I0506 01:18:03.702039 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0506 01:18:03.702227 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0506 01:18:03.702427 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0506 01:18:03.707943 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0506 01:18:03.708411 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0506 01:18:03.708656 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0506 01:18:03.708677 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0506 01:18:03.711373 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0506 01:18:03.726925 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0506 01:18:03.733883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0506 01:18:03.737273 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0506 01:18:03.737529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0506 01:18:03.740953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0506 01:18:03.742705 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0506 01:18:03.742824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0506 01:18:03.744995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0506 01:18:03.746710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0506 01:18:03.748409 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0506 01:18:03.748429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0506 01:18:03.748507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0506 01:18:03.750508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0506 01:18:03.754698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0506 01:18:03.760104 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0506 01:18:03.763768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0506 01:18:03.763797 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0506 01:18:03.765972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0506 01:18:03.767713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0506 01:18:03.769406 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0506 01:18:03.769667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0506 01:18:03.771383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0506 01:18:03.773586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0506 01:18:03.776402 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0506 01:18:03.781785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0506 01:18:03.785546 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.785893 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.786809 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.829505 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.835434 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.849014 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.861443 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.883398 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.888049 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:03.899212 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0506 01:18:18.365563 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-06 01:18:18.365536754 +0000 UTC m=+14.700823710 I0506 01:18:19.138426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:18:19.138504 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-06 01:18:19.138493674 +0000 UTC m=+15.473780620 I0506 01:18:19.138835 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-06 01:18:19.138767029 +0000 UTC m=+15.474053975 E0506 01:18:19.264446 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 01:18:19.264562 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-06 01:18:19.26455118 +0000 UTC m=+15.599838136 E0506 01:18:19.264599 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 01:18:19.268602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:18:19.268688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:18:19.268715 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-06 01:18:19.268708639 +0000 UTC m=+15.603995585 E0506 01:18:19.341618 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0506 01:18:19.341805 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 01:18:19.341950 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 01:18:19.342041 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0506 01:18:19.789709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:18:19.789921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xv7ll" condition "Approved" to 2026-05-06 01:18:19.789911774 +0000 UTC m=+16.125198720 I0506 01:18:19.936322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xv7ll" condition "Ready" to 2026-05-06 01:18:19.936312205 +0000 UTC m=+16.271599111 I0506 01:18:20.299518 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:18:20.299494199 +0000 UTC m=+16.634781155 I0506 01:18:20.427408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:18:20.474808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:18:24.343134 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:18:24.343112115 +0000 UTC m=+20.678399061 I0506 01:18:47.138783 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-06 01:18:47.138765914 +0000 UTC m=+43.474052830 I0506 01:18:47.138824 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:18:47.139058 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-06 01:18:47.13904416 +0000 UTC m=+43.474331106 I0506 01:18:47.152820 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-06 01:18:47.152798099 +0000 UTC m=+43.488085055 I0506 01:18:47.167372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:18:47.167563 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-06 01:18:47.167552109 +0000 UTC m=+43.502839045 I0506 01:18:47.544417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:18:47.579314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fkwvl" condition "Approved" to 2026-05-06 01:18:47.579299832 +0000 UTC m=+43.914586768 I0506 01:18:47.620708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fkwvl" condition "Ready" to 2026-05-06 01:18:47.620691576 +0000 UTC m=+43.955978502 I0506 01:18:47.652857 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:18:47.652840064 +0000 UTC m=+43.988127000 I0506 01:18:47.675679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:18:47.676393 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:18:47.67638292 +0000 UTC m=+44.011669876 I0506 01:18:47.688448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:18:47.700986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:23:34.716333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-147.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:23:34.716385 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Issuing" to 2026-05-06 01:23:34.716374345 +0000 UTC m=+331.051661301 I0506 01:23:34.716923 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Ready" to 2026-05-06 01:23:34.716910756 +0000 UTC m=+331.052197712 I0506 01:23:34.736086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-147.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-147.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:23:34.736172 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Ready" to 2026-05-06 01:23:34.736163127 +0000 UTC m=+331.071450053 I0506 01:23:34.910541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-147.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-147.