I0509 12:58:34.924059       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0509 12:58:34.924214       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0509 12:58:34.924438       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0509 12:58:34.930243       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0509 12:58:34.930775       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0509 12:58:34.930921       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0509 12:58:34.931105       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0509 12:58:34.932749       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0509 12:58:34.948245       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0509 12:58:34.952030       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0509 12:58:34.957339       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0509 12:58:34.957426       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0509 12:58:34.957429       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0509 12:58:34.957510       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0509 12:58:34.957530       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0509 12:58:34.961675       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0509 12:58:34.965506       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0509 12:58:34.968660       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0509 12:58:34.971028       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0509 12:58:34.973320       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0509 12:58:34.976115       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0509 12:58:34.981345       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0509 12:58:34.984387       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0509 12:58:34.986760       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0509 12:58:34.989055       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0509 12:58:34.989118       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0509 12:58:34.991931       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0509 12:58:34.994386       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0509 12:58:34.996103       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0509 12:58:34.998096       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0509 12:58:35.004675       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0509 12:58:35.008794       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0509 12:58:35.008848       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0509 12:58:35.011295       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.011899       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.012705       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.012727       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.012953       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.012994       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.013282       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.013582       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.013791       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:35.088273       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0509 12:58:51.123319       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-09 12:58:51.123283147 +0000 UTC m=+16.232399956
I0509 12:58:51.893298       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-09 12:58:51.893280067 +0000 UTC m=+17.002396876
I0509 12:58:51.893404       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 12:58:51.893487       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-09 12:58:51.893477973 +0000 UTC m=+17.002594792
E0509 12:58:51.928036       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0509 12:58:51.928167       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-09 12:58:51.92815596 +0000 UTC m=+17.037272789
E0509 12:58:51.928201       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0509 12:58:51.932555       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 12:58:51.932663       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 12:58:51.932695       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-09 12:58:51.932685071 +0000 UTC m=+17.041801880
E0509 12:58:52.017808       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0509 12:58:52.017987       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0509 12:58:52.018058       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0509 12:58:52.018103       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0509 12:58:52.115342       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rfzwd" condition "Approved" to 2026-05-09 12:58:52.115325586 +0000 UTC m=+17.224442405
I0509 12:58:52.135106       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rfzwd" condition "Ready" to 2026-05-09 12:58:52.135090039 +0000 UTC m=+17.244206828
I0509 12:58:52.163759       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:58:52.163746591 +0000 UTC m=+17.272863380
I0509 12:58:52.184980       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 12:58:52.185372       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:58:52.185362506 +0000 UTC m=+17.294479295
I0509 12:58:52.198318       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 12:58:52.198812       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:58:52.198800367 +0000 UTC m=+17.307917156
I0509 12:58:57.018353       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:58:57.018334677 +0000 UTC m=+22.127451486
I0509 12:59:24.765783       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 12:59:24.765891       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-09 12:59:24.76588289 +0000 UTC m=+49.874999699
I0509 12:59:24.765874       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-09 12:59:24.765862189 +0000 UTC m=+49.874978978
I0509 12:59:24.778124       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-09 12:59:24.778105443 +0000 UTC m=+49.887222232
I0509 12:59:24.795822       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0509 12:59:24.796096       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-09 12:59:24.796084747 +0000 UTC m=+49.905201546
I0509 12:59:25.100560       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0509 12:59:25.137120       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9qqvh" condition "Approved" to 2026-05-09 12:59:25.137106881 +0000 UTC m=+50.246223660
I0509 12:59:25.169809       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9qqvh" condition "Ready" to 2026-05-09 12:59:25.169793714 +0000 UTC m=+50.278910503
I0509 12:59:25.203901       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:59:25.203885268 +0000 UTC m=+50.313002057
I0509 12:59:25.263461       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0509 12:59:25.263782       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 12:59:25.263773211 +0000 UTC m=+50.372890000
I0509 12:59:25.364435       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:05:15.192182       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:05:15.192332       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-05-09 13:05:15.192299223 +0000 UTC m=+400.301416032
I0509 13:05:15.192585       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-05-09 13:05:15.192454987 +0000 UTC m=+400.301571796
I0509 13:05:15.208364       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:05:15.208469       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-05-09 13:05:15.208457957 +0000 UTC m=+400.317574776
