I0421 17:18:04.289218 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 17:18:04.289364 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 17:18:04.289450 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 17:18:04.293603 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 17:18:04.293962 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 17:18:04.294057 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 17:18:04.294059 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 17:18:04.296433 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 17:18:04.767814 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 17:18:04.773916 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 17:18:04.774503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 17:18:04.777972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 17:18:04.780237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 17:18:04.783116 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 17:18:04.783158 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 17:18:04.783185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 17:18:04.785931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 17:18:04.787697 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 17:18:04.789406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 17:18:04.814752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 17:18:04.816874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 17:18:04.818656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 17:18:04.820519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 17:18:04.822346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 17:18:04.824189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 17:18:04.826027 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 17:18:04.827809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 17:18:04.833772 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 17:18:04.833840 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 17:18:04.833926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 17:18:04.836868 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 17:18:04.836915 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 17:18:04.839606 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 17:18:04.842241 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.842712 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.842890 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.843132 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.843333 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.843966 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.844117 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.844817 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.844915 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:04.926908 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:27.334346 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 17:18:27.334330927 +0000 UTC m=+23.077798028 I0421 17:18:28.131216 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:18:28.131173999 +0000 UTC m=+23.874641090 I0421 17:18:28.131599 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:18:28.131728 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:18:28.131718061 +0000 UTC m=+23.875185162 E0421 17:18:28.156761 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:18:28.156871 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 17:18:28.156859787 +0000 UTC m=+23.900326888 E0421 17:18:28.156907 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:18:28.157839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:28.157948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:18:28.157992 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:18:28.157979712 +0000 UTC m=+23.901446823 E0421 17:18:28.175374 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 17:18:28.175485 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:18:28.175544 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:18:28.175607 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 17:18:28.203963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:28.212024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7jvt6" condition "Approved" to 2026-04-21 17:18:28.212010298 +0000 UTC m=+23.955477369 I0421 17:18:28.243152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7jvt6" condition "Ready" to 2026-04-21 17:18:28.243139457 +0000 UTC m=+23.986606538 I0421 17:18:28.307765 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:18:28.307737198 +0000 UTC m=+24.051204269 I0421 17:18:28.375660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:28.376105 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:18:28.3760963 +0000 UTC m=+24.119563411 I0421 17:18:28.405475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:18:28.405885 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:18:28.40587364 +0000 UTC m=+24.149340751 I0421 17:18:33.176323 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:18:33.176309158 +0000 UTC m=+28.919776259 I0421 17:19:42.746059 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:19:42.746036806 +0000 UTC m=+98.489503917 I0421 17:19:42.746421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:19:42.746467 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 17:19:42.746455775 +0000 UTC m=+98.489922876 I0421 17:19:42.770101 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 17:19:42.770088455 +0000 UTC m=+98.513555536 I0421 17:19:42.774759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:19:42.774930 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:19:42.774817791 +0000 UTC m=+98.518284882 I0421 17:19:42.969797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:19:43.011455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d7f2c" condition "Approved" to 2026-04-21 17:19:43.01144081 +0000 UTC m=+98.754907911 I0421 17:19:43.050905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d7f2c" condition "Ready" to 2026-04-21 17:19:43.050886865 +0000 UTC m=+98.794353966 I0421 17:19:43.088801 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:19:43.088784995 +0000 UTC m=+98.832252066 I0421 17:19:43.128671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:26:47.021365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:26:47.021440 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Issuing" to 2026-04-21 17:26:47.021429127 +0000 UTC m=+522.764896248 I0421 17:26:47.021452 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready" to 2026-04-21 17:26:47.021428307 +0000 UTC m=+522.764895428 I0421 17:26:47.036978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:26:47.037051 