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:23:34.938587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-147.nip.io-tls-hrlll" condition "Approved" to 2026-05-06 01:23:34.938573147 +0000 UTC m=+331.273860073 I0506 01:23:34.968043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-147.nip.io-tls-hrlll" condition "Ready" to 2026-05-06 01:23:34.967991558 +0000 UTC m=+331.303278504 I0506 01:23:35.000244 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:23:35.000227302 +0000 UTC m=+331.335514288 I0506 01:23:35.023600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-147.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-147.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:23:35.024047 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:23:35.024038138 +0000 UTC m=+331.359325064 I0506 01:23:35.029732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-147.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-147.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:23:35.040791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-147.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-147.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:24:43.296539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:24:43.296622 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-06 01:24:43.296609221 +0000 UTC m=+399.631896177 I0506 01:24:43.296664 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-06 01:24:43.296635422 +0000 UTC m=+399.631922378 E0506 01:24:43.313222 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 01:24:43.313265 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-06 01:24:43.313256034 +0000 UTC m=+399.648542960 E0506 01:24:43.313317 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0506 01:24:43.316260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:24:43.316413 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-06 01:24:43.316402302 +0000 UTC m=+399.651689228 E0506 01:24:43.323784 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0506 01:24:43.324075 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 01:24:43.324139 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0506 01:24:43.324204 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0506 01:24:43.331361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:24:43.331464 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-06 01:24:43.331453404 +0000 UTC m=+399.666740350 I0506 01:24:43.338155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fsx9s" condition "Approved" to 2026-05-06 01:24:43.338142898 +0000 UTC m=+399.673429814 I0506 01:24:43.340497 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-06 01:24:43.340489483 +0000 UTC m=+399.675776419 I0506 01:24:43.349420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:24:43.351577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fsx9s" condition "Ready" to 2026-05-06 01:24:43.35156141 +0000 UTC m=+399.686848366 I0506 01:24:43.378329 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:24:43.378311991 +0000 UTC m=+399.713598917 I0506 01:24:43.397906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:24:48.325311 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:24:48.325294042 +0000 UTC m=+404.660580998 I0506 01:25:29.716260 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:25:29.716301 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-06 01:25:29.716293481 +0000 UTC m=+446.051580407 I0506 01:25:29.716457 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-06 01:25:29.716436494 +0000 UTC m=+446.051723410 I0506 01:25:29.731349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:25:29.731413 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-06 01:25:29.731403605 +0000 UTC m=+446.066690521 I0506 01:25:29.732067 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-06 01:25:29.732062547 +0000 UTC m=+446.067349453 I0506 01:25:29.732350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:25:29.732367 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-06 01:25:29.732364013 +0000 UTC m=+446.067650929 I0506 01:25:29.732546 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-06 01:25:29.732542736 +0000 UTC m=+446.067829652 I0506 01:25:29.749678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:29.749988 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-06 01:25:29.749976002 +0000 UTC m=+446.085262928 I0506 01:25:29.763203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:29.763506 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-06 01:25:29.763494435 +0000 UTC m=+446.098781361 I0506 01:25:29.765586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:29.765670 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:25:29.765720 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-06 01:25:29.765710507 +0000 UTC m=+446.100997433 I0506 01:25:29.851034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:29.903210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-p457d" condition "Approved" to 2026-05-06 01:25:29.903184291 +0000 UTC m=+446.238471247 I0506 01:25:29.925458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-p457d" condition "Ready" to 2026-05-06 01:25:29.925450477 +0000 UTC m=+446.260737403 I0506 01:25:29.960601 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:25:29.960593835 +0000 UTC m=+446.295880761 I0506 01:25:29.986502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:30.046854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0506 01:25:30.053322 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-m2jdm\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0506 01:25:30.167171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:30.178157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dfclc" condition "Approved" to 2026-05-06 01:25:30.178141348 +0000 UTC m=+446.513428274 I0506 01:25:30.202801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dfclc" condition "Ready" to 2026-05-06 01:25:30.202783969 +0000 UTC m=+446.538070895 I0506 01:25:30.260949 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:25:30.259926999 +0000 UTC m=+446.595213945 I0506 01:25:30.349395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:30.349938 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:25:30.349930284 +0000 UTC m=+446.685217200 I0506 01:25:30.699787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:30.808940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bkb7j" condition "Approved" to 2026-05-06 01:25:30.808924707 +0000 UTC m=+447.144211633 I0506 01:25:31.264967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-bkb7j" condition "Ready" to 2026-05-06 01:25:31.264948953 +0000 UTC m=+447.600235909 E0506 01:25:31.294473 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-bt4xg\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0506 01:25:31.498458 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-bkb7j" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-5np24" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0506 01:25:31.656110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v5rmx" condition "Approved" to 2026-05-06 01:25:31.656085047 +0000 UTC m=+447.991371993 I0506 01:25:31.817179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v5rmx" condition "Ready" to 2026-05-06 01:25:31.817164962 +0000 UTC m=+448.152451888 I0506 01:25:32.202902 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:25:32.202882642 +0000 UTC m=+448.538169588 I0506 01:25:32.299882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:32.300519 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:25:32.30051009 +0000 UTC m=+448.635797016 I0506 