I0509 13:05:15.376403       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:05:15.410565       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-6l9xh" condition "Approved" to 2026-05-09 13:05:15.410552608 +0000 UTC m=+400.519669397
I0509 13:05:15.440257       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-6l9xh" condition "Ready" to 2026-05-09 13:05:15.440236245 +0000 UTC m=+400.549353034
I0509 13:05:15.467805       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:05:15.467760543 +0000 UTC m=+400.576877332
I0509 13:05:15.486932       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:05:15.487407       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:05:15.487396035 +0000 UTC m=+400.596512854
I0509 13:05:15.509465       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:06:24.735828       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:06:24.735887       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-09 13:06:24.735873291 +0000 UTC m=+469.844990110
I0509 13:06:24.736128       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-09 13:06:24.736115327 +0000 UTC m=+469.845232136
I0509 13:06:24.764777       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:06:24.764871       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:06:24.764907       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-09 13:06:24.764896352 +0000 UTC m=+469.874013161
E0509 13:06:24.768401       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0509 13:06:24.768466       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-09 13:06:24.768452402 +0000 UTC m=+469.877569221
E0509 13:06:24.768562       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0509 13:06:24.788077       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0509 13:06:24.788865       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0509 13:06:24.788918       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0509 13:06:24.788994       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0509 13:06:24.868417       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:06:24.868773       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zck5h" condition "Approved" to 2026-05-09 13:06:24.868748666 +0000 UTC m=+469.977865475
I0509 13:06:24.903697       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zck5h" condition "Ready" to 2026-05-09 13:06:24.903685101 +0000 UTC m=+470.012801910
I0509 13:06:24.964760       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:06:24.964743202 +0000 UTC m=+470.073859991
I0509 13:06:25.006450       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:06:25.006893       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:06:25.0068817 +0000 UTC m=+470.115998539
I0509 13:06:25.022440       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:06:25.022703       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:06:25.022693824 +0000 UTC m=+470.131810603
I0509 13:06:29.789011       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:06:29.789002538 +0000 UTC m=+474.898119307
I0509 13:07:10.792221       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-09 13:07:10.792206098 +0000 UTC m=+515.901322897
I0509 13:07:10.792573       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:07:10.792656       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-09 13:07:10.792641159 +0000 UTC m=+515.901758008
I0509 13:07:10.809868       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-09 13:07:10.809851005 +0000 UTC m=+515.918967794
I0509 13:07:10.810346       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:07:10.810508       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-09 13:07:10.810490339 +0000 UTC m=+515.919607158
I0509 13:07:10.815260       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:07:10.815299       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-09 13:07:10.815288978 +0000 UTC m=+515.924405767
I0509 13:07:10.815847       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-09 13:07:10.81584112 +0000 UTC m=+515.924957909
I0509 13:07:10.835771       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:10.835996       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-09 13:07:10.835987053 +0000 UTC m=+515.945103842
I0509 13:07:10.929628       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:10.931873       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:07:10.931907       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-09 13:07:10.931900537 +0000 UTC m=+516.041017326
I0509 13:07:10.937187       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:10.937344       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-09 13:07:10.937321429 +0000 UTC m=+516.046438228
I0509 13:07:11.037886       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:11.082391       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-b8l5f" condition "Approved" to 2026-05-09 13:07:11.082380929 +0000 UTC m=+516.191497708
I0509 13:07:11.150842       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-b8l5f" condition "Ready" to 2026-05-09 13:07:11.150827027 +0000 UTC m=+516.259943826
I0509 13:07:11.227876       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:07:11.227839118 +0000 UTC m=+516.336955937
I0509 13:07:11.255406       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z5xlk" condition "Approved" to 2026-05-09 13:07:11.255387727 +0000 UTC m=+516.364504536
I0509 13:07:11.263893       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:11.264256       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:07:11.264249926 +0000 UTC m=+516.373366715
I0509 13:07:11.270439       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:11.367884       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-z5xlk" condition "Ready" to 2026-05-09 13:07:11.367863575 +0000 UTC m=+516.476980384
I0509 13:07:11.372892       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:11.406533       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9m8ds" condition "Approved" to 2026-05-09 13:07:11.406515033 +0000 UTC m=+516.515631852
I0509 13:07:11.415671       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:07:11.415661229 +0000 UTC m=+516.524777998
I0509 13:07:11.658160       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9m8ds" condition "Ready" to 2026-05-09 13:07:11.658146048 +0000 UTC m=+516.767262857
I0509 13:07:11.783601       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:11.783965       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:07:11.783951534 +0000 UTC m=+516.893068343
I0509 13:07:12.146767       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:07:12.146749257 +0000 UTC m=+517.255866076
I0509 13:07:12.193181       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:12.285474       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:12.285915       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:07:12.285910055 +0000 UTC m=+517.395026834
I0509 13:07:12.595582       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:27.147302       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:07:27.147403       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" condition "Issuing" to 2026-05-09 13:07:27.147341828 +0000 UTC m=+532.256458657
I0509 13:07:27.147684       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" condition "Ready" to 2026-05-09 13:07:27.147659995 +0000 UTC m=+532.256776794
I0509 13:07:27.207613       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:27.207742       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:07:27.207787       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" condition "Issuing" to 2026-05-09 13:07:27.207776206 +0000 UTC m=+532.316893015