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready" to 2026-04-21 17:26:47.037043744 +0000 UTC m=+522.780510825 I0421 17:26:47.377518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:26:47.412425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-qkj72" condition "Approved" to 2026-04-21 17:26:47.412401135 +0000 UTC m=+523.155868236 I0421 17:26:47.463407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-qkj72" condition "Ready" to 2026-04-21 17:26:47.463388559 +0000 UTC m=+523.206855670 I0421 17:26:47.491644 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:26:47.491628807 +0000 UTC m=+523.235095888 I0421 17:26:47.512711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:26:47.557863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:57.889317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:27:57.889378 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:27:57.88935569 +0000 UTC m=+593.632822801 I0421 17:27:57.889315 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 17:27:57.889271048 +0000 UTC m=+593.632738129 E0421 17:27:57.903244 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:27:57.903303 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 17:27:57.90329534 +0000 UTC m=+593.646762421 E0421 17:27:57.903355 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:27:57.905658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:57.905888 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 17:27:57.905873247 +0000 UTC m=+593.649340358 E0421 17:27:57.917892 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 17:27:57.918026 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:27:57.918069 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:27:57.918114 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 17:27:57.927812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:57.953374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-r6t99" condition "Approved" to 2026-04-21 17:27:57.953357744 +0000 UTC m=+593.696824845 I0421 17:27:57.970084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-r6t99" condition "Ready" to 2026-04-21 17:27:57.970061785 +0000 UTC m=+593.713528896 I0421 17:27:57.993540 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:27:57.993524817 +0000 UTC m=+593.736991898 I0421 17:27:58.012800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:58.013089 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:27:58.013063832 +0000 UTC m=+593.756530913 I0421 17:27:58.022860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:58.035680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:58.036157 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:27:58.036149086 +0000 UTC m=+593.779616167 I0421 17:28:02.918358 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:02.918344154 +0000 UTC m=+598.661811255 I0421 17:28:41.620191 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:28:41.620232 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:28:41.62022316 +0000 UTC m=+637.363690241 I0421 17:28:41.620525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:28:41.620861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:28:41.620889 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:28:41.620882904 +0000 UTC m=+637.364349985 I0421 17:28:41.620655 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:28:41.620649669 +0000 UTC m=+637.364116760 I0421 17:28:41.621309 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:28:41.621301633 +0000 UTC m=+637.364768724 I0421 17:28:41.621491 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 17:28:41.621484648 +0000 UTC m=+637.364951729 I0421 17:28:41.621575 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 17:28:41.621568149 +0000 UTC m=+637.365035230 I0421 17:28:41.652725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:41.652787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:28:41.652810 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:28:41.65280296 +0000 UTC m=+637.396270041 I0421 17:28:41.655169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:41.655220 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:28:41.655233 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:28:41.655228024 +0000 UTC m=+637.398695095 I0421 17:28:41.655481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:41.657226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 17:28:41.657209349 +0000 UTC m=+637.400676420 I0421 17:28:41.859934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:41.867191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-66j6b" condition "Approved" to 2026-04-21 17:28:41.86717401 +0000 UTC m=+637.610641081 I0421 17:28:41.885549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-66j6b" condition "Ready" to 2026-04-21 17:28:41.885534541 +0000 UTC m=+637.629001652 I0421 17:28:41.914508 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:41.914456791 +0000 UTC m=+637.657923892 I0421 17:28:41.935745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:41.944307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:41.972149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rbt97" condition "Approved" to 2026-04-21 17:28:41.972135434 +0000 UTC m=+637.715602515 I0421 17:28:41.998968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rbt97" condition "Ready" to 2026-04-21 17:28:41.998955937 +0000 UTC m=+637.742423028 I0421 17:28:42.121255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:42.167440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ds8bj" condition "Approved" to 2026-04-21 17:28:42.167426156 +0000 UTC m=+637.910893227 I0421 17:28:42.208677 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:42.208660921 +0000 UTC m=+637.952128022 I0421 17:28:42.316915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ds8bj" condition "Ready" to 2026-04-21 17:28:42.316906149 +0000 UTC m=+638.060373230 I0421 17:28:42.660848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:42.661126 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:42.661120463 +0000 UTC m=+638.404587534 I0421 17:28:43.062298 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:43.062284733 +0000 UTC m=+638.805751814 I0421 17:28:43.112182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:43.160082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:43.281691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:43.282023 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:43.282016693 +0000 UTC m=+639.025483774 I0421 17:28:43.509050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:51.886308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:28:51.886370 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" condition "Issuing" to 2026-04-21 17:28:51.886358438 +0000 UTC m=+647.629825539 