01:25:32.550710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:32.602001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:38.396702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:25:38.396753 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" condition "Issuing" to 2026-05-06 01:25:38.396741121 +0000 UTC m=+454.732028037 I0506 01:25:38.397306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" condition "Ready" to 2026-05-06 01:25:38.397299902 +0000 UTC m=+454.732586828 I0506 01:25:38.418185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k8sld-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:38.418311 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" condition "Ready" to 2026-05-06 01:25:38.418300474 +0000 UTC m=+454.753587390 I0506 01:25:38.550040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k8sld-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:38.586947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-k8sld-lqd27" condition "Approved" to 2026-05-06 01:25:38.586926864 +0000 UTC m=+454.922213820 I0506 01:25:38.608372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-k8sld-lqd27" condition "Ready" to 2026-05-06 01:25:38.608357294 +0000 UTC m=+454.943644220 I0506 01:25:38.779021 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:25:38.779004123 +0000 UTC m=+455.114291059 I0506 01:25:38.800020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k8sld-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:38.800412 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:25:38.800403632 +0000 UTC m=+455.135690548 I0506 01:25:38.822400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k8sld-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:25:38.823531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-k8sld-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-k8sld-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:26:04.585254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:26:04.585300 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-06 01:26:04.585289742 +0000 UTC m=+480.920576658 I0506 01:26:04.586952 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-06 01:26:04.586923083 +0000 UTC m=+480.922210099 I0506 01:26:04.604958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:26:04.605102 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-06 01:26:04.605088232 +0000 UTC m=+480.940375178 I0506 01:26:06.234250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:26:06.270107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4b4wq" condition "Approved" to 2026-05-06 01:26:06.270073701 +0000 UTC m=+482.605360627 I0506 01:26:06.293838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4b4wq" condition "Ready" to 2026-05-06 01:26:06.293794044 +0000 UTC m=+482.629080970 I0506 01:26:06.335288 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:26:06.335269508 +0000 UTC m=+482.670556434 I0506 01:26:06.357428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:26:06.357879 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:26:06.357868601 +0000 UTC m=+482.693155537 I0506 01:26:06.367349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:26:06.380197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:29:19.076929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:29:19.077007 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-06 01:29:19.076997235 +0000 UTC m=+675.412284181 I0506 01:29:19.077074 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-06 01:29:19.077050336 +0000 UTC m=+675.412337282 I0506 01:29:19.096495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:29:19.096611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:29:19.096659 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-06 01:29:19.096645151 +0000 UTC m=+675.431932117 I0506 01:29:19.356331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ccp8k" condition "Approved" to 2026-05-06 01:29:19.356305925 +0000 UTC m=+675.691592851 I0506 01:29:19.372547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ccp8k" condition "Ready" to 2026-05-06 01:29:19.372531848 +0000 UTC m=+675.707818774 I0506 01:29:19.405393 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:29:19.405377528 +0000 UTC m=+675.740664454 I0506 01:29:19.433179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:29:19.433509 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:29:19.433502433 +0000 UTC m=+675.768789359 I0506 01:29:19.439302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:29:19.453080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:29:19.453321 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:29:19.453311602 +0000 UTC m=+675.788598528 I0506 01:31:45.462315 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:31:45.462406 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-06 01:31:45.462384417 +0000 UTC m=+821.797671363 I0506 01:31:45.462361 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-06 01:31:45.462350447 +0000 UTC m=+821.797637403 I0506 01:31:45.482790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:31:45.482935 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-06 01:31:45.48292277 +0000 UTC m=+821.818209696 I0506 01:31:45.562247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:31:45.610262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-sxstf" condition "Approved" to 2026-05-06 01:31:45.610248661 +0000 UTC m=+821.945535577 I0506 01:31:45.664122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-sxstf" condition "Ready" to 2026-05-06 01:31:45.664104283 +0000 UTC m=+821.999391209 I0506 01:31:45.694310 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:31:45.694295186 +0000 UTC m=+822.029582112 I0506 01:31:45.729247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:32:45.637002 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-06 01:32:45.636985606 +0000 UTC m=+881.972272532 I0506 01:32:45.637388 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:32:45.637465 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-06 01:32:45.637419224 +0000 UTC m=+881.972706140 I0506 01:32:45.654147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:32:45.654232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:32:45.654257 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-06 01:32:45.654250038 +0000 UTC m=+881.989536964 I0506 01:32:45.827681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:32:45.838882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-psvsg" condition "Approved" to 2026-05-06 01:32:45.838865314 +0000 UTC m=+882.174152240 I0506 01:32:45.855934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-psvsg" condition "Ready" to 2026-05-06 01:32:45.855922011 +0000 UTC m=+882.191208937 I0506 01:32:45.884958 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:32:45.884931071 +0000 UTC m=+882.220217987 I0506 01:32:45.913609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:35:54.965969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:35:54.966066 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-06 01:35:54.966054186 +0000 UTC m=+1071.301341142 I0506 01:35:54.966038 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-06 01:35:54.966012876 +0000 UTC m=+1071.301299822 I0506 01:35:54.984576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:35:54.984655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:35:54.984678 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-06 01:35:54.984668876 +0000 UTC m=+1071.319955802 I0506 