I0509 13:07:27.661978       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ctv2p-6xgpl" condition "Approved" to 2026-05-09 13:07:27.661960232 +0000 UTC m=+532.771077021
I0509 13:07:27.884557       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ctv2p-6xgpl" condition "Ready" to 2026-05-09 13:07:27.884540974 +0000 UTC m=+532.993657763
I0509 13:07:28.356530       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:07:28.35651465 +0000 UTC m=+533.465631429
I0509 13:07:28.509831       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:28.510310       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:07:28.510300896 +0000 UTC m=+533.619417685
I0509 13:07:29.493028       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:07:29.681932       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ctv2p-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:08:12.089269       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:08:12.089307       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-09 13:08:12.089297753 +0000 UTC m=+577.198414552
I0509 13:08:12.089379       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-09 13:08:12.089360125 +0000 UTC m=+577.198476914
I0509 13:08:12.103596       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:08:12.103664       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:08:12.103682       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-09 13:08:12.103675577 +0000 UTC m=+577.212792366
I0509 13:08:12.244562       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v9pwd" condition "Approved" to 2026-05-09 13:08:12.244549136 +0000 UTC m=+577.353665925
I0509 13:08:12.261887       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v9pwd" condition "Ready" to 2026-05-09 13:08:12.261870905 +0000 UTC m=+577.370987684
I0509 13:08:12.294072       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:08:12.29405009 +0000 UTC m=+577.403166909
I0509 13:08:12.316669       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:08:12.317374       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:08:12.317362874 +0000 UTC m=+577.426479663
I0509 13:08:12.333324       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:08:12.333684       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:08:12.333672011 +0000 UTC m=+577.442788800
I0509 13:08:12.334450       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:11:29.082729       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-09 13:11:29.082688207 +0000 UTC m=+774.191805016
I0509 13:11:29.082845       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:11:29.082936       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-09 13:11:29.082926273 +0000 UTC m=+774.192043062
I0509 13:11:29.100851       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:11:29.101030       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-09 13:11:29.101021499 +0000 UTC m=+774.210138288
I0509 13:11:29.295832       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:11:29.322689       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-frdbb" condition "Approved" to 2026-05-09 13:11:29.32267642 +0000 UTC m=+774.431793219
I0509 13:11:29.340722       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-frdbb" condition "Ready" to 2026-05-09 13:11:29.340713097 +0000 UTC m=+774.449829876
I0509 13:11:29.369946       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:11:29.369931894 +0000 UTC m=+774.479048683
I0509 13:11:29.395041       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:11:29.395325       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:11:29.395320486 +0000 UTC m=+774.504437275
I0509 13:11:29.416031       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:11:29.416329       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:11:29.416320269 +0000 UTC m=+774.525437058
I0509 13:13:51.656711       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:13:51.656809       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-09 13:13:51.656799012 +0000 UTC m=+916.765915821
I0509 13:13:51.656773       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-09 13:13:51.656744361 +0000 UTC m=+916.765861170
I0509 13:13:51.729808       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:13:51.729878       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-09 13:13:51.729870438 +0000 UTC m=+916.838987217
I0509 13:13:51.921965       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:13:51.969702       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tz876" condition "Approved" to 2026-05-09 13:13:51.9696877 +0000 UTC m=+917.078804479
I0509 13:13:52.015254       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tz876" condition "Ready" to 2026-05-09 13:13:52.015239636 +0000 UTC m=+917.124356445
I0509 13:13:52.131493       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:13:52.131478354 +0000 UTC m=+917.240595143
I0509 13:13:52.337330       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:13:52.337702       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:13:52.337696399 +0000 UTC m=+917.446813178
I0509 13:13:52.362717       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:15:10.198547       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-09 13:15:10.198521995 +0000 UTC m=+995.307638784
I0509 13:15:10.199124       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:15:10.199150       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-09 13:15:10.199145118 +0000 UTC m=+995.308261907
I0509 13:15:10.221913       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:15:10.222023       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-09 13:15:10.222016203 +0000 UTC m=+995.331132992
I0509 13:15:10.334042       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:15:10.406829       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8g6jf" condition "Approved" to 2026-05-09 13:15:10.406812606 +0000 UTC m=+995.515929395
I0509 13:15:10.456531       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8g6jf" condition "Ready" to 2026-05-09 13:15:10.456520006 +0000 UTC m=+995.565636775
I0509 13:15:10.493904       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:15:10.493891089 +0000 UTC m=+995.603007878
I0509 13:15:10.550572       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:15:10.550920       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:15:10.550910803 +0000 UTC m=+995.660027622
I0509 13:15:10.563268       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:15:10.582831       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:18:19.941810       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-09 13:18:19.94176251 +0000 UTC m=+1185.050879319
I0509 13:18:19.942068       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:18:19.942136       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-09 13:18:19.942126649 +0000 UTC m=+1185.051243458
I0509 13:18:20.047036       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:18:20.047113       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-09 13:18:20.047106074 +0000 UTC m=+1185.156222873
I0509 13:18:20.230562       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:18:20.361700       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-54r57" condition "Approved" to 2026-05-09 13:18:20.361685379 +0000 UTC m=+1185.470802198
I0509 13:18:20.565784       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-54r57" condition "Ready" to 2026-05-09 13:18:20.565772327 +0000 UTC m=+1185.674889116
I0509 13:18:20.741358       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:18:20.741346702 +0000 UTC m=+1185.850463491