I0421 17:28:51.886374 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" condition "Ready" to 2026-04-21 17:28:51.886355608 +0000 UTC m=+647.629822699 I0421 17:28:51.902072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g48tx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:51.902149 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" condition "Ready" to 2026-04-21 17:28:51.902142032 +0000 UTC m=+647.645609123 I0421 17:28:52.020285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g48tx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:52.055983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g48tx-8b84r" condition "Approved" to 2026-04-21 17:28:52.055968674 +0000 UTC m=+647.799435765 I0421 17:28:52.072715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g48tx-8b84r" condition "Ready" to 2026-04-21 17:28:52.072701499 +0000 UTC m=+647.816168570 I0421 17:28:52.098472 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:52.098460847 +0000 UTC m=+647.841927918 I0421 17:28:52.115887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g48tx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:52.166009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g48tx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g48tx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:25.152556 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 17:29:25.152539943 +0000 UTC m=+680.896007054 I0421 17:29:25.152927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:29:25.152957 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:29:25.152950122 +0000 UTC m=+680.896417233 I0421 17:29:25.179272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:25.179367 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 17:29:25.179360015 +0000 UTC m=+680.922827096 I0421 17:29:25.525234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:25.556360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dmfjg" condition "Approved" to 2026-04-21 17:29:25.556340702 +0000 UTC m=+681.299807783 I0421 17:29:25.579723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-dmfjg" condition "Ready" to 2026-04-21 17:29:25.579713088 +0000 UTC m=+681.323180169 I0421 17:29:25.608431 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:29:25.608423031 +0000 UTC m=+681.351890102 I0421 17:29:25.627952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:25.688097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:32:39.838540 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:32:39.838497784 +0000 UTC m=+875.581964875 I0421 17:32:39.838739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:32:39.838860 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:32:39.838848532 +0000 UTC m=+875.582315633 I0421 17:32:39.856311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:32:39.856440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:32:39.856474 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:32:39.856463453 +0000 UTC m=+875.599930564 I0421 17:32:40.026440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:32:40.034048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-722fg" condition "Approved" to 2026-04-21 17:32:40.034036656 +0000 UTC m=+875.777503737 I0421 17:32:40.051645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-722fg" condition "Ready" to 2026-04-21 17:32:40.051630756 +0000 UTC m=+875.795097847 I0421 17:32:40.076548 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:32:40.076525289 +0000 UTC m=+875.819992370 I0421 17:32:40.096150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:32:40.096588 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:32:40.096580074 +0000 UTC m=+875.840047155 I0421 17:32:40.104620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:32:40.119155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:35:33.263008 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-21 17:35:33.262986271 +0000 UTC m=+1049.006453352 I0421 17:35:33.263190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:35:33.263271 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-21 17:35:33.263262137 +0000 UTC m=+1049.006729248 I0421 17:35:33.283426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:35:33.283525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:35:33.283555 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-21 17:35:33.283548683 +0000 UTC m=+1049.027015744 I0421 17:35:33.501622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:35:33.520181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-722ps" condition "Approved" to 2026-04-21 17:35:33.520174192 +0000 UTC m=+1049.263641263 I0421 17:35:33.541186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-722ps" condition "Ready" to 2026-04-21 17:35:33.541175934 +0000 UTC m=+1049.284643015 I0421 17:35:33.580544 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:35:33.580532679 +0000 UTC m=+1049.323999750 I0421 17:35:33.604534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:44.809501 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-21 17:36:44.809482102 +0000 UTC m=+1120.552949213 I0421 17:36:44.810400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:36:44.810526 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-21 17:36:44.810493244 +0000 UTC m=+1120.553960355 I0421 17:36:44.878571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:44.878903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:36:44.879143 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-21 17:36:44.878976554 +0000 UTC m=+1120.622443665 I0421 17:36:45.108519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5m8bv" condition "Approved" to 2026-04-21 17:36:45.108509463 +0000 UTC m=+1120.851976544 I0421 17:36:45.170828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5m8bv" condition "Ready" to 2026-04-21 17:36:45.170817285 +0000 UTC m=+1120.914284346 I0421 17:36:45.210505 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:36:45.210491256 +0000 UTC m=+1120.953958347 I0421 17:36:45.262888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:45.263345 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:36:45.263338544 +0000 UTC m=+1121.006805625 I0421 17:36:45.271503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:45.296176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:40:13.174182 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:40:13.174246 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-21 17:40:13.174237936 +0000 UTC m=+1328.917705007 I0421 17:40:13.174218 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-21 17:40:13.174186185 +0000 UTC m=+1328.917653326 I0421 17:40:13.192137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:40:13.192213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:40:13.192231 