01:35:55.156789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2l2mx" condition "Approved" to 2026-05-06 01:35:55.156765236 +0000 UTC m=+1071.492052162 I0506 01:35:55.177973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2l2mx" condition "Ready" to 2026-05-06 01:35:55.177953744 +0000 UTC m=+1071.513240700 I0506 01:35:55.213405 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:35:55.213391169 +0000 UTC m=+1071.548678095 I0506 01:35:55.232235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:35:55.233395 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:35:55.233381634 +0000 UTC m=+1071.568668590 I0506 01:35:55.258307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:35:55.277003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:42:01.494456 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-06 01:42:01.494435636 +0000 UTC m=+1437.829722582 I0506 01:42:01.494888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:42:01.495007 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-06 01:42:01.494992437 +0000 UTC m=+1437.830279403 I0506 01:42:01.515749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:42:01.515850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:42:01.515875 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-06 01:42:01.515866635 +0000 UTC m=+1437.851153561 I0506 01:42:01.675194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-v2brg" condition "Approved" to 2026-05-06 01:42:01.675178383 +0000 UTC m=+1438.010465299 I0506 01:42:01.693694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-v2brg" condition "Ready" to 2026-05-06 01:42:01.693680498 +0000 UTC m=+1438.028967414 I0506 01:42:01.728870 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:42:01.728851074 +0000 UTC m=+1438.064137980 I0506 01:42:01.751855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:43:26.637673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:43:26.637719 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-06 01:43:26.637709334 +0000 UTC m=+1522.972996260 I0506 01:43:26.637952 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-06 01:43:26.637935388 +0000 UTC m=+1522.973222314 I0506 01:43:26.653928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:43:26.654017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:43:26.654039 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-06 01:43:26.654028928 +0000 UTC m=+1522.989315854 I0506 01:43:26.834812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:43:26.846492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cbmpc" condition "Approved" to 2026-05-06 01:43:26.846476074 +0000 UTC m=+1523.181763000 I0506 01:43:26.872557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cbmpc" condition "Ready" to 2026-05-06 01:43:26.87254292 +0000 UTC m=+1523.207829836 I0506 01:43:26.901601 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:43:26.90156137 +0000 UTC m=+1523.236848296 I0506 01:43:26.926678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:43:26.977873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:44:24.983764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:44:24.983818 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-06 01:44:24.983806673 +0000 UTC m=+1581.319093619 I0506 01:44:24.984298 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-06 01:44:24.984290542 +0000 UTC m=+1581.319577488 I0506 01:44:25.002137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:44:25.002232 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-06 01:44:25.002222296 +0000 UTC m=+1581.337509272 I0506 01:44:25.028429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:44:25.057581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xj9v9" condition "Approved" to 2026-05-06 01:44:25.057556827 +0000 UTC m=+1581.392843743 I0506 01:44:25.082687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xj9v9" condition "Ready" to 2026-05-06 01:44:25.082667594 +0000 UTC m=+1581.417954520 I0506 01:44:25.110826 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:44:25.11081195 +0000 UTC m=+1581.446098876 I0506 01:44:25.134503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:44:25.662072 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-06 01:44:25.66205469 +0000 UTC m=+1581.997341616 I0506 01:44:25.662400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:44:25.662462 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-06 01:44:25.662448198 +0000 UTC m=+1581.997735124 I0506 01:44:25.678881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:44:25.678955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:44:25.678970 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-06 01:44:25.678963935 +0000 UTC m=+1582.014250851 I0506 01:44:25.747889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:44:25.761003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-55czx" condition "Approved" to 2026-05-06 01:44:25.760984544 +0000 UTC m=+1582.096271470 I0506 01:44:25.777889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-55czx" condition "Ready" to 2026-05-06 01:44:25.777881259 +0000 UTC m=+1582.113168185 I0506 01:44:25.810141 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:44:25.81011482 +0000 UTC m=+1582.145401766 I0506 01:44:25.830432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:44:26.437515 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-06 01:44:26.43750123 +0000 UTC m=+1582.772788156 I0506 01:44:27.118115 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-06 01:44:27.118101601 +0000 UTC m=+1583.453388517 I0506 01:45:11.900091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:45:11.900130 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-06 01:45:11.900119133 +0000 UTC m=+1628.235406049 I0506 01:45:11.900636 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-06 01:45:11.900631903 +0000 UTC m=+1628.235918819 I0506 01:45:11.942844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:45:11.943539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:45:11.943576 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-06 01:45:11.943568089 +0000 UTC m=+1628.278855015 I0506 01:45:12.761078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-qfvrp" condition "Approved" to 2026-05-06 01:45:12.761057686 +0000 UTC m=+1629.096344642 I0506 01:45:12.786484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-qfvrp" condition "Ready" to 2026-05-06 01:45:12.786464358 +0000 UTC m=+1629.121751314 I0506 01:45:12.825119 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:45:12.825095005 +0000 UTC m=+1629.160381931 I0506 01:45:12.856695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:45:12.857410 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:45:12.857400635 +0000 UTC m=+1629.192687561 I0506 01:45:12.878547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:45:12.880902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:45:12.882827 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:45:12.882817277 +0000 UTC m=+1629.218104193 I0506 01:47:41.548138 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-06 01:47:41.548118326 +0000 UTC m=+1777.883405282 I0506 01:47:41.548139 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:47:41.548370 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-06 01:47:41.54832962 +0000 UTC m=+1777.883616576 I0506 01:47:41.563144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:47:41.563307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:47:41.563359 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-06 