I0509 13:18:20.796858       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:24:42.955709       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-09 13:24:42.955654129 +0000 UTC m=+1568.064770928
I0509 13:24:42.955855       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:24:42.955963       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-09 13:24:42.955939545 +0000 UTC m=+1568.065056334
I0509 13:24:42.970019       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:24:42.970107       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:24:42.970133       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-09 13:24:42.970125025 +0000 UTC m=+1568.079241844
I0509 13:24:43.112378       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-b5pf7" condition "Approved" to 2026-05-09 13:24:43.112366449 +0000 UTC m=+1568.221483258
I0509 13:24:43.130629       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-b5pf7" condition "Ready" to 2026-05-09 13:24:43.1306188 +0000 UTC m=+1568.239735589
I0509 13:24:43.159819       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:24:43.159803708 +0000 UTC m=+1568.268920527
I0509 13:24:43.180056       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:24:43.180604       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:24:43.180597406 +0000 UTC m=+1568.289714185
I0509 13:24:43.203288       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:24:43.203941       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:26:11.001972       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:26:11.002009       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-09 13:26:11.001994125 +0000 UTC m=+1656.111110934
I0509 13:26:11.002014       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-09 13:26:11.002006595 +0000 UTC m=+1656.111123384
I0509 13:26:11.018806       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:26:11.018887       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-09 13:26:11.018879405 +0000 UTC m=+1656.127996194
I0509 13:26:11.341363       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:26:11.375259       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-9zx9m" condition "Approved" to 2026-05-09 13:26:11.375244691 +0000 UTC m=+1656.484361510
I0509 13:26:11.392208       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-9zx9m" condition "Ready" to 2026-05-09 13:26:11.392191733 +0000 UTC m=+1656.501308502
I0509 13:26:11.417148       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:26:11.417135885 +0000 UTC m=+1656.526252674
I0509 13:26:11.438901       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:26:11.439176       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:26:11.439169261 +0000 UTC m=+1656.548286050
I0509 13:26:11.463033       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:26:11.463322       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:26:11.463313454 +0000 UTC m=+1656.572430243
I0509 13:27:12.563867       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-09 13:27:12.563848249 +0000 UTC m=+1717.672965058
I0509 13:27:12.563981       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:27:12.564030       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-09 13:27:12.564020003 +0000 UTC m=+1717.673136822
I0509 13:27:12.613932       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:12.614006       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-09 13:27:12.613998748 +0000 UTC m=+1717.723115537
I0509 13:27:12.657009       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:12.749650       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-tbs5z" condition "Approved" to 2026-05-09 13:27:12.749636894 +0000 UTC m=+1717.858753683
I0509 13:27:12.821508       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-tbs5z" condition "Ready" to 2026-05-09 13:27:12.821496342 +0000 UTC m=+1717.930613131
I0509 13:27:12.901331       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:27:12.901312279 +0000 UTC m=+1718.010429098
I0509 13:27:13.035218       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:13.219246       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:13.226854       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:27:13.226901       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-09 13:27:13.226889382 +0000 UTC m=+1718.336006201
I0509 13:27:13.227494       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-09 13:27:13.227487055 +0000 UTC m=+1718.336603854
I0509 13:27:13.262088       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:13.262501       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:27:13.262526       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-09 13:27:13.262520155 +0000 UTC m=+1718.371636944
I0509 13:27:13.368803       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:13.458308       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hqn5s" condition "Approved" to 2026-05-09 13:27:13.458291974 +0000 UTC m=+1718.567408783
I0509 13:27:13.495338       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hqn5s" condition "Ready" to 2026-05-09 13:27:13.495323708 +0000 UTC m=+1718.604440507
I0509 13:27:13.607826       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:27:13.60778833 +0000 UTC m=+1718.716905139
I0509 13:27:13.712039       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:13.712345       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:27:13.712335785 +0000 UTC m=+1718.821452584
I0509 13:27:13.723554       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:13.753329       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:27:13.954109       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-09 13:27:13.954095991 +0000 UTC m=+1719.063212800
I0509 13:27:14.573547       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-09 13:27:14.573538081 +0000 UTC m=+1719.682654860
I0509 13:28:01.821157       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:28:01.821200       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-09 13:28:01.821192261 +0000 UTC m=+1766.930309040
I0509 13:28:01.821567       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-09 13:28:01.821553409 +0000 UTC m=+1766.930670188
I0509 13:28:01.861054       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:28:01.861155       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-09 13:28:01.861147621 +0000 UTC m=+1766.970264400
I0509 13:28:02.477158       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:28:02.542331       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5wvcf" condition "Approved" to 2026-05-09 13:28:02.542308462 +0000 UTC m=+1767.651425281
I0509 13:28:02.569500       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5wvcf" condition "Ready" to 2026-05-09 13:28:02.569488364 +0000 UTC m=+1767.678605153
I0509 13:28:02.601490       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:28:02.601479824 +0000 UTC m=+1767.710596613
I0509 13:28:02.627750       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:28:02.628439       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:28:02.628429942 +0000 UTC m=+1767.737546731
I0509 13:28:02.656642       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:28:02.658729       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:28:02.658713604 +0000 UTC m=+1767.767830413
I0509 13:30:51.977304       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:30:51.977375       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-09 13:30:51.97736528 +0000 UTC m=+1937.086482089
I0509 13:30:51.977442       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-09 13:30:51.977418051 +0000 UTC m=+1937.086534870