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-21 17:40:13.192225201 +0000 UTC m=+1328.935692292 I0421 17:40:13.529808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-n54vw" condition "Approved" to 2026-04-21 17:40:13.529796101 +0000 UTC m=+1329.273263182 I0421 17:40:13.549193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-n54vw" condition "Ready" to 2026-04-21 17:40:13.549176326 +0000 UTC m=+1329.292643407 I0421 17:40:13.588642 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:40:13.588627913 +0000 UTC m=+1329.332094994 I0421 17:40:13.663237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:03.191534 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-21 17:48:03.19149775 +0000 UTC m=+1798.934964831 I0421 17:48:03.191622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:03.191747 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-21 17:48:03.191736676 +0000 UTC m=+1798.935203797 I0421 17:48:03.208167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:03.208234 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:48:03.208252 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-21 17:48:03.208244957 +0000 UTC m=+1798.951712038 I0421 17:48:03.365356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-c9shb" condition "Approved" to 2026-04-21 17:48:03.365346919 +0000 UTC m=+1799.108814000 I0421 17:48:03.380487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-c9shb" condition "Ready" to 2026-04-21 17:48:03.38047734 +0000 UTC m=+1799.123944421 I0421 17:48:03.423462 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:03.423446336 +0000 UTC m=+1799.166913417 I0421 17:48:03.455677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:03.456060 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:03.456054389 +0000 UTC m=+1799.199521460 I0421 17:48:03.485438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:48:03.485761 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:03.485751016 +0000 UTC m=+1799.229218097 I0421 17:49:44.536889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:49:44.536958 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-21 17:49:44.536950772 +0000 UTC m=+1900.280417853 I0421 17:49:44.537362 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-21 17:49:44.537339061 +0000 UTC m=+1900.280806162 I0421 17:49:44.553857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:44.553965 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-21 17:49:44.553956464 +0000 UTC m=+1900.297423555 I0421 17:49:44.816282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:44.851568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-qpnwv" condition "Approved" to 2026-04-21 17:49:44.851552206 +0000 UTC m=+1900.595019287 I0421 17:49:44.874718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-qpnwv" condition "Ready" to 2026-04-21 17:49:44.874708186 +0000 UTC m=+1900.618175267 I0421 17:49:44.906637 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:44.906622933 +0000 UTC m=+1900.650090014 I0421 17:49:44.932014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:44.932666 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:44.932659079 +0000 UTC m=+1900.676126160 I0421 17:49:44.956141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:44.956543 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:44.956515005 +0000 UTC m=+1900.699982096 I0421 17:50:57.774253 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-21 17:50:57.774232966 +0000 UTC m=+1973.517700077 I0421 17:50:57.774803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:50:57.774837 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-21 17:50:57.774830189 +0000 UTC m=+1973.518297290 I0421 17:50:57.802016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:57.802220 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:50:57.802277 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-21 17:50:57.802269036 +0000 UTC m=+1973.545736117 I0421 17:50:57.894135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xjw5s" condition "Approved" to 2026-04-21 17:50:57.89412289 +0000 UTC m=+1973.637589961 I0421 17:50:57.927178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xjw5s" condition "Ready" to 2026-04-21 17:50:57.927167882 +0000 UTC m=+1973.670634963 I0421 17:50:57.966682 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:50:57.966665769 +0000 UTC m=+1973.710132860 I0421 17:50:57.989362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:58.440752 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-21 17:50:58.440732623 +0000 UTC m=+1974.184199885 I0421 17:50:58.441131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:50:58.441162 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-21 17:50:58.441154133 +0000 UTC m=+1974.184621224 I0421 17:50:58.479788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:58.479891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:50:58.479921 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-21 17:50:58.479912414 +0000 UTC m=+1974.223379515 I0421 17:50:58.545539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:58.559531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5fcr4" condition "Approved" to 2026-04-21 17:50:58.559515893 +0000 UTC m=+1974.302982964 I0421 17:50:58.587032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5fcr4" condition "Ready" to 2026-04-21 17:50:58.587020531 +0000 UTC m=+1974.330487612 I0421 17:50:58.650857 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:50:58.650832515 +0000 UTC m=+1974.394299596 I0421 17:50:58.703811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:59.169682 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-21 17:50:59.169672015 +0000 UTC m=+1974.913139096 I0421 17:50:59.827620 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-21 17:50:59.827607921 +0000 UTC m=+1975.571075002 I0421 17:51:48.020109 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-21 17:51:48.020063826 +0000 UTC m=+2023.763530887 I0421 17:51:48.020504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:51:48.020528 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-21 17:51:48.020524006 +0000 UTC m=+2023.763991087 I0421 17:51:48.069392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:51:48.069461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:51:48.069475 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-21 17:51:48.069470477 +0000 UTC m=+2023.812937548 I0421 17:51:50.205866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:51:50.224484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-q4wdb" condition "Approved" to 2026-04-21 17:51:50.224469435 +0000 UTC m=+2025.967936526 I0421 17:51:50.246883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-q4wdb" condition "Ready" to 2026-04-21 17:51:50.246861698 +0000 UTC m=+2025.990328809 I0421 17:51:50.300784 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:51:50.30077046 +0000 UTC m=+2026.044237541 I0421 17:51:50.322999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:51:50.393196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:53.131609 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-21 17:54:53.131591027 +0000 UTC m=+2208.875058128 I0421 17:54:53.131651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:54:53.131793 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-21 17:54:53.131784261 +0000 UTC m=+2208.875251342 I0421 17:54:53.161443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:53.161530 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-21 17:54:53.161524209 +0000 UTC m=+2208.904991280 I0421 17:54:53.257784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:53.290203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tpms9" condition "Approved" to 2026-04-21 17:54:53.290190211 +0000 UTC m=+2209.033657292 I0421 17:54:53.306204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tpms9" condition "Ready" to 2026-04-21 17:54:53.306193201 +0000 UTC m=+2209.049660282 I0421 17:54:53.352640 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:54:53.352625655 +0000 UTC m=+2209.096092726 I0421 17:54:53.386072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:54.723073 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-21 17:54:54.723052412 +0000 UTC m=+2210.466519483 I0421 17:54:54.723492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:54:54.723521 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-21 17:54:54.723517872 +0000 UTC m=+2210.466984943 I0421 17:54:54.794486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:54.794614 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-21 17:54:54.794591859 +0000 UTC m=+2210.538058940 I0421 17:54:54.885304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:54.982694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-gv2bf" condition "Approved" to 2026-04-21 17:54:54.982681047 +0000 UTC m=+2210.726148158 I0421 17:54:55.022440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-gv2bf" condition "Ready" to 2026-04-21 17:54:55.022424599 +0000 UTC m=+2210.765891700 I0421 17:54:55.068855 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:54:55.068841702 +0000 UTC m=+2210.812308773 I0421 17:54:55.197737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:55.198250 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:54:55.198240021 +0000 UTC m=+2210.941707102 I0421 17:54:55.637327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:54:55.639728 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:54:55.639714641 +0000 UTC m=+2211.383181712 I0421 17:58:10.893498 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-21 17:58:10.893451297 +0000 UTC m=+2406.636918368 I0421 17:58:10.893537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:58:10.893675 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-21 17:58:10.893669602 +0000 UTC m=+2406.637136673 I0421 17:58:11.164750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:11.164861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:58:11.164880 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-21 17:58:11.164873417 +0000 UTC m=+2406.908340498 I0421 17:58:11.726867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-55g6r" condition "Approved" to 2026-04-21 17:58:11.726854307 +0000 UTC m=+2407.470321378 I0421 17:58:12.386365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-55g6r" condition "Ready" to 2026-04-21 17:58:12.386351227 +0000 UTC m=+2408.129818338 I0421 17:58:12.707907 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:58:12.707894173 +0000 UTC m=+2408.451361254 I0421 17:58:12.748140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:12.749564 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:58:12.74955147 +0000 UTC m=+2408.493018581 I0421 17:58:12.798591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:12.798960 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:58:12.79895231 +0000 UTC m=+2408.542419391 I0421 17:58:45.164534 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-szvq7-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:58:45.164593 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-szvq7-api" condition "Issuing" to 2026-04-21 17:58:45.164586669 +0000 UTC m=+2440.908053740 I0421 17:58:45.164690 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-szvq7-api" condition "Ready" to 2026-04-21 17:58:45.164665701 +0000 UTC m=+2440.908132802 I0421 17:58:45.267922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-szvq7-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:58:45.268021 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-szvq7-vnc" condition "Issuing" to 2026-04-21 17:58:45.268009134 +0000 UTC m=+2441.011476205 I0421 17:58:45.269149 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-szvq7-vnc" condition "Ready" to 2026-04-21 17:58:45.267986004 +0000 UTC m=+2441.011453065 I0421 17:58:45.280531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-szvq7-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-szvq7-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:45.280682 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-szvq7-api" condition "Ready" to 2026-04-21 17:58:45.28067339 +0000 UTC m=+2441.024140511 I0421 17:58:45.298435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-szvq7-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-szvq7-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:45.298553 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-szvq7-vnc" condition "Ready" to 2026-04-21 17:58:45.298543651 +0000 UTC m=+2441.042010752 I0421 17:58:45.424938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-szvq7-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-szvq7-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:46.066729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-szvq7-vnc-95s48" condition "Approved" to 2026-04-21 17:58:46.066712717 +0000 UTC m=+2441.810179798 I0421 17:58:47.333781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-szvq7-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-szvq7-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:47.335075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-szvq7-vnc-95s48" condition "Ready" to 2026-04-21 17:58:47.335061407 +0000 UTC m=+2443.078528498 I0421 17:58:47.691004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-szvq7-api-5tmn2" condition "Approved" to 2026-04-21 17:58:47.690985287 +0000 UTC m=+2443.434452398 I0421 17:58:48.595633 