602863745 +0000 UTC m=+1728.765869217 I0821 02:58:47.613693 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-21 02:58:47.613678793 +0000 UTC m=+1728.776684255 I0821 02:58:47.619651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-q269n" condition "Ready" to 2026-08-21 02:58:47.619641274 +0000 UTC m=+1728.782646726 I0821 02:58:47.620173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:47.642397 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:58:47.642382466 +0000 UTC m=+1728.805387928 I0821 02:58:47.668669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:47.771275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:58:48.282319 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-08-21 02:58:48.282306428 +0000 UTC m=+1729.445311890 I0821 02:58:48.942247 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-08-21 02:58:48.942231652 +0000 UTC m=+1730.105237134 I0821 02:59:34.473220 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-21 02:59:34.473205314 +0000 UTC m=+1775.636210776 I0821 02:59:34.473745 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 02:59:34.473774 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-21 02:59:34.473768842 +0000 UTC m=+1775.636774294 I0821 02:59:34.507233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:59:34.507325 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-21 02:59:34.507319441 +0000 UTC m=+1775.670324883 I0821 02:59:35.680314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:59:35.743408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-clnls" condition "Approved" to 2026-08-21 02:59:35.743392676 +0000 UTC m=+1776.906398138 I0821 02:59:35.765140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-clnls" condition "Ready" to 2026-08-21 02:59:35.765130345 +0000 UTC m=+1776.928135797 I0821 02:59:35.796064 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 02:59:35.79605535 +0000 UTC m=+1776.959060812 I0821 02:59:35.820188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0821 02:59:35.873108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:06.957154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:02:06.957214 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-21 03:02:06.957209685 +0000 UTC m=+1928.120215137 I0821 03:02:06.958238 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-21 03:02:06.95708074 +0000 UTC m=+1928.120086202 I0821 03:02:06.974775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:06.974848 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-21 03:02:06.97484143 +0000 UTC m=+1928.137846872 I0821 03:02:07.083706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:07.111502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-66dlk" condition "Approved" to 2026-08-21 03:02:07.111487257 +0000 UTC m=+1928.274492729 I0821 03:02:07.133119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-66dlk" condition "Ready" to 2026-08-21 03:02:07.133108868 +0000 UTC m=+1928.296114320 I0821 03:02:07.160532 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:02:07.160517792 +0000 UTC m=+1928.323523284 I0821 03:02:07.181984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:07.182415 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:02:07.182407042 +0000 UTC m=+1928.345412514 I0821 03:02:07.207217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:08.520487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:02:08.520571 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-08-21 03:02:08.520565116 +0000 UTC m=+1929.683570568 I0821 03:02:08.520495 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-21 03:02:08.520482133 +0000 UTC m=+1929.683487585 I0821 03:02:08.542375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:08.542431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:02:08.542445 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-08-21 03:02:08.542439475 +0000 UTC m=+1929.705444927 I0821 03:02:08.661843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-d7x9j" condition "Approved" to 2026-08-21 03:02:08.661831508 +0000 UTC m=+1929.824836960 I0821 03:02:08.681893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-d7x9j" condition "Ready" to 2026-08-21 03:02:08.68188009 +0000 UTC m=+1929.844885582 I0821 03:02:08.711741 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:02:08.711731591 +0000 UTC m=+1929.874737053 I0821 03:02:08.730590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:08.731001 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:02:08.730994078 +0000 UTC m=+1929.893999540 I0821 03:02:08.744407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:08.758286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:02:08.758639 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:02:08.758633739 +0000 UTC m=+1929.921639201 I0821 03:05:24.839050 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-21 03:05:24.839007053 +0000 UTC m=+2126.002012495 I0821 03:05:24.839219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:05:24.839300 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-21 03:05:24.839290762 +0000 UTC m=+2126.002296244 I0821 03:05:24.864358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:05:24.864442 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-21 03:05:24.864434757 +0000 UTC m=+2126.027440219 I0821 03:05:25.026480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:05:25.055774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-bskg2" condition "Approved" to 2026-08-21 03:05:25.055760895 +0000 UTC m=+2126.218766357 I0821 03:05:25.074710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-bskg2" condition "Ready" to 2026-08-21 03:05:25.074699501 +0000 UTC m=+2126.237704973 I0821 03:05:25.108976 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:05:25.108968289 +0000 UTC m=+2126.271973741 I0821 03:05:25.131716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:05:25.132123 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:05:25.132114421 +0000 UTC m=+2126.295119913 I0821 03:05:25.164638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:05:25.164978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:06:17.981025 