I0509 13:30:51.994347       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:30:51.994455       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:30:51.994477       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-09 13:30:51.994470205 +0000 UTC m=+1937.103586994
I0509 13:30:52.262181       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tvfwq" condition "Approved" to 2026-05-09 13:30:52.262168666 +0000 UTC m=+1937.371285455
I0509 13:30:52.281765       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tvfwq" condition "Ready" to 2026-05-09 13:30:52.281750757 +0000 UTC m=+1937.390867576
I0509 13:30:52.307199       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:30:52.30718459 +0000 UTC m=+1937.416301379
I0509 13:30:52.328874       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:30:52.377258       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:30:53.392779       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:30:53.392808       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-09 13:30:53.392788115 +0000 UTC m=+1938.501904934
I0509 13:30:53.392840       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-09 13:30:53.392828316 +0000 UTC m=+1938.501945125
I0509 13:30:53.409988       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:30:53.410126       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:30:53.410169       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-09 13:30:53.410157396 +0000 UTC m=+1938.519274225
I0509 13:30:53.615917       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:30:53.622839       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-q752f" condition "Approved" to 2026-05-09 13:30:53.622817167 +0000 UTC m=+1938.731933956
I0509 13:30:53.647973       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-q752f" condition "Ready" to 2026-05-09 13:30:53.647957363 +0000 UTC m=+1938.757074182
I0509 13:30:53.681648       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:30:53.681636762 +0000 UTC m=+1938.790753551
I0509 13:30:53.707401       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:30:53.707823       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:30:53.707816272 +0000 UTC m=+1938.816933061
I0509 13:30:53.725583       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:30:53.734483       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:30:53.734912       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:30:53.734902452 +0000 UTC m=+1938.844019251
I0509 13:33:55.795531       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-09 13:33:55.795490686 +0000 UTC m=+2120.904607505
I0509 13:33:55.795694       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:33:55.795761       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-09 13:33:55.795754052 +0000 UTC m=+2120.904870841
I0509 13:33:55.884052       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:33:55.884151       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:33:55.884167       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-09 13:33:55.884161365 +0000 UTC m=+2120.993278144
I0509 13:33:56.934953       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-mz8n5" condition "Approved" to 2026-05-09 13:33:56.934943129 +0000 UTC m=+2122.044059908
I0509 13:33:57.224851       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-mz8n5" condition "Ready" to 2026-05-09 13:33:57.22483312 +0000 UTC m=+2122.333949939
I0509 13:33:57.387659       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:33:57.387648108 +0000 UTC m=+2122.496764897
I0509 13:33:57.437703       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:33:57.438254       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:33:57.438242828 +0000 UTC m=+2122.547359647
I0509 13:33:58.590764       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:57.089229       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-t5qts-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:34:57.089260       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t5qts-vnc" condition "Issuing" to 2026-05-09 13:34:57.089254193 +0000 UTC m=+2182.198370972
I0509 13:34:57.090041       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t5qts-vnc" condition "Ready" to 2026-05-09 13:34:57.0900363 +0000 UTC m=+2182.199153079
I0509 13:34:57.092612       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-t5qts-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:34:57.092636       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t5qts-api" condition "Issuing" to 2026-05-09 13:34:57.092631449 +0000 UTC m=+2182.201748228
I0509 13:34:57.092685       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t5qts-api" condition "Ready" to 2026-05-09 13:34:57.09267901 +0000 UTC m=+2182.201795789
I0509 13:34:57.107885       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-t5qts-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t5qts-api\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:57.107970       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-t5qts-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t5qts-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:57.108033       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t5qts-vnc" condition "Ready" to 2026-05-09 13:34:57.108027846 +0000 UTC m=+2182.217144625
I0509 13:34:57.108091       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t5qts-api" condition "Ready" to 2026-05-09 13:34:57.108081168 +0000 UTC m=+2182.217197987
I0509 13:34:57.908818       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-t5qts-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t5qts-api\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:58.290359       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-t5qts-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t5qts-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:58.423405       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t5qts-api-brk4x" condition "Approved" to 2026-05-09 13:34:58.423392932 +0000 UTC m=+2183.532509721
I0509 13:34:59.130012       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t5qts-vnc-z5dpw" condition "Approved" to 2026-05-09 13:34:59.130002732 +0000 UTC m=+2184.239119511
I0509 13:34:59.131693       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t5qts-api-brk4x" condition "Ready" to 2026-05-09 13:34:59.13168861 +0000 UTC m=+2184.240805389
I0509 13:34:59.160072       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t5qts-vnc-z5dpw" condition "Ready" to 2026-05-09 13:34:59.16004986 +0000 UTC m=+2184.269166669
I0509 13:34:59.168181       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t5qts-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:34:59.168159632 +0000 UTC m=+2184.277276421
I0509 13:34:59.188976       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t5qts-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:34:59.188958381 +0000 UTC m=+2184.298075160
I0509 13:34:59.195773       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-t5qts-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t5qts-api\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:59.196154       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t5qts-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:34:59.196148973 +0000 UTC m=+2184.305265762
I0509 13:34:59.200144       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-t5qts-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t5qts-api\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:59.211108       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-t5qts-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t5qts-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:59.219598       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-t5qts-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t5qts-api\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:34:59.220143       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t5qts-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:34:59.220132284 +0000 UTC m=+2184.329249073