01:47:41.563346908 +0000 UTC m=+1777.898633864 I0506 01:47:41.875834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:47:41.884091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-zsgq4" condition "Approved" to 2026-05-06 01:47:41.884074233 +0000 UTC m=+1778.219361179 I0506 01:47:41.904161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-zsgq4" condition "Ready" to 2026-05-06 01:47:41.904148646 +0000 UTC m=+1778.239435582 I0506 01:47:41.932696 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:47:41.932677765 +0000 UTC m=+1778.267964721 I0506 01:47:41.961412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:47:41.961914 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:47:41.961904307 +0000 UTC m=+1778.297191233 I0506 01:47:41.983400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:47:41.983722 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:47:41.983714193 +0000 UTC m=+1778.319001109 I0506 01:47:41.984157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:47:42.993185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:47:42.993236 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-06 01:47:42.993222054 +0000 UTC m=+1779.328509010 I0506 01:47:42.993262 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-06 01:47:42.993239195 +0000 UTC m=+1779.328526191 I0506 01:47:43.010891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:47:43.011251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:47:43.011299 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-06 01:47:43.01128818 +0000 UTC m=+1779.346575126 I0506 01:47:43.408740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:47:43.419571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-wqkck" condition "Approved" to 2026-05-06 01:47:43.419560279 +0000 UTC m=+1779.754847205 I0506 01:47:43.438618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-wqkck" condition "Ready" to 2026-05-06 01:47:43.438600693 +0000 UTC m=+1779.773887629 I0506 01:47:43.463324 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:47:43.463311791 +0000 UTC m=+1779.798598707 I0506 01:47:43.483630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:50:43.436312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:50:43.436420 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-06 01:50:43.436411306 +0000 UTC m=+1959.771698252 I0506 01:50:43.436304 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-06 01:50:43.436279423 +0000 UTC m=+1959.771566369 I0506 01:50:43.453206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:50:43.453294 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:50:43.453317 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-06 01:50:43.453311 +0000 UTC m=+1959.788597936 I0506 01:50:43.740652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:50:43.757666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-5hpqd" condition "Approved" to 2026-05-06 01:50:43.757624039 +0000 UTC m=+1960.092911015 I0506 01:50:43.778373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-5hpqd" condition "Ready" to 2026-05-06 01:50:43.778364283 +0000 UTC m=+1960.113651209 I0506 01:50:43.811140 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:50:43.8111304 +0000 UTC m=+1960.146417326 I0506 01:50:43.833809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.042527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-km5sw-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:51:50.042566 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-km5sw-vnc" condition "Issuing" to 2026-05-06 01:51:50.042557514 +0000 UTC m=+2026.377844440 I0506 01:51:50.043161 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-km5sw-vnc" condition "Ready" to 2026-05-06 01:51:50.043153894 +0000 UTC m=+2026.378440830 I0506 01:51:50.043473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-km5sw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:51:50.043515 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-km5sw-api" condition "Issuing" to 2026-05-06 01:51:50.04350549 +0000 UTC m=+2026.378792406 I0506 01:51:50.043523 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-km5sw-api" condition "Ready" to 2026-05-06 01:51:50.043519382 +0000 UTC m=+2026.378806298 I0506 01:51:50.066254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-km5sw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-api\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.066559 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-km5sw-api" condition "Ready" to 2026-05-06 01:51:50.066549948 +0000 UTC m=+2026.401836864 I0506 01:51:50.074984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-km5sw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.075092 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-km5sw-vnc" condition "Ready" to 2026-05-06 01:51:50.075082716 +0000 UTC m=+2026.410369632 I0506 01:51:50.301779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-km5sw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.305564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-km5sw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-api\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.332134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-km5sw-vnc-dw2b9" condition "Approved" to 2026-05-06 01:51:50.33211442 +0000 UTC m=+2026.667401366 I0506 01:51:50.338699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-km5sw-api-7pnww" condition "Approved" to 2026-05-06 01:51:50.338680911 +0000 UTC m=+2026.673967847 I0506 01:51:50.354176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-km5sw-vnc-dw2b9" condition "Ready" to 2026-05-06 01:51:50.354160238 +0000 UTC m=+2026.689447164 I0506 01:51:50.355499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-km5sw-api-7pnww" condition "Ready" to 2026-05-06 01:51:50.355483072 +0000 UTC m=+2026.690769998 I0506 01:51:50.387776 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-km5sw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:51:50.387758621 +0000 UTC m=+2026.723045547 I0506 01:51:50.396644 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-km5sw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:51:50.396622936 +0000 UTC m=+2026.731909892 I0506 01:51:50.404860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-km5sw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.405224 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-km5sw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:51:50.405215485 +0000 UTC m=+2026.740502401 I0506 01:51:50.416291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-km5sw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-api\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.417572 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-km5sw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:51:50.417564464 +0000 UTC m=+2026.752851380 I0506 01:51:50.425401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-km5sw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.429183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-km5sw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.442542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-km5sw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-api\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:51:50.443107 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-km5sw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:51:50.443095587 +0000 UTC m=+2026.778382543 I0506 