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pp28v-api" condition "Ready" to 2026-08-21 03:06:17.980973507 +0000 UTC m=+2179.143978969 I0821 03:06:17.981525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pp28v-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:06:17.981545 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pp28v-api" condition "Issuing" to 2026-08-21 03:06:17.981541495 +0000 UTC m=+2179.144546947 I0821 03:06:17.987380 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pp28v-vnc" condition "Ready" to 2026-08-21 03:06:17.98736155 +0000 UTC m=+2179.150367012 I0821 03:06:17.987785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pp28v-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:06:17.987802 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pp28v-vnc" condition "Issuing" to 2026-08-21 03:06:17.987798334 +0000 UTC m=+2179.150803786 I0821 03:06:18.002467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pp28v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pp28v-api\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:06:18.002571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pp28v-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:06:18.002592 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pp28v-api" condition "Issuing" to 2026-08-21 03:06:18.002586585 +0000 UTC m=+2179.165592067 I0821 03:06:18.019285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pp28v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pp28v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:06:18.019373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pp28v-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:06:18.019391 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pp28v-vnc" condition "Issuing" to 2026-08-21 03:06:18.01938668 +0000 UTC m=+2179.182392132 I0821 03:06:18.236282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pp28v-api-qrzx5" condition "Approved" to 2026-08-21 03:06:18.236271339 +0000 UTC m=+2179.399276791 I0821 03:06:18.258041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pp28v-api-qrzx5" condition "Ready" to 2026-08-21 03:06:18.258031552 +0000 UTC m=+2179.421036994 I0821 03:06:18.292500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-pp28v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pp28v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:06:18.292652 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pp28v-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:06:18.292637995 +0000 UTC m=+2179.455643457 I0821 03:06:18.297043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pp28v-vnc-djr6v" condition "Approved" to 2026-08-21 03:06:18.297033795 +0000 UTC m=+2179.460039267 I0821 03:06:18.312717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-pp28v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pp28v-api\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:06:18.314607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pp28v-vnc-djr6v" condition "Ready" to 2026-08-21 03:06:18.314596634 +0000 UTC m=+2179.477602086 I0821 03:06:18.348902 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pp28v-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:06:18.348887606 +0000 UTC m=+2179.511893048 I0821 03:06:18.367941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-pp28v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pp28v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:06:18.368290 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pp28v-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:06:18.368281064 +0000 UTC m=+2179.531286526 I0821 03:06:18.392175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-pp28v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pp28v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:06:18.401059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-pp28v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pp28v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:08:19.990072 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-08-21 03:08:19.990055705 +0000 UTC m=+2301.153061177 I0821 03:08:19.990107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:08:19.990140 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-08-21 03:08:19.990124877 +0000 UTC m=+2301.153130329 I0821 03:08:20.006261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:08:20.006324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:08:20.006343 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-08-21 03:08:20.006336791 +0000 UTC m=+2301.169342253 I0821 03:08:20.278924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:08:20.295693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-mfn6n" condition "Approved" to 2026-08-21 03:08:20.295674958 +0000 UTC m=+2301.458680450 I0821 03:08:20.323973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-mfn6n" condition "Ready" to 2026-08-21 03:08:20.323956735 +0000 UTC m=+2301.486962227 I0821 03:08:20.352275 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:08:20.352261941 +0000 UTC m=+2301.515267403 I0821 03:08:20.371759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:08:20.372135 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:08:20.372128221 +0000 UTC m=+2301.535133693 I0821 03:08:20.391156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:56.783455 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-21 03:11:56.783414487 +0000 UTC m=+2517.946419949 I0821 03:11:56.783665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:11:56.783742 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-21 03:11:56.783735687 +0000 UTC m=+2517.946741149 I0821 03:11:56.812756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:56.813042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:11:56.813109 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-21 03:11:56.813099517 +0000 UTC m=+2517.976104979 I0821 03:11:56.954395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:56.956678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-qfgfx" condition "Approved" to 2026-08-21 03:11:56.956669871 +0000 UTC m=+2518.119675323 I0821 03:11:56.981563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-qfgfx" condition "Ready" to 2026-08-21 03:11:56.981549486 +0000 UTC m=+2518.144554948 I0821 03:11:57.024931 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:11:57.024919344 +0000 UTC m=+2518.187924816 I0821 03:11:57.054544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:57.055477 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:11:57.055469911 +0000 UTC m=+2518.218475373 I0821 03:11:57.062444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:57.069675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:57.070008 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:11:57.069999936 +0000 UTC m=+2518.233005398 I0821 03:11:58.386126 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-21 03:11:58.38610818 +0000 UTC m=+2519.549113642 I0821 03:11:58.386245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:11:58.386293 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-21 03:11:58.386283696 +0000 UTC m=+2519.549289188 I0821 03:11:58.403595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:58.403736 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-21 03:11:58.403722134 +0000 UTC m=+2519.566727616 I0821 03:11:58.476016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:58.507305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-qdw64" condition "Approved" to 2026-08-21 03:11:58.507294378 +0000 UTC m=+2519.670299840 I0821 03:11:58.525206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-qdw64" condition "Ready" to 2026-08-21 03:11:58.52519128 +0000 UTC m=+2519.688196733 I0821 03:11:58.553434 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:11:58.553417404 +0000 UTC m=+2519.716422896 I0821 03:11:58.578166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:11:58.578588 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:11:58.578576649 +0000 UTC m=+2519.741582161 I0821 03:11:58.602711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:01.883288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:14:01.883317 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-21 03:14:01.883309923 +0000 UTC m=+2643.046315385 I0821 03:14:01.883735 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-21 03:14:01.883729966 +0000 UTC m=+2643.046735428 E0821 03:14:01.898949 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0821 03:14:01.899009 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-08-21 03:14:01.899002533 +0000 UTC m=+2643.062007995 I0821 03:14:01.899030 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0821 03:14:01.902466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:01.902567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:14:01.902585 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-21 03:14:01.902580107 +0000 UTC m=+2643.065585559 E0821 03:14:01.912744 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0821 03:14:01.912874 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0821 03:14:01.913026 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0821 03:14:01.913078 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0821 03:14:01.946880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:01.956846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-9xjgl" condition "Approved" to 2026-08-21 03:14:01.956834737 +0000 UTC m=+2643.119840199 I0821 03:14:01.989866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-9xjgl" condition "Ready" to 2026-08-21 03:14:01.989851929 +0000 UTC m=+2643.152857411 I0821 03:14:02.015116 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:02.015100274 +0000 UTC m=+2643.178105736 I0821 03:14:02.033337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:02.033970 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:02.033958066 +0000 UTC m=+2643.196963548 I0821 03:14:02.043471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:02.054178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:02.619183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:14:02.619216 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-21 03:14:02.619208054 +0000 UTC m=+2643.782213516 I0821 03:14:02.619208 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-21 03:14:02.619188083 +0000 UTC m=+2643.782193565 I0821 03:14:02.635943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:02.636096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:14:02.636159 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-21 03:14:02.636149044 +0000 UTC m=+2643.799154536 E0821 03:14:02.636510 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0821 03:14:02.636545 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-08-21 03:14:02.636537486 +0000 UTC m=+2643.799542948 I0821 03:14:02.636592 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0821 03:14:02.646651 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0821 03:14:02.646758 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0821 03:14:02.646787 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0821 03:14:02.646847 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0821 03:14:02.681960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-pc2cz" condition "Approved" to 2026-08-21 03:14:02.681945234 +0000 UTC m=+2643.844950696 I0821 03:14:02.699211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-pc2cz" condition "Ready" to 2026-08-21 03:14:02.699202984 +0000 UTC m=+2643.862208426 I0821 03:14:02.728406 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:02.728395545 +0000 UTC m=+2643.891400997 I0821 03:14:02.750270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:02.750562 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:02.750552731 +0000 UTC m=+2643.913558203 I0821 03:14:02.773674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:02.773992 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:02.773982918 +0000 UTC m=+2643.936988390 I0821 03:14:03.549041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:14:03.549086 