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-szvq7-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:58:48.595618761 +0000 UTC m=+2444.339085842 I0421 17:58:48.596464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-szvq7-api-5tmn2" condition "Ready" to 2026-04-21 17:58:48.596456509 +0000 UTC m=+2444.339923590 I0421 17:58:48.674142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-szvq7-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-szvq7-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:48.689206 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-szvq7-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:58:48.689190784 +0000 UTC m=+2444.432657865 I0421 17:58:48.710953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-szvq7-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-szvq7-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:58:48.744363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-szvq7-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-szvq7-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:04.021901 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-21 18:01:04.021888724 +0000 UTC m=+2579.765355795 I0421 18:01:04.021966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:01:04.022011 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-21 18:01:04.022005606 +0000 UTC m=+2579.765472697 I0421 18:01:04.085472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:04.085596 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-21 18:01:04.085586445 +0000 UTC m=+2579.829053526 I0421 18:01:04.277726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:04.311326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-brnl7" condition "Approved" to 2026-04-21 18:01:04.311299599 +0000 UTC m=+2580.054766700 I0421 18:01:04.332375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-brnl7" condition "Ready" to 2026-04-21 18:01:04.332363503 +0000 UTC m=+2580.075830574 I0421 18:01:04.424169 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:01:04.424152805 +0000 UTC m=+2580.167619896 I0421 18:01:04.462204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:04.549468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:02.827969 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-21 18:05:02.827913294 +0000 UTC m=+2818.571380385 I0421 18:05:02.828383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:05:02.828413 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-21 18:05:02.828406695 +0000 UTC m=+2818.571873766 I0421 18:05:02.853869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:02.854021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:05:02.854054 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-21 18:05:02.854044421 +0000 UTC m=+2818.597511522 I0421 18:05:03.297293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-nljmc" condition "Approved" to 2026-04-21 18:05:03.297244573 +0000 UTC m=+2819.040711654 I0421 18:05:03.338848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-nljmc" condition "Ready" to 2026-04-21 18:05:03.338833588 +0000 UTC m=+2819.082300689 I0421 18:05:03.847719 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:03.847701776 +0000 UTC m=+2819.591168877 I0421 18:05:03.942097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:03.942722 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:03.942713802 +0000 UTC m=+2819.686180883 I0421 18:05:04.012354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:04.509496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:05:04.509544 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-21 18:05:04.509533742 +0000 UTC m=+2820.253000853 I0421 18:05:04.509646 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-21 18:05:04.509631784 +0000 UTC m=+2820.253098885 I0421 18:05:04.532732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:04.532823 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-21 18:05:04.532816235 +0000 UTC m=+2820.276283326 I0421 18:05:04.877360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:04.932265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-h7662" condition "Approved" to 2026-04-21 18:05:04.932253464 +0000 UTC m=+2820.675720555 I0421 18:05:04.959366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-h7662" condition "Ready" to 2026-04-21 18:05:04.959357213 +0000 UTC m=+2820.702824284 I0421 18:05:05.000601 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:05.000588279 +0000 UTC m=+2820.744055370 I0421 18:05:05.046654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:05:05.047642 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:05.047631137 +0000 UTC m=+2820.791098248 I0421 18:05:05.095095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:14.703823 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-21 18:10:14.70377931 +0000 UTC m=+3130.447246411 I0421 18:10:14.703844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:10:14.704018 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-21 18:10:14.704009776 +0000 UTC m=+3130.447476847 E0421 18:10:14.754665 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:10:14.754792 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-21 18:10:14.754781848 +0000 UTC m=+3130.498248959 I0421 18:10:14.754824 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:10:14.756803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:14.756906 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:10:14.756928 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-21 18:10:14.756921296 +0000 UTC m=+3130.500388377 E0421 18:10:14.831711 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0421 18:10:14.831927 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:10:14.831963 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0421 18:10:14.832035 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0421 18:10:15.071362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-zdcrg" condition "Approved" to 2026-04-21 18:10:15.071350162 +0000 UTC m=+3130.814817243 I0421 18:10:15.110497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-zdcrg" condition "Ready" to 2026-04-21 18:10:15.11048657 +0000 UTC m=+3130.853953651 I0421 18:10:15.152758 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:15.152746709 +0000 UTC m=+3130.896213780 I0421 18:10:15.303836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:15.480885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:10:15.480928 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-21 18:10:15.480920426 +0000 UTC m=+3131.224387507 I0421 18:10:15.481393 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-21 18:10:15.481386176 +0000 UTC m=+3131.224853257 E0421 18:10:15.535880 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:10:15.535921 