I0728 14:13:43.324333 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0728 14:13:43.324453 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0728 14:13:43.324532 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0728 14:13:43.330537 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0728 14:13:43.331069 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0728 14:13:43.331159 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0728 14:13:43.331224 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0728 14:13:43.334012 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0728 14:13:43.350563 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0728 14:13:43.355623 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0728 14:13:43.356014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0728 14:13:43.359923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0728 14:13:43.362478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0728 14:13:43.366970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0728 14:13:43.370338 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0728 14:13:43.372926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0728 14:13:43.375532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0728 14:13:43.378417 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0728 14:13:43.381435 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0728 14:13:43.383739 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0728 14:13:43.383819 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0728 14:13:43.389645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0728 14:13:43.395799 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0728 14:13:43.395835 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0728 14:13:43.395838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0728 14:13:43.398734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0728 14:13:43.401473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0728 14:13:43.404135 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0728 14:13:43.404199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0728 14:13:43.406392 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0728 14:13:43.408410 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0728 14:13:43.410412 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0728 14:13:43.410478 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0728 14:13:43.414600 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.418478 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.418508 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.418863 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.434175 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.456464 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.470682 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.487567 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.509368 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:43.518131 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0728 14:13:55.373598 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-28 14:13:55.373577891 +0000 UTC m=+12.084781349 I0728 14:13:56.125395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:13:56.125410 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 14:13:56.125392532 +0000 UTC m=+12.836596000 I0728 14:13:56.125547 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 14:13:56.125517865 +0000 UTC m=+12.836721333 E0728 14:13:56.142064 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 14:13:56.142154 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-28 14:13:56.142143451 +0000 UTC m=+12.853346919 E0728 14:13:56.142194 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 14:13:56.144323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:56.144408 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 14:13:56.144400254 +0000 UTC m=+12.855603722 E0728 14:13:56.153720 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0728 14:13:56.153843 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:13:56.153888 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:13:56.153934 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0728 14:13:56.160476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:56.160606 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 14:13:56.160588092 +0000 UTC m=+12.871791570 I0728 14:13:56.168235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:56.168537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xt88g" condition "Approved" to 2026-07-28 14:13:56.168524838 +0000 UTC m=+12.879728276 I0728 14:13:56.181933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xt88g" condition "Ready" to 2026-07-28 14:13:56.18191437 +0000 UTC m=+12.893117828 I0728 14:13:56.205817 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:56.205800488 +0000 UTC m=+12.917003956 I0728 14:13:56.230410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:56.231377 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:56.230826819 +0000 UTC m=+12.942030257 I0728 14:13:56.239391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:56.254086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:56.254238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:13:56.254767 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:13:56.254754358 +0000 UTC m=+12.965957826 I0728 14:14:01.154358 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:14:01.154336865 +0000 UTC m=+17.865540333 I0728 14:14:22.171458 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 14:14:22.1714394 +0000 UTC m=+38.882642868 I0728 14:14:22.171554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:14:22.171662 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 14:14:22.171652064 +0000 UTC m=+38.882855502 I0728 14:14:22.183837 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-28 14:14:22.183818963 +0000 UTC m=+38.895022401 I0728 14:14:22.196347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:14:22.197085 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 14:14:22.197052773 +0000 UTC m=+38.908256211 I0728 14:14:22.653255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:14:22.687387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-klvmd" condition "Approved" to 2026-07-28 14:14:22.687361767 +0000 UTC m=+39.398565205 I0728 14:14:22.724547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-klvmd" condition "Ready" to 2026-07-28 14:14:22.724529805 +0000 UTC m=+39.435733233 I0728 14:14:22.759598 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:14:22.759577122 +0000 UTC m=+39.470780560 I0728 14:14:22.786179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:14:22.787083 