I0509 13:37:03.824960       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-09 13:37:03.824938338 +0000 UTC m=+2308.934055127
I0509 13:37:03.825481       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:37:03.825503       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-09 13:37:03.825499661 +0000 UTC m=+2308.934616450
I0509 13:37:03.845490       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:37:03.845618       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:37:03.845649       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-09 13:37:03.845640274 +0000 UTC m=+2308.954757083
I0509 13:37:04.028453       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-gcw9s" condition "Approved" to 2026-05-09 13:37:04.028442333 +0000 UTC m=+2309.137559112
I0509 13:37:04.049362       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-gcw9s" condition "Ready" to 2026-05-09 13:37:04.049344504 +0000 UTC m=+2309.158461313
I0509 13:37:04.082642       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:37:04.082625944 +0000 UTC m=+2309.191742763
I0509 13:37:04.106268       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:37:04.106754       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:37:04.106748077 +0000 UTC m=+2309.215864856
I0509 13:37:04.128731       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:40:41.706561       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:40:41.706625       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-09 13:40:41.706617088 +0000 UTC m=+2526.815733877
I0509 13:40:41.706619       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-09 13:40:41.706598677 +0000 UTC m=+2526.815715496
I0509 13:40:41.724292       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:40:41.724445       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-09 13:40:41.72443608 +0000 UTC m=+2526.833552869
I0509 13:40:41.858497       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:40:41.900099       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-pb728" condition "Approved" to 2026-05-09 13:40:41.900078077 +0000 UTC m=+2527.009194886
I0509 13:40:41.919144       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-pb728" condition "Ready" to 2026-05-09 13:40:41.919132496 +0000 UTC m=+2527.028249285
I0509 13:40:41.945034       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:40:41.945021619 +0000 UTC m=+2527.054138408
I0509 13:40:41.972952       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:40:43.110447       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-09 13:40:43.110425606 +0000 UTC m=+2528.219542415
I0509 13:40:43.110484       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:40:43.110524       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-09 13:40:43.110516218 +0000 UTC m=+2528.219632997
I0509 13:40:43.130981       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:40:43.131100       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:40:43.131130       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-09 13:40:43.131121473 +0000 UTC m=+2528.240238282
I0509 13:40:43.351127       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-hm84d" condition "Approved" to 2026-05-09 13:40:43.351103349 +0000 UTC m=+2528.460220138
I0509 13:40:43.368054       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-hm84d" condition "Ready" to 2026-05-09 13:40:43.36801079 +0000 UTC m=+2528.477127599
I0509 13:40:43.401259       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:40:43.401246109 +0000 UTC m=+2528.510362898
I0509 13:40:43.429320       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:40:43.481030       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:45.908966       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-09 13:43:45.908915137 +0000 UTC m=+2711.018031946
I0509 13:43:45.909048       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:43:45.909090       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-09 13:43:45.90908038 +0000 UTC m=+2711.018197189
I0509 13:43:45.926578       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:45.926751       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:43:45.926805       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-09 13:43:45.926797319 +0000 UTC m=+2711.035914108
E0509 13:43:45.932906       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0509 13:43:45.933001       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-09 13:43:45.932991678 +0000 UTC m=+2711.042108497
I0509 13:43:45.933038       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0509 13:43:45.946122       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
E0509 13:43:45.946229       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0509 13:43:45.946273       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0509 13:43:45.946325       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
I0509 13:43:45.987068       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-6cjmf" condition "Approved" to 2026-05-09 13:43:45.987048296 +0000 UTC m=+2711.096165075
I0509 13:43:46.006016       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-6cjmf" condition "Ready" to 2026-05-09 13:43:46.006001982 +0000 UTC m=+2711.115118771
I0509 13:43:46.041628       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:46.041611274 +0000 UTC m=+2711.150728053
I0509 13:43:46.086134       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:46.570249       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-09 13:43:46.570231369 +0000 UTC m=+2711.679348158
I0509 13:43:46.570260       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:43:46.570457       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-09 13:43:46.570448594 +0000 UTC m=+2711.679565383
E0509 13:43:46.584776       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0509 13:43:46.584820       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-09 13:43:46.584812987 +0000 UTC m=+2711.693929776
I0509 13:43:46.584862       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0509 13:43:46.587947       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:46.588086       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:43:46.588115       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-09 13:43:46.588106891 +0000 UTC m=+2711.697223700
E0509 13:43:46.594747       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
E0509 13:43:46.594847       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0509 13:43:46.594877       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0509 13:43:46.594915       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
I0509 13:43:46.650175       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-nn4l4" condition "Approved" to 2026-05-09 13:43:46.650164648 +0000 UTC m=+2711.759281427
I0509 13:43:46.674317       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-nn4l4" condition "Ready" to 2026-05-09 13:43:46.674302402 +0000 UTC m=+2711.783419211
I0509 13:43:46.724054       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:46.724041602 +0000 UTC m=+2711.833158391
I0509 13:43:46.760960       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:46.762176       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:46.762163961 +0000 UTC m=+2711.871280750
I0509 13:43:46.783291       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:46.783601       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:46.783593033 +0000 UTC m=+2711.892709822