01:51:50.446269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-km5sw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-km5sw-api\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:53:16.297795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:53:16.297837 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-06 01:53:16.297827142 +0000 UTC m=+2112.633114068 I0506 01:53:16.297874 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-06 01:53:16.297848822 +0000 UTC m=+2112.633135778 I0506 01:53:16.318820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:53:16.318916 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-06 01:53:16.318906503 +0000 UTC m=+2112.654193429 I0506 01:53:16.477766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:53:16.506226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-8t8kv" condition "Approved" to 2026-05-06 01:53:16.506209654 +0000 UTC m=+2112.841496610 I0506 01:53:16.529177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-8t8kv" condition "Ready" to 2026-05-06 01:53:16.529164269 +0000 UTC m=+2112.864451185 I0506 01:53:16.554227 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:53:16.554210273 +0000 UTC m=+2112.889497199 I0506 01:53:16.578680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:53:16.579213 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:53:16.579202287 +0000 UTC m=+2112.914489213 I0506 01:53:16.613891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:56:56.627486 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-06 01:56:56.627467348 +0000 UTC m=+2332.962754294 I0506 01:56:56.627815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:56:56.627993 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-06 01:56:56.627980438 +0000 UTC m=+2332.963267394 I0506 01:56:56.648289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:56:56.648422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:56:56.648456 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-06 01:56:56.648443186 +0000 UTC m=+2332.983730132 I0506 01:56:56.781816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:56:56.784184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-mnq76" condition "Approved" to 2026-05-06 01:56:56.784170408 +0000 UTC m=+2333.119457334 I0506 01:56:56.804943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-mnq76" condition "Ready" to 2026-05-06 01:56:56.804926523 +0000 UTC m=+2333.140213449 I0506 01:56:56.838507 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:56:56.838494044 +0000 UTC m=+2333.173780970 I0506 01:56:56.860732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:56:56.861181 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:56:56.861170374 +0000 UTC m=+2333.196457320 I0506 01:56:56.891536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:56:58.240345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:56:58.240395 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-06 01:56:58.240384843 +0000 UTC m=+2334.575671769 I0506 01:56:58.240480 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-06 01:56:58.240457805 +0000 UTC m=+2334.575744731 I0506 01:56:58.267063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:56:58.267208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:56:58.267247 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-06 01:56:58.26723911 +0000 UTC m=+2334.602526036 I0506 01:56:58.482323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:56:58.498685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-dgw5j" condition "Approved" to 2026-05-06 01:56:58.498670795 +0000 UTC m=+2334.833957711 I0506 01:56:58.517820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-dgw5j" condition "Ready" to 2026-05-06 01:56:58.517804758 +0000 UTC m=+2334.853091684 I0506 01:56:58.557262 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:56:58.557244489 +0000 UTC m=+2334.892531415 I0506 01:56:58.582275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:56:58.582891 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:56:58.582876653 +0000 UTC m=+2334.918163609 I0506 01:56:58.610177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:14.938693 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-06 01:59:14.938675361 +0000 UTC m=+2471.273962287 I0506 01:59:14.938916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:59:14.939005 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-06 01:59:14.938985107 +0000 UTC m=+2471.274272053 E0506 01:59:14.957785 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0506 01:59:14.957905 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-06 01:59:14.957887526 +0000 UTC m=+2471.293174482 I0506 01:59:14.957948 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0506 01:59:14.960969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:14.961091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:59:14.961114 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-06 01:59:14.961105536 +0000 UTC m=+2471.296392492 E0506 01:59:14.967466 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0506 01:59:14.967539 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0506 01:59:14.967561 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0506 01:59:14.967593 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0506 01:59:15.011323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-t8zgv" condition "Approved" to 2026-05-06 01:59:15.011306716 +0000 UTC m=+2471.346593652 I0506 01:59:15.029699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-t8zgv" condition "Ready" to 2026-05-06 01:59:15.029686816 +0000 UTC m=+2471.364973742 I0506 01:59:15.066646 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:59:15.066628499 +0000 UTC m=+2471.401915425 I0506 01:59:15.089080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:15.153226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:15.627887 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-06 01:59:15.627869848 +0000 UTC m=+2471.963156784 I0506 01:59:15.628533 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:59:15.628560 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-06 01:59:15.62855585 +0000 UTC m=+2471.963842776 E0506 01:59:15.643992 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0506 01:59:15.644048 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-06 01:59:15.644042207 +0000 UTC m=+2471.979329123 I0506 01:59:15.644065 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0506 01:59:15.649611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:15.649779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:59:15.649824 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-06 01:59:15.649812435 +0000 UTC m=+2471.985099391 E0506 01:59:15.658437 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0506 01:59:15.658512 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0506 01:59:15.658538 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0506 01:59:15.658565 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0506 01:59:15.692363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-llh2h" condition "Approved" to 2026-05-06 01:59:15.692343382 +0000 UTC m=+2472.027630318 I0506 01:59:15.706508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-llh2h" condition "Ready" to 2026-05-06 01:59:15.706493983 +0000 UTC m=+2472.041780909 I0506 01:59:15.730521 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:59:15.730505648 +0000 UTC m=+2472.065792574 I0506 01:59:15.754502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:15.800712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:16.393000 