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:14:22.787069651 +0000 UTC m=+39.498273119 I0728 14:14:22.810701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:14:22.811111 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:14:22.811100872 +0000 UTC m=+39.522304300 I0728 14:18:55.738505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:18:55.738610 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Issuing" to 2026-07-28 14:18:55.738578196 +0000 UTC m=+312.449781654 I0728 14:18:55.738493 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready" to 2026-07-28 14:18:55.737718348 +0000 UTC m=+312.448921806 I0728 14:18:55.756183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:18:55.756248 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready" to 2026-07-28 14:18:55.756239602 +0000 UTC m=+312.467443040 I0728 14:18:55.996714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:18:56.033961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-44.nip.io-tls-wd98x" condition "Approved" to 2026-07-28 14:18:56.033935416 +0000 UTC m=+312.745138874 I0728 14:18:56.061197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-44.nip.io-tls-wd98x" condition "Ready" to 2026-07-28 14:18:56.061185792 +0000 UTC m=+312.772389230 I0728 14:18:56.090844 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:18:56.090825605 +0000 UTC m=+312.802029043 I0728 14:18:56.108419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:03.244955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:20:03.244996 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 14:20:03.244986848 +0000 UTC m=+379.956190276 I0728 14:20:03.244998 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 14:20:03.244973827 +0000 UTC m=+379.956177305 I0728 14:20:03.258939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:03.259010 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 14:20:03.259003653 +0000 UTC m=+379.970207091 E0728 14:20:03.261983 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 14:20:03.262022 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-28 14:20:03.262016232 +0000 UTC m=+379.973219670 E0728 14:20:03.262082 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:20:03.273028 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0728 14:20:03.273316 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:20:03.273348 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 14:20:03.273370 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0728 14:20:03.275876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:03.301148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q4k97" condition "Approved" to 2026-07-28 14:20:03.301130211 +0000 UTC m=+380.012333669 I0728 14:20:03.313638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q4k97" condition "Ready" to 2026-07-28 14:20:03.313626056 +0000 UTC m=+380.024829494 I0728 14:20:03.331670 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:03.331654531 +0000 UTC m=+380.042857969 I0728 14:20:03.347563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:03.347851 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:03.347841608 +0000 UTC m=+380.059045076 I0728 14:20:03.363520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:03.368234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:08.274469 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:08.274455911 +0000 UTC m=+384.985659369 I0728 14:20:49.716769 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 14:20:49.716720922 +0000 UTC m=+426.427924350 I0728 14:20:49.717155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:20:49.717177 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 14:20:49.717174261 +0000 UTC m=+426.428377689 I0728 14:20:49.717615 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-28 14:20:49.717611499 +0000 UTC m=+426.428814927 I0728 14:20:49.717772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:20:49.717793 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 14:20:49.717789873 +0000 UTC m=+426.428993301 I0728 14:20:49.718395 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 14:20:49.718389995 +0000 UTC m=+426.429593413 I0728 14:20:49.724091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:20:49.724129 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 14:20:49.724121727 +0000 UTC m=+426.435325155 I0728 14:20:49.769333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:49.769421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:20:49.769449 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 14:20:49.769443268 +0000 UTC m=+426.480646696 I0728 14:20:49.769931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:49.769980 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 14:20:49.769975689 +0000 UTC m=+426.481179117 I0728 14:20:49.770247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:49.770284 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 14:20:49.770281374 +0000 UTC m=+426.481484802 I0728 14:20:50.102863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:50.103403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q56j2" condition "Approved" to 2026-07-28 14:20:50.103389829 +0000 UTC m=+426.814593287 I0728 14:20:50.122181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q56j2" condition "Ready" to 2026-07-28 14:20:50.122169717 +0000 UTC m=+426.833373165 I0728 14:20:50.136567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:50.154218 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:50.154206757 +0000 UTC m=+426.865410195 I0728 14:20:50.177345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:50.183002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:50.183189 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:50.183184106 +0000 UTC m=+426.894387534 I0728 14:20:50.188646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f9hxp" condition "Approved" to 2026-07-28 14:20:50.188630524 +0000 UTC m=+426.899833962 I0728 14:20:50.200571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:50.201013 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:50.200999387 +0000 UTC m=+426.912202825 I0728 14:20:50.204390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f9hxp" condition "Ready" to 2026-07-28 14:20:50.204376573 +0000 UTC m=+426.915580011 I0728 14:20:50.216078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2z2g2" condition "Approved" to 2026-07-28 14:20:50.216069952 +0000 UTC m=+426.927273390 I0728 14:20:50.516240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2z2g2" condition "Ready" to 2026-07-28 14:20:50.51622796 +0000 UTC m=+427.227431398 I0728 14:20:50.665865 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:50.66585286 +0000 UTC m=+427.377056298 I0728 14:20:50.911689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:50.912307 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:50.912300332 +0000 UTC m=+427.623503770 I0728 14:20:50.959981 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:50.959964798 +0000 UTC m=+427.671168236 I0728 14:20:51.209694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:51.210188 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:51.210176913 +0000 UTC m=+427.921380381 I0728 14:20:51.260801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:51.560952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:51.612869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:58.590471 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" condition "Ready" to 2026-07-28 14:20:58.590447248 +0000 UTC m=+435.301650716 I0728 14:20:58.590579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:20:58.590623 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" condition "Issuing" to 2026-07-28 14:20:58.590611231 +0000 UTC m=+435.301814689 I0728 14:20:58.605696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8g89x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:58.605786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:20:58.605808 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" condition "Issuing" to 2026-07-28 14:20:58.60580179 +0000 UTC m=+435.317005248 I0728 14:20:58.777354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8g89x-bf4lq" condition "Approved" to 2026-07-28 14:20:58.777336379 +0000 UTC m=+435.488539817 I0728 14:20:58.801136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8g89x-bf4lq" condition "Ready" to 2026-07-28 14:20:58.801127107 +0000 UTC m=+435.512330525 I0728 14:20:58.831388 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:58.831378853 +0000 UTC m=+435.542582281 I0728 14:20:58.855311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8g89x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:20:58.855530 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:20:58.855525769 +0000 UTC m=+435.566729187 I0728 14:20:58.871428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8g89x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8g89x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:21:25.326276 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 14:21:25.326264245 +0000 UTC m=+462.037467673 I0728 14:21:25.326582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:21:25.326603 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 14:21:25.326601092 +0000 UTC m=+462.037804520 I0728 14:21:25.345730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:21:25.345834 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:21:25.345934 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 14:21:25.345873832 +0000 UTC m=+462.057077290 I0728 14:21:25.540728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:21:25.552803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-t8h7z" condition "Approved" to 2026-07-28 14:21:25.552789768 +0000 UTC m=+462.263993206 I0728 14:21:25.578980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-t8h7z" condition "Ready" to 2026-07-28 14:21:25.578964373 +0000 UTC m=+462.290167811 I0728 14:21:25.612768 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:21:25.612748658 +0000 UTC m=+462.323952096 I0728 14:21:25.632862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:21:25.633288 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:21:25.633281963 +0000 UTC m=+462.344485411 I0728 14:21:25.656029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:21:25.656052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:24:41.050454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:24:41.050542 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 14:24:41.05053033 +0000 UTC m=+657.761733788 I0728 14:24:41.050506 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 14:24:41.050474109 +0000 UTC m=+657.761677597 I0728 14:24:41.069176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:24:41.069267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:24:41.069290 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 14:24:41.0692799 +0000 UTC m=+657.780483348 I0728 14:24:41.325851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:24:41.332014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-79f7h" condition "Approved" to 2026-07-28 14:24:41.331999844 +0000 UTC m=+658.043203282 I0728 14:24:41.353239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-79f7h" condition "Ready" to 2026-07-28 14:24:41.353220774 +0000 UTC m=+658.064424242 I0728 14:24:41.385590 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:24:41.385572702 +0000 UTC m=+658.096776160 I0728 14:24:41.412372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:24:41.412771 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:24:41.412763048 +0000 UTC m=+658.123966506 I0728 14:24:41.432695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:27:13.319266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:27:13.319412 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-28 14:27:13.319404078 +0000 UTC m=+810.030607516 I0728 14:27:13.319827 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-28 14:27:13.319797816 +0000 UTC m=+810.031001374 I0728 14:27:13.340072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:27:13.340208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:27:13.340245 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-28 14:27:13.340233109 +0000 UTC m=+810.051436567 I0728 14:27:13.541295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pzqvx" condition "Approved" to 2026-07-28 14:27:13.541247446 +0000 UTC m=+810.252450884 I0728 14:27:13.566117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pzqvx" condition "Ready" to 2026-07-28 14:27:13.566104067 +0000 UTC m=+810.277307495 I0728 14:27:13.602782 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:27:13.602768601 +0000 UTC m=+810.313972059 I0728 14:27:13.629768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:28:13.910517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:28:13.910570 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-28 14:28:13.910558693 +0000 UTC m=+870.621762151 I0728 14:28:13.910700 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-28 14:28:13.910679876 +0000 UTC m=+870.621883344 I0728 14:28:13.933397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:28:13.933523 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-28 14:28:13.933512436 +0000 UTC m=+870.644715894 I0728 