I0509 13:43:46.792873       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:47.299246       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-09 13:43:47.299232255 +0000 UTC m=+2712.408349044
I0509 13:43:47.299421       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:43:47.299459       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-09 13:43:47.29945192 +0000 UTC m=+2712.408568699
I0509 13:43:47.326669       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:47.326752       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:43:47.326770       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-09 13:43:47.326764616 +0000 UTC m=+2712.435881385
I0509 13:43:47.389027       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-xrjts" condition "Approved" to 2026-05-09 13:43:47.389016207 +0000 UTC m=+2712.498132986
I0509 13:43:47.391788       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:47.432912       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-xrjts" condition "Ready" to 2026-05-09 13:43:47.432892045 +0000 UTC m=+2712.542008814
I0509 13:43:50.946894       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:50.946874888 +0000 UTC m=+2716.055991707
I0509 13:43:51.596092       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:51.596077208 +0000 UTC m=+2716.705194017
I0509 13:43:51.826507       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-xrjts" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:51.826490606 +0000 UTC m=+2716.935607415
I0509 13:43:51.871334       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:51.871308795 +0000 UTC m=+2716.980425614
I0509 13:43:51.935410       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:51.935622       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:51.935616173 +0000 UTC m=+2717.044732952
I0509 13:43:51.940627       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:51.957189       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:43:51.957508       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:43:51.957499466 +0000 UTC m=+2717.066616255
I0509 13:43:51.964493       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:46:25.127252       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-09 13:46:25.127207884 +0000 UTC m=+2870.236324733
I0509 13:46:25.127433       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:46:25.127490       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-09 13:46:25.127479151 +0000 UTC m=+2870.236595970
I0509 13:46:25.183916       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:46:25.184050       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-09 13:46:25.184035694 +0000 UTC m=+2870.293152503
I0509 13:46:25.407669       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:46:25.442147       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-gnbhg" condition "Approved" to 2026-05-09 13:46:25.442131476 +0000 UTC m=+2870.551248265
I0509 13:46:25.474736       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-gnbhg" condition "Ready" to 2026-05-09 13:46:25.474721609 +0000 UTC m=+2870.583838418
I0509 13:46:25.503889       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:46:25.503872546 +0000 UTC m=+2870.612989365
I0509 13:46:25.527448       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:46:25.527878       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:46:25.527871916 +0000 UTC m=+2870.636988695
I0509 13:46:25.544557       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:46:25.545162       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:46:25.545607       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:46:25.545596476 +0000 UTC m=+2870.654713265
I0509 13:47:11.537028       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-09 13:47:11.537015022 +0000 UTC m=+2916.646131811
I0509 13:47:11.556519       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:47:11.556615       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-09 13:47:11.556600303 +0000 UTC m=+2916.665717192
I0509 13:47:11.556558       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-09 13:47:11.556539601 +0000 UTC m=+2916.665656390
I0509 13:47:11.571000       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:11.571052       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-09 13:47:11.571046238 +0000 UTC m=+2916.680163017
E0509 13:47:11.585499       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers"
E0509 13:47:11.688488       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert"
I0509 13:47:11.795999       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-09 13:47:11.795978694 +0000 UTC m=+2916.905095513
I0509 13:47:11.814226       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-09 13:47:11.814205804 +0000 UTC m=+2916.923322613
I0509 13:47:11.814317       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:47:11.814358       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-09 13:47:11.814347757 +0000 UTC m=+2916.923464566
I0509 13:47:11.831464       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:11.831604       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-09 13:47:11.831593225 +0000 UTC m=+2916.940710014
I0509 13:47:12.061367       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:12.095707       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rhblb" condition "Approved" to 2026-05-09 13:47:12.095687663 +0000 UTC m=+2917.204804452
I0509 13:47:12.117996       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rhblb" condition "Ready" to 2026-05-09 13:47:12.117982736 +0000 UTC m=+2917.227099525
I0509 13:47:12.155769       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:12.155757676 +0000 UTC m=+2917.264874465
I0509 13:47:12.181459       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:12.182156       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:12.18214807 +0000 UTC m=+2917.291264859
I0509 13:47:12.205738       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:12.606806       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-09 13:47:12.606791362 +0000 UTC m=+2917.715908151
I0509 13:47:12.626926       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:47:12.626991       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-09 13:47:12.626979787 +0000 UTC m=+2917.736096596
I0509 13:47:12.626973       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-09 13:47:12.626961547 +0000 UTC m=+2917.736078366
I0509 13:47:12.644185       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:12.644222       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:47:12.644235       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-09 13:47:12.644232035 +0000 UTC m=+2917.753348804
I0509 13:47:12.911634       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-54j72" condition "Approved" to 2026-05-09 13:47:12.911618807 +0000 UTC m=+2918.020735586
I0509 13:47:13.023440       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-54j72" condition "Ready" to 2026-05-09 13:47:13.023426425 +0000 UTC m=+2918.132543214
I0509 13:47:13.222164       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:13.22214515 +0000 UTC m=+2918.331261969
I0509 13:47:13.447482       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:13.447759       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:13.44774343 +0000 UTC m=+2918.556860209
I0509 13:47:13.600213       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:13.701453       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:16.485759       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-09 13:47:16.485740654 +0000 UTC m=+2921.594857463