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-21 18:10:15.535913084 +0000 UTC m=+3131.279380155 I0421 18:10:15.535961 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:10:15.539856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:15.540029 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-21 18:10:15.540020817 +0000 UTC m=+3131.283487888 E0421 18:10:15.600900 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0421 18:10:15.605692 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:10:15.605735 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0421 18:10:15.605790 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0421 18:10:15.609660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:15.687607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-rzgfg" condition "Approved" to 2026-04-21 18:10:15.687586386 +0000 UTC m=+3131.431053497 I0421 18:10:15.735003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-rzgfg" condition "Ready" to 2026-04-21 18:10:15.734991852 +0000 UTC m=+3131.478458923 I0421 18:10:15.779641 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:15.779627005 +0000 UTC m=+3131.523094086 I0421 18:10:15.806710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:15.806988 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:15.806980675 +0000 UTC m=+3131.550447746 I0421 18:10:15.831000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:15.831305 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:15.831297567 +0000 UTC m=+3131.574764648 I0421 18:10:16.288089 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-21 18:10:16.288064252 +0000 UTC m=+3132.031531363 I0421 18:10:16.288196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:10:16.288249 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-21 18:10:16.288238336 +0000 UTC m=+3132.031705437 I0421 18:10:16.311031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:16.311140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:10:16.311154 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-21 18:10:16.311148636 +0000 UTC m=+3132.054615717 I0421 18:10:16.377242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:16.377295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-gh9rc" condition "Approved" to 2026-04-21 18:10:16.377283307 +0000 UTC m=+3132.120750388 I0421 18:10:16.397771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-gh9rc" condition "Ready" to 2026-04-21 18:10:16.397735521 +0000 UTC m=+3132.141202612 I0421 18:10:19.832261 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:19.832248269 +0000 UTC m=+3135.575715380 I0421 18:10:19.899165 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-gh9rc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:19.899147547 +0000 UTC m=+3135.642614658 I0421 18:10:19.924165 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:19.924153755 +0000 UTC m=+3135.667620826 I0421 18:10:19.951889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:19.952244 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:19.952235112 +0000 UTC m=+3135.695702193 I0421 18:10:19.976275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:10:19.976558 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:19.976551224 +0000 UTC m=+3135.720018305 I0421 18:10:20.602078 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:10:20.602063838 +0000 UTC m=+3136.345530929 I0421 18:12:57.765702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:12:57.765923 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-21 18:12:57.765916835 +0000 UTC m=+3293.509383916 I0421 18:12:57.765708 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-21 18:12:57.765696381 +0000 UTC m=+3293.509163472 I0421 18:12:57.787282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:12:57.787386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:12:57.787410 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-21 18:12:57.787403383 +0000 UTC m=+3293.530870464 I0421 18:12:57.921455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-w848b" condition "Approved" to 2026-04-21 18:12:57.921440785 +0000 UTC m=+3293.664907866 I0421 18:12:57.945017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-w848b" condition "Ready" to 2026-04-21 18:12:57.94500328 +0000 UTC m=+3293.688470361 I0421 18:12:57.993053 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:12:57.993025519 +0000 UTC m=+3293.736492600 I0421 18:12:58.018501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:12:58.019064 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:12:58.01905396 +0000 UTC m=+3293.762521061 I0421 18:12:58.041664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:12:58.041901 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:12:58.041894209 +0000 UTC m=+3293.785361290 I0421 18:13:44.782882 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-21 18:13:44.782865188 +0000 UTC m=+3340.526332269 I0421 18:13:44.806384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:44.806449 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-21 18:13:44.806440343 +0000 UTC m=+3340.549907434 I0421 18:13:44.806513 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-21 18:13:44.806499524 +0000 UTC m=+3340.549966605 I0421 18:13:44.822436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:44.822505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:44.822522 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-21 18:13:44.822516128 +0000 UTC m=+3340.565983219 E0421 18:13:44.848773 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0421 18:13:44.908803 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-21 18:13:44.908786246 +0000 UTC m=+3340.652253337 I0421 18:13:44.932035 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-21 18:13:44.932024023 +0000 UTC m=+3340.675491104 I0421 18:13:44.932105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:44.932137 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-21 18:13:44.932129435 +0000 UTC m=+3340.675596546 I0421 18:13:44.967035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:44.967109 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-21 18:13:44.967102619 +0000 UTC m=+3340.710569690 E0421 18:13:44.994576 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0421 18:13:45.436451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:45.479237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-tsj7r" condition "Approved" to 2026-04-21 18:13:45.479226051 +0000 UTC m=+3341.222693122 I0421 18:13:45.509348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-tsj7r" condition "Ready" to 2026-04-21 18:13:45.509334284 +0000 UTC m=+3341.252801365 I0421 18:13:45.544080 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:45.544065363 +0000 UTC m=+3341.287532444 