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-06 01:59:16.39297663 +0000 UTC m=+2472.728263576 I0506 01:59:16.393882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 01:59:16.393923 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-06 01:59:16.393913978 +0000 UTC m=+2472.729200924 I0506 01:59:16.410220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:16.410275 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-06 01:59:16.410269771 +0000 UTC m=+2472.745556697 I0506 01:59:16.433860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:16.433921 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-06 01:59:16.433914459 +0000 UTC m=+2472.769201385 I0506 01:59:16.440669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-blqcv" condition "Approved" to 2026-05-06 01:59:16.440646222 +0000 UTC m=+2472.775933178 I0506 01:59:16.453451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-blqcv" condition "Ready" to 2026-05-06 01:59:16.45342293 +0000 UTC m=+2472.788709846 I0506 01:59:19.967909 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:59:19.967891193 +0000 UTC m=+2476.303178109 I0506 01:59:19.988150 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-blqcv" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:59:19.988130698 +0000 UTC m=+2476.323417624 I0506 01:59:20.009556 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:59:20.009538664 +0000 UTC m=+2476.344825570 I0506 01:59:20.034244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:20.034606 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:59:20.034597098 +0000 UTC m=+2476.369884014 I0506 01:59:20.060303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 01:59:20.660768 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 01:59:20.660754468 +0000 UTC m=+2476.996041394 I0506 02:01:32.079579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:01:32.079617 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-06 02:01:32.079609749 +0000 UTC m=+2608.414896665 I0506 02:01:32.080148 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-06 02:01:32.08012758 +0000 UTC m=+2608.415414536 I0506 02:01:32.096243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:01:32.096319 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-06 02:01:32.096311869 +0000 UTC m=+2608.431598795 I0506 02:01:32.324091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:01:32.357314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2nggn" condition "Approved" to 2026-05-06 02:01:32.35729732 +0000 UTC m=+2608.692584246 I0506 02:01:32.383652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2nggn" condition "Ready" to 2026-05-06 02:01:32.383640407 +0000 UTC m=+2608.718927333 I0506 02:01:32.423219 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:01:32.42320709 +0000 UTC m=+2608.758494016 I0506 02:01:32.445621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:01:32.446097 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:01:32.446086373 +0000 UTC m=+2608.781373299 I0506 02:01:32.453173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:01:32.469414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:01:32.469716 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:01:32.469708161 +0000 UTC m=+2608.804995087 I0506 02:02:19.340304 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-06 02:02:19.340282949 +0000 UTC m=+2655.675569875 I0506 02:02:19.361067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:02:19.361122 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-06 02:02:19.361096963 +0000 UTC m=+2655.696383909 I0506 02:02:19.361212 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-06 02:02:19.361201016 +0000 UTC m=+2655.696487962 I0506 02:02:19.382180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:19.382300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:02:19.382336 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-06 02:02:19.382325198 +0000 UTC m=+2655.717612154 E0506 02:02:19.400517 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0506 02:02:19.457834 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-06 02:02:19.457811928 +0000 UTC m=+2655.793098874 I0506 02:02:19.482886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:02:19.482948 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-06 02:02:19.482927972 +0000 UTC m=+2655.818214918 I0506 02:02:19.482938 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-06 02:02:19.482923952 +0000 UTC m=+2655.818210898 I0506 02:02:19.505385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:19.505581 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-06 02:02:19.505565093 +0000 UTC m=+2655.840852049 E0506 02:02:19.822274 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0506 02:02:19.847856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:19.885053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-hljjn" condition "Approved" to 2026-05-06 02:02:19.885043066 +0000 UTC m=+2656.220329982 I0506 02:02:19.909339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-hljjn" condition "Ready" to 2026-05-06 02:02:19.909325546 +0000 UTC m=+2656.244612472 I0506 02:02:19.946239 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:19.94621804 +0000 UTC m=+2656.281504956 I0506 02:02:19.977902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:19.988232 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:19.988223329 +0000 UTC m=+2656.323510245 I0506 02:02:20.028976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:20.029257 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:20.02925027 +0000 UTC m=+2656.364537186 I0506 02:02:20.346550 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-06 02:02:20.34652621 +0000 UTC m=+2656.681813146 I0506 02:02:20.367065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:02:20.367107 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-06 02:02:20.367089192 +0000 UTC m=+2656.702376118 I0506 02:02:20.367437 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-06 02:02:20.367127702 +0000 UTC m=+2656.702414618 I0506 02:02:20.398095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:20.398422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:02:20.398574 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-06 02:02:20.398542174 +0000 UTC m=+2656.733829150 I0506 02:02:20.785558 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-06 02:02:20.785541738 +0000 UTC m=+2657.120828654 I0506 02:02:20.803335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:02:20.803406 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-06 02:02:20.803397199 +0000 UTC m=+2657.138684125 I0506 02:02:20.803350 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-06 02:02:20.803331828 +0000 UTC m=+2657.138618784 I0506 02:02:20.827283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:20.827346 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-06 02:02:20.827338673 +0000 UTC m=+2657.162625589 I0506 02:02:20.884999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:21.012592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-x2xq5" condition "Approved" to 2026-05-06 02:02:21.012581926 +0000 UTC m=+2657.347868842 I0506 02:02:21.043151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-x2xq5" condition "Ready" to 2026-05-06 02:02:21.043137853 +0000 UTC m=+2657.378424769 I0506 02:02:21.093953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:21.110809 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:21.110796647 +0000 UTC m=+2657.446083573 