14:28:14.075102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:28:14.110601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-khg5w" condition "Approved" to 2026-07-28 14:28:14.110589401 +0000 UTC m=+870.821792839 I0728 14:28:14.139431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-khg5w" condition "Ready" to 2026-07-28 14:28:14.1394222 +0000 UTC m=+870.850625628 I0728 14:28:14.185190 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:28:14.185166393 +0000 UTC m=+870.896369861 I0728 14:28:14.209219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:28:14.209622 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:28:14.209612175 +0000 UTC m=+870.920815633 I0728 14:28:14.225999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:28:14.226411 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:28:14.226402736 +0000 UTC m=+870.937606174 I0728 14:31:23.959652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:31:23.959694 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-28 14:31:23.959686696 +0000 UTC m=+1060.670890134 I0728 14:31:23.959757 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-28 14:31:23.959743807 +0000 UTC m=+1060.670947275 I0728 14:31:23.977257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:31:23.977396 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-28 14:31:23.977380485 +0000 UTC m=+1060.688584013 I0728 14:31:24.112519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:31:24.147621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-j68zz" condition "Approved" to 2026-07-28 14:31:24.147603701 +0000 UTC m=+1060.858807139 I0728 14:31:24.170625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-j68zz" condition "Ready" to 2026-07-28 14:31:24.170611465 +0000 UTC m=+1060.881814903 I0728 14:31:24.200845 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:31:24.20083352 +0000 UTC m=+1060.912036968 I0728 14:31:24.220081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:31:24.220365 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:31:24.220357515 +0000 UTC m=+1060.931560963 I0728 14:31:24.245850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:37:32.402270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:37:32.402313 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-28 14:37:32.40230186 +0000 UTC m=+1429.113505328 I0728 14:37:32.402292 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-28 14:37:32.40226728 +0000 UTC m=+1429.113470748 I0728 14:37:32.421913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:37:32.422009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:37:32.422037 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-28 14:37:32.42202925 +0000 UTC m=+1429.133232718 I0728 14:37:32.787924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-f4w2c" condition "Approved" to 2026-07-28 14:37:32.787908152 +0000 UTC m=+1429.499111590 I0728 14:37:32.815181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-f4w2c" condition "Ready" to 2026-07-28 14:37:32.815165201 +0000 UTC m=+1429.526368699 I0728 14:37:32.849599 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:37:32.84958078 +0000 UTC m=+1429.560784238 I0728 14:37:32.870396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:37:32.870776 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:37:32.870769669 +0000 UTC m=+1429.581973097 I0728 14:37:32.888377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:39:00.473117 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-28 14:39:00.473098658 +0000 UTC m=+1517.184302096 I0728 14:39:00.473220 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:39:00.473276 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-28 14:39:00.473263661 +0000 UTC m=+1517.184467099 I0728 14:39:00.499223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:39:00.499340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:39:00.499364 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-28 14:39:00.499356726 +0000 UTC m=+1517.210560164 I0728 14:39:00.754588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:39:00.764772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-xxjtk" condition "Approved" to 2026-07-28 14:39:00.764760506 +0000 UTC m=+1517.475963944 I0728 14:39:00.781345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-xxjtk" condition "Ready" to 2026-07-28 14:39:00.781333763 +0000 UTC m=+1517.492537201 I0728 14:39:00.811685 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:39:00.811666052 +0000 UTC m=+1517.522869520 I0728 14:39:00.835467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:39:00.907463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:02.476888 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-28 14:40:02.476871833 +0000 UTC m=+1579.188075281 I0728 14:40:02.476932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:40:02.476982 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-28 14:40:02.476972115 +0000 UTC m=+1579.188175583 I0728 14:40:02.498179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:02.498250 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-28 14:40:02.498243685 +0000 UTC m=+1579.209447123 I0728 14:40:02.521607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:02.558018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-gmhfh" condition "Approved" to 2026-07-28 14:40:02.558004475 +0000 UTC m=+1579.269207903 I0728 14:40:02.578202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-gmhfh" condition "Ready" to 2026-07-28 14:40:02.578189933 +0000 UTC m=+1579.289393371 I0728 14:40:02.605015 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:40:02.604989152 +0000 UTC m=+1579.316192620 I0728 14:40:02.624171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:02.624559 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:40:02.624551278 +0000 UTC m=+1579.335754716 I0728 14:40:02.643738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:02.644099 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:40:02.644087024 +0000 UTC m=+1579.355290462 I0728 14:40:03.148515 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-28 14:40:03.148497142 +0000 UTC m=+1579.859700610 I0728 14:40:03.148622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:40:03.148659 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-28 14:40:03.148650635 +0000 UTC m=+1579.859854073 I0728 14:40:03.169304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:03.169430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:40:03.169463 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-28 14:40:03.169453206 +0000 UTC m=+1579.880656664 I0728 14:40:03.228118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:03.234702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hwggg" condition "Approved" to 2026-07-28 