I0509 13:47:16.972466       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:47:16.972514       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-09 13:47:16.972503796 +0000 UTC m=+2922.081620605
I0509 13:47:16.972828       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-09 13:47:16.972805753 +0000 UTC m=+2922.081922572
I0509 13:47:17.217711       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:17.217823       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:47:17.217897       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-09 13:47:17.217887841 +0000 UTC m=+2922.327004630
I0509 13:47:18.012427       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:18.015207       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-whs9k" condition "Approved" to 2026-05-09 13:47:18.015195527 +0000 UTC m=+2923.124312326
I0509 13:47:18.036105       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-whs9k" condition "Ready" to 2026-05-09 13:47:18.036092787 +0000 UTC m=+2923.145209576
I0509 13:47:18.057572       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-09 13:47:18.05755719 +0000 UTC m=+2923.166673969
I0509 13:47:18.073709       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:18.073696944 +0000 UTC m=+2923.182813733
I0509 13:47:18.087840       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:47:18.087875       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-09 13:47:18.087864763 +0000 UTC m=+2923.196981542
I0509 13:47:18.088113       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-09 13:47:18.088109398 +0000 UTC m=+2923.197226177
I0509 13:47:18.103254       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:18.103494       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:18.103488134 +0000 UTC m=+2923.212604913
I0509 13:47:18.109530       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:18.109585       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-09 13:47:18.109580091 +0000 UTC m=+2923.218696880
I0509 13:47:18.123401       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:18.124346       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:18.124336365 +0000 UTC m=+2923.233453154
I0509 13:47:18.125426       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:18.407681       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:18.463320       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-7cfxx" condition "Approved" to 2026-05-09 13:47:18.463307678 +0000 UTC m=+2923.572424447
I0509 13:47:18.504427       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-7cfxx" condition "Ready" to 2026-05-09 13:47:18.504411793 +0000 UTC m=+2923.613528572
I0509 13:47:18.542873       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:18.542858219 +0000 UTC m=+2923.651974998
I0509 13:47:18.573898       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:18.574584       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:18.574569163 +0000 UTC m=+2923.683685972
I0509 13:47:18.605040       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:47:18.605347       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:47:18.605336266 +0000 UTC m=+2923.714453055
I0509 13:51:15.467231       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:51:15.467266       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-09 13:51:15.467260024 +0000 UTC m=+3160.576376793
I0509 13:51:15.468542       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-09 13:51:15.468517052 +0000 UTC m=+3160.577633881
I0509 13:51:15.808599       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:51:15.808696       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:51:15.808716       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-09 13:51:15.808710104 +0000 UTC m=+3160.917826893
I0509 13:51:16.990074       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-s6r9d" condition "Approved" to 2026-05-09 13:51:16.990034439 +0000 UTC m=+3162.099151258
I0509 13:51:17.200019       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-s6r9d" condition "Ready" to 2026-05-09 13:51:17.200003268 +0000 UTC m=+3162.309120067
I0509 13:51:18.985193       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:51:18.985180452 +0000 UTC m=+3164.094297271
I0509 13:51:19.234945       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:51:19.235154       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:51:19.235149523 +0000 UTC m=+3164.344266302
I0509 13:51:19.548256       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-09 13:51:19.548242044 +0000 UTC m=+3164.657358853
I0509 13:51:19.548491       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:51:19.548530       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-09 13:51:19.54852019 +0000 UTC m=+3164.657637009
I0509 13:51:19.782219       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:51:19.786059       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:51:19.786165       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0509 13:51:19.786191       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-09 13:51:19.786183552 +0000 UTC m=+3164.895300351
I0509 13:51:20.455227       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0509 13:51:20.624304       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-hm826" condition "Approved" to 2026-05-09 13:51:20.624288718 +0000 UTC m=+3165.733405527
I0509 13:51:20.979525       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-hm826" condition "Ready" to 2026-05-09 13:51:20.979510978 +0000 UTC m=+3166.088627767
I0509 13:51:21.365215       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-09 13:51:21.365142823 +0000 UTC m=+3166.474259632
I0509 13:51:21.703667       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
E0509 13:53:51.485106       1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out
E0509 13:54:09.017350       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded
I0509 13:54:09.017411       1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition
E0509 13:54:11.077028       1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again
I0509 13:54:11.077822       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager"
I0509 13:54:11.077844       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness"
I0509 13:54:11.077854       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers"
I0509 13:54:11.077864       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers"
I0509 13:54:11.077877       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi"
I0509 13:54:11.077887       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca"
I0509 13:54:11.077900       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme"
I0509 13:54:11.077909       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger"
I0509 13:54:11.077918       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders"
I0509 13:54:11.077927       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned"
I0509 13:54:11.078046       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager"
I0509 13:54:11.078086       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing"
I0509 13:54:11.078101       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver"
I0509 13:54:11.078116       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges"
I0509 13:54:11.078132       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault"
I0509 13:54:11.078150       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics"
I0509 13:54:11.078163       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim"
I0509 13:54:11.078428       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager"
E0509 13:54:11.078562       1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"