I0421 18:13:45.569756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:45.570006 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:45.569998801 +0000 UTC m=+3341.313465872 I0421 18:13:45.610020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:45.739873 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-21 18:13:45.739857166 +0000 UTC m=+3341.483324237 I0421 18:13:45.800675 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-21 18:13:45.799358246 +0000 UTC m=+3341.542825317 I0421 18:13:45.801501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:45.801543 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-21 18:13:45.801534235 +0000 UTC m=+3341.545001306 I0421 18:13:45.866936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:45.867087 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-21 18:13:45.867065962 +0000 UTC m=+3341.610533023 I0421 18:13:46.049053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:46.088654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-cfcm4" condition "Approved" to 2026-04-21 18:13:46.08864256 +0000 UTC m=+3341.832109631 I0421 18:13:46.111418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-cfcm4" condition "Ready" to 2026-04-21 18:13:46.111407166 +0000 UTC m=+3341.854874247 I0421 18:13:46.149007 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:46.14899716 +0000 UTC m=+3341.892464231 I0421 18:13:46.181513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:46.181771 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:46.181765383 +0000 UTC m=+3341.925232444 I0421 18:13:46.201675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:46.235680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:46.346792 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-21 18:13:46.346772338 +0000 UTC m=+3342.090239449 I0421 18:13:46.370521 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-21 18:13:46.370512407 +0000 UTC m=+3342.113979478 I0421 18:13:46.370636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:46.370686 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-21 18:13:46.37067656 +0000 UTC m=+3342.114143671 I0421 18:13:46.392520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:46.392624 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-21 18:13:46.392617088 +0000 UTC m=+3342.136084159 I0421 18:13:46.664255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:46.703264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-q2pnv" condition "Approved" to 2026-04-21 18:13:46.703251287 +0000 UTC m=+3342.446718368 I0421 18:13:46.728558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-q2pnv" condition "Ready" to 2026-04-21 18:13:46.728545851 +0000 UTC m=+3342.472012932 I0421 18:13:46.768892 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:46.768877087 +0000 UTC m=+3342.512344168 I0421 18:13:46.791845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:46.866535 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-21 18:13:46.866519623 +0000 UTC m=+3342.609986704 I0421 18:13:46.897806 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-21 18:13:46.897793282 +0000 UTC m=+3342.641260353 I0421 18:13:46.897890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:46.897929 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-21 18:13:46.897919125 +0000 UTC m=+3342.641386196 I0421 18:13:47.057264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:47.057333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:47.057354 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-21 18:13:47.057348093 +0000 UTC m=+3342.800815164 I0421 18:13:47.424995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-nvpps" condition "Approved" to 2026-04-21 18:13:47.424985525 +0000 UTC m=+3343.168452586 I0421 18:13:47.471064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-nvpps" condition "Ready" to 2026-04-21 18:13:47.471052201 +0000 UTC m=+3343.214519282 I0421 18:13:48.068483 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:48.068465848 +0000 UTC m=+3343.811932949 I0421 18:13:48.116593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:48.117105 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:48.117097661 +0000 UTC m=+3343.860564732 I0421 18:13:48.315203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:35.034360 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-21 18:17:35.034309214 +0000 UTC m=+3570.777776295 I0421 18:17:35.034897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:17:35.034918 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-21 18:17:35.034914068 +0000 UTC m=+3570.778381139 I0421 18:17:35.052493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:35.052624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:17:35.052656 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-21 18:17:35.052647438 +0000 UTC m=+3570.796114519 I0421 18:17:35.283560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-x8jvh" condition "Approved" to 2026-04-21 18:17:35.283543164 +0000 UTC m=+3571.027010265 I0421 18:17:35.303997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-x8jvh" condition "Ready" to 2026-04-21 18:17:35.303986385 +0000 UTC m=+3571.047453466 I0421 18:17:35.332214 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:17:35.33219851 +0000 UTC m=+3571.075665591 I0421 18:17:35.363359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:35.363840 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:17:35.363832052 +0000 UTC m=+3571.107299143 I0421 18:17:35.391013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:35.391368 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:17:35.391358392 +0000 UTC m=+3571.134825473 I0421 18:17:37.585418 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-21 18:17:37.58539992 +0000 UTC m=+3573.328867021 I0421 18:17:37.585532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:17:37.585577 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-21 18:17:37.585567623 +0000 UTC m=+3573.329034704 I0421 18:17:37.601426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:17:37.601545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:17:37.601577 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-21 18:17:37.601571424 +0000 UTC m=+3573.345038495 I0421 18:17:37.970980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-csdl9" condition "Approved" to 2026-04-21 18:17:37.970968529 +0000 UTC m=+3573.714435600 I0421 18:17:37.988868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-csdl9" condition "Ready" to 2026-04-21 18:17:37.988854451 +0000 UTC m=+3573.732321542 I0421 18:17:38.072670 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:17:38.072657208 +0000 UTC m=+3573.816124279 I0421 18:17:38.134784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"