I0506 02:02:21.139064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:21.139312 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:21.139305806 +0000 UTC m=+2657.474592722 I0506 02:02:21.140002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-dqfs7" condition "Approved" to 2026-05-06 02:02:21.139995338 +0000 UTC m=+2657.475282254 I0506 02:02:21.178823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:21.183215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-dqfs7" condition "Ready" to 2026-05-06 02:02:21.183198549 +0000 UTC m=+2657.518485465 I0506 02:02:21.185943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:21.228629 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:21.228603391 +0000 UTC m=+2657.563890307 I0506 02:02:21.250077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:21.250530 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:21.250521547 +0000 UTC m=+2657.585808463 I0506 02:02:21.375655 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-06 02:02:21.375637216 +0000 UTC m=+2657.710924132 I0506 02:02:21.394238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:02:21.394252 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-06 02:02:21.394235081 +0000 UTC m=+2657.729521997 I0506 02:02:21.394286 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-06 02:02:21.394275812 +0000 UTC m=+2657.729562738 I0506 02:02:21.399603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:21.400020 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:21.400013778 +0000 UTC m=+2657.735300704 I0506 02:02:21.561780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:21.561850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:02:21.561872 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-06 02:02:21.561866128 +0000 UTC m=+2657.897153044 I0506 02:02:21.908348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-bk667" condition "Approved" to 2026-05-06 02:02:21.90833463 +0000 UTC m=+2658.243621546 I0506 02:02:22.179113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-bk667" condition "Ready" to 2026-05-06 02:02:22.179095489 +0000 UTC m=+2658.514382405 I0506 02:02:22.507737 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:22.507721121 +0000 UTC m=+2658.843008077 I0506 02:02:22.601788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:02:22.602060 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:02:22.602053199 +0000 UTC m=+2658.937340115 I0506 02:02:22.806622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:05:42.252074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:05:42.252124 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-06 02:05:42.25211201 +0000 UTC m=+2858.587398966 I0506 02:05:42.252218 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-06 02:05:42.252192991 +0000 UTC m=+2858.587479947 I0506 02:05:42.581501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:05:42.581616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:05:42.581641 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-06 02:05:42.581634197 +0000 UTC m=+2858.916921123 I0506 02:05:43.586460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:05:43.759499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-rclmr" condition "Approved" to 2026-05-06 02:05:43.75947726 +0000 UTC m=+2860.094764216 I0506 02:05:44.003627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-rclmr" condition "Ready" to 2026-05-06 02:05:44.003614136 +0000 UTC m=+2860.338901062 I0506 02:05:44.189705 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:05:44.189685255 +0000 UTC m=+2860.524972201 I0506 02:05:44.426714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:05:44.427166 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:05:44.427155906 +0000 UTC m=+2860.762442822 I0506 02:05:45.494540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:05:45.636823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:05:45.636869 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-06 02:05:45.636860219 +0000 UTC m=+2861.972147145 I0506 02:05:45.636907 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-06 02:05:45.63689474 +0000 UTC m=+2861.972181666 I0506 02:05:45.786957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:05:45.787040 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-06 02:05:45.787033644 +0000 UTC m=+2862.122320570 I0506 02:05:46.095016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:05:46.171994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-g69sq" condition "Approved" to 2026-05-06 02:05:46.171979369 +0000 UTC m=+2862.507266295 I0506 02:05:46.359095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-g69sq" condition "Ready" to 2026-05-06 02:05:46.359081877 +0000 UTC m=+2862.694368803 I0506 02:05:46.492170 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:05:46.492151663 +0000 UTC m=+2862.827438619 I0506 02:05:46.546293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:05:46.547349 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:05:46.547339487 +0000 UTC m=+2862.882626413 I0506 02:05:46.708899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:12:07.143442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:12:07.143478 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-05-06 02:12:07.143470675 +0000 UTC m=+3243.478757621 I0506 02:12:07.143431 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-06 02:12:07.143419434 +0000 UTC m=+3243.478706360 I0506 02:12:07.168301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:12:07.168421 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-06 02:12:07.168409738 +0000 UTC m=+3243.503696694 I0506 02:12:07.585528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:12:07.616173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-47vnd" condition "Approved" to 2026-05-06 02:12:07.616149338 +0000 UTC m=+3243.951436284 I0506 02:12:07.636548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-47vnd" condition "Ready" to 2026-05-06 02:12:07.636521635 +0000 UTC m=+3243.971808581 I0506 02:12:07.672650 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:12:07.672627925 +0000 UTC m=+3244.007914871 I0506 02:12:07.696216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:12:07.696658 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:12:07.69665104 +0000 UTC m=+3244.031937956 I0506 02:12:07.722582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:12:41.854577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0506 02:12:41.854662 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-06 02:12:41.854642861 +0000 UTC m=+3278.189929817 I0506 02:12:41.854573 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-06 02:12:41.85455312 +0000 UTC m=+3278.189840066 I0506 02:12:41.871893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:12:41.872074 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-06 02:12:41.872059484 +0000 UTC m=+3278.207346450 I0506 02:12:42.299069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0506 02:12:42.327293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-44ckz" condition "Approved" to 2026-05-06 02:12:42.327279292 +0000 UTC m=+3278.662566248 I0506 02:12:42.343711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-44ckz" condition "Ready" to 2026-05-06 02:12:42.343703337 +0000 UTC m=+3278.678990253 I0506 02:12:42.369895 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-06 02:12:42.369878933 +0000 UTC m=+3278.705165889 I0506 02:12:42.399401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"