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-21 03:14:03.549076721 +0000 UTC m=+2644.712082203 I0821 03:14:03.549338 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-21 03:14:03.549329099 +0000 UTC m=+2644.712334591 I0821 03:14:03.567960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:03.568222 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-21 03:14:03.568206791 +0000 UTC m=+2644.731212273 I0821 03:14:03.594317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:03.621457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-hjtd7" condition "Approved" to 2026-08-21 03:14:03.621441968 +0000 UTC m=+2644.784447460 I0821 03:14:03.640753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-hjtd7" condition "Ready" to 2026-08-21 03:14:03.640741453 +0000 UTC m=+2644.803746915 I0821 03:14:06.914520 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:06.914509709 +0000 UTC m=+2648.077515171 I0821 03:14:06.932932 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-hjtd7" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:06.932914955 +0000 UTC m=+2648.095920447 I0821 03:14:06.971777 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:06.971765764 +0000 UTC m=+2648.134771226 I0821 03:14:06.996405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:14:07.648926 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:14:07.648912643 +0000 UTC m=+2648.811918095 I0821 03:16:15.781023 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-21 03:16:15.780938158 +0000 UTC m=+2776.943943630 I0821 03:16:15.781101 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:16:15.781153 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-21 03:16:15.781140864 +0000 UTC m=+2776.944146356 I0821 03:16:15.802416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:16:15.802631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:16:15.802660 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-21 03:16:15.80265412 +0000 UTC m=+2776.965659602 I0821 03:16:16.087102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:16:16.096786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-phjp8" condition "Approved" to 2026-08-21 03:16:16.096773717 +0000 UTC m=+2777.259779179 I0821 03:16:16.117858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-phjp8" condition "Ready" to 2026-08-21 03:16:16.117846659 +0000 UTC m=+2777.280852121 I0821 03:16:16.150686 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:16:16.150671646 +0000 UTC m=+2777.313677118 I0821 03:16:16.172329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:16:16.172711 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:16:16.172705248 +0000 UTC m=+2777.335710700 I0821 03:16:16.192533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:02.337625 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-21 03:17:02.337607018 +0000 UTC m=+2823.500612500 I0821 03:17:02.356921 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-21 03:17:02.356902834 +0000 UTC m=+2823.519908296 I0821 03:17:02.357020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:17:02.357049 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-21 03:17:02.357043328 +0000 UTC m=+2823.520048790 I0821 03:17:02.377418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:02.377479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:17:02.377498 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-21 03:17:02.37749211 +0000 UTC m=+2823.540497552 E0821 03:17:02.391604 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0821 03:17:02.453233 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-21 03:17:02.453215215 +0000 UTC m=+2823.616220667 I0821 03:17:02.474770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:17:02.474814 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-21 03:17:02.474803614 +0000 UTC m=+2823.637809086 I0821 03:17:02.475583 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-21 03:17:02.475574829 +0000 UTC m=+2823.638580291 I0821 03:17:02.506425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:02.506517 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-21 03:17:02.506506085 +0000 UTC m=+2823.669511567 E0821 03:17:02.711518 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0821 03:17:02.941973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:02.995322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6hgd6" condition "Approved" to 2026-08-21 03:17:02.995308004 +0000 UTC m=+2824.158313466 I0821 03:17:03.026195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6hgd6" condition "Ready" to 2026-08-21 03:17:03.026176648 +0000 UTC m=+2824.189182100 I0821 03:17:03.080044 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:03.080021005 +0000 UTC m=+2824.243026457 I0821 03:17:03.117081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:03.117392 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:03.117386877 +0000 UTC m=+2824.280392329 I0821 03:17:03.124120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:03.154706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:03.155097 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:03.15509133 +0000 UTC m=+2824.318096782 I0821 03:17:03.393972 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-21 03:17:03.393562625 +0000 UTC m=+2824.556568077 I0821 03:17:03.430699 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-21 03:17:03.430675079 +0000 UTC m=+2824.593680531 I0821 03:17:03.430891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:17:03.430987 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-21 03:17:03.430976918 +0000 UTC m=+2824.593982380 I0821 03:17:03.460697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:03.460794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:17:03.460820 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-21 03:17:03.46081146 +0000 UTC m=+2824.623816912 I0821 03:17:03.807945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8kfb5" condition "Approved" to 2026-08-21 03:17:03.80791099 +0000 UTC m=+2824.970916442 I0821 03:17:03.865137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8kfb5" condition "Ready" to 2026-08-21 03:17:03.865121364 +0000 UTC m=+2825.028126816 I0821 03:17:03.911471 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-21 03:17:03.911460412 +0000 UTC m=+2825.074465864 I0821 03:17:03.932508 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:03.932497853 +0000 UTC m=+2825.095503305 I0821 03:17:03.938395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:17:03.938423 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-21 03:17:03.938415192 +0000 UTC m=+2825.101420664 I0821 03:17:03.938899 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-21 03:17:03.938893317 +0000 UTC m=+2825.101898779 I0821 03:17:03.963254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:03.963337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:17:03.963365 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-21 03:17:03.963355747 +0000 UTC m=+2825.126361239 I0821 03:17:03.976702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:03.977014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:03.977279 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:03.977271491 +0000 UTC m=+2825.140276953 I0821 03:17:04.016378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:04.249480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:04.253869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-c4h9w" condition "Approved" to 2026-08-21 03:17:04.253852102 +0000 UTC m=+2825.416857584 I0821 03:17:04.278480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-c4h9w" condition "Ready" to 2026-08-21 03:17:04.278464977 +0000 UTC m=+2825.441470459 I0821 03:17:04.309948 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:04.30993312 +0000 UTC m=+2825.472938572 I0821 03:17:04.334066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:04.334470 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:04.334448972 +0000 UTC m=+2825.497454434 I0821 03:17:04.448796 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-21 03:17:04.448782649 +0000 UTC m=+2825.611788101 I0821 03:17:04.453514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:17:04.453532 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-21 03:17:04.4535285 +0000 UTC m=+2825.616533942 I0821 03:17:04.454406 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-21 03:17:04.454392517 +0000 UTC m=+2825.617397969 I0821 03:17:04.531183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:04.587677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:04.734053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:04.734142 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-21 03:17:04.734132799 +0000 UTC m=+2825.897138261 I0821 03:17:05.007225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:05.137544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-pdnc5" condition "Approved" to 2026-08-21 03:17:05.137517563 +0000 UTC m=+2826.300523045 I0821 03:17:05.502863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-pdnc5" condition "Ready" to 2026-08-21 03:17:05.502845514 +0000 UTC m=+2826.665850996 I0821 03:17:05.745834 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:05.745823153 +0000 UTC m=+2826.908828615 I0821 03:17:05.834051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:05.834389 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:17:05.834383077 +0000 UTC m=+2826.997388529 I0821 03:17:06.169558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:17:06.207791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:20:30.694362 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-08-21 03:20:30.69431575 +0000 UTC m=+3031.857321242 I0821 03:20:30.695356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:20:30.695435 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-08-21 03:20:30.695427636 +0000 UTC m=+3031.858433098 I0821 03:20:30.723657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:20:30.723740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:20:30.723753 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-08-21 03:20:30.723749209 +0000 UTC m=+3031.886754661 I0821 03:20:30.979919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:20:30.989317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-j2djb" condition "Approved" to 2026-08-21 03:20:30.989295848 +0000 UTC m=+3032.152301310 I0821 03:20:31.008761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-j2djb" condition "Ready" to 2026-08-21 03:20:31.008751318 +0000 UTC m=+3032.171756780 I0821 03:20:31.042460 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:20:31.042440723 +0000 UTC m=+3032.205446205 I0821 03:20:31.064661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:20:31.065024 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:20:31.065017443 +0000 UTC m=+3032.228022915 I0821 03:20:31.080794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:20:31.081184 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:20:31.081178378 +0000 UTC m=+3032.244183840 I0821 03:20:33.121581 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-08-21 03:20:33.12156787 +0000 UTC m=+3034.284573322 I0821 03:20:33.121614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:20:33.121636 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-08-21 03:20:33.121630252 +0000 UTC m=+3034.284635704 I0821 03:20:33.141847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0821 03:20:33.141917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0821 03:20:33.141931 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-08-21 03:20:33.141926339 +0000 UTC m=+3034.304931811 I0821 03:20:33.352709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-c4ktl" condition "Approved" to 2026-08-21 03:20:33.352696851 +0000 UTC m=+3034.515702313 I0821 03:20:33.377399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-c4ktl" condition "Ready" to 2026-08-21 03:20:33.377382998 +0000 UTC m=+3034.540388460 I0821 03:20:33.404939 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-21 03:20:33.404923607 +0000 UTC m=+3034.567929079 I0821 03:20:33.426298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"