14:40:03.234690563 +0000 UTC m=+1579.945893981 I0728 14:40:03.257811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hwggg" condition "Ready" to 2026-07-28 14:40:03.25779681 +0000 UTC m=+1579.969000248 I0728 14:40:03.287294 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:40:03.287276291 +0000 UTC m=+1579.998479739 I0728 14:40:03.312967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:03.890107 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-28 14:40:03.890096771 +0000 UTC m=+1580.601300209 I0728 14:40:04.660842 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-28 14:40:04.660830277 +0000 UTC m=+1581.372033715 I0728 14:40:49.603461 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-28 14:40:49.603438859 +0000 UTC m=+1626.314642297 I0728 14:40:49.603819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:40:49.603838 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-28 14:40:49.603834357 +0000 UTC m=+1626.315037795 I0728 14:40:49.640989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:49.641077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:40:49.641100 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-28 14:40:49.641094102 +0000 UTC m=+1626.352297530 I0728 14:40:50.334513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5zh5h" condition "Approved" to 2026-07-28 14:40:50.334496791 +0000 UTC m=+1627.045700229 I0728 14:40:50.355038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5zh5h" condition "Ready" to 2026-07-28 14:40:50.355027485 +0000 UTC m=+1627.066230913 I0728 14:40:50.394820 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:40:50.394797091 +0000 UTC m=+1627.106000529 I0728 14:40:50.415461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:50.416370 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:40:50.416355886 +0000 UTC m=+1627.127559324 I0728 14:40:50.427092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:40:50.440330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:21.541884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:43:21.541927 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-28 14:43:21.541916606 +0000 UTC m=+1778.253120064 I0728 14:43:21.542323 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-28 14:43:21.542293783 +0000 UTC m=+1778.253497221 I0728 14:43:21.563981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:21.571307 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-28 14:43:21.571290386 +0000 UTC m=+1778.282493824 I0728 14:43:21.781665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:21.823064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-w6c9v" condition "Approved" to 2026-07-28 14:43:21.823040925 +0000 UTC m=+1778.534244393 I0728 14:43:21.850455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-w6c9v" condition "Ready" to 2026-07-28 14:43:21.850438126 +0000 UTC m=+1778.561641594 I0728 14:43:21.891573 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:43:21.891553157 +0000 UTC m=+1778.602756615 I0728 14:43:21.917655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:21.918354 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:43:21.918341026 +0000 UTC m=+1778.629544484 I0728 14:43:21.945442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:21.945520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:21.945805 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:43:21.945794688 +0000 UTC m=+1778.656998126 I0728 14:43:23.315815 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-28 14:43:23.315794914 +0000 UTC m=+1780.026998352 I0728 14:43:23.316148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:43:23.316197 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-28 14:43:23.316185631 +0000 UTC m=+1780.027389069 I0728 14:43:23.352964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:23.353111 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-28 14:43:23.35309718 +0000 UTC m=+1780.064300638 I0728 14:43:23.733084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:23.775572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-khshk" condition "Approved" to 2026-07-28 14:43:23.775552739 +0000 UTC m=+1780.486756167 I0728 14:43:23.838766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-khshk" condition "Ready" to 2026-07-28 14:43:23.838756337 +0000 UTC m=+1780.549959765 I0728 14:43:23.914817 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:43:23.914804368 +0000 UTC m=+1780.626007806 I0728 14:43:23.935627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:43:23.995945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:46:24.604486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:46:24.604565 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-28 14:46:24.604556752 +0000 UTC m=+1961.315760180 I0728 14:46:24.604652 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-28 14:46:24.604620423 +0000 UTC m=+1961.315823891 I0728 14:46:24.627666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:46:24.627926 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:46:24.627968 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-28 14:46:24.627958374 +0000 UTC m=+1961.339161832 I0728 14:46:24.877167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-rrdsx" condition "Approved" to 2026-07-28 14:46:24.87713836 +0000 UTC m=+1961.588341788 I0728 14:46:24.901059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-rrdsx" condition "Ready" to 2026-07-28 14:46:24.901047972 +0000 UTC m=+1961.612251400 I0728 14:46:24.929816 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:46:24.929801179 +0000 UTC m=+1961.641004607 I0728 14:46:24.956959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:46:24.957277 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:46:24.957268871 +0000 UTC m=+1961.668472309 I0728 14:46:24.974828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:46:24.975139 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:46:24.975131494 +0000 UTC m=+1961.686334932 I0728 14:47:31.437224 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2kdvs-vnc" condition "Ready" to 2026-07-28 14:47:31.43716278 +0000 UTC m=+2028.148366248 I0728 14:47:31.437287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2kdvs-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:47:31.437322 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2kdvs-api" condition "Issuing" to 2026-07-28 14:47:31.437309973 +0000 UTC m=+2028.148513441 I0728 14:47:31.437241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2kdvs-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:47:31.437710 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2kdvs-vnc" condition "Issuing" to 2026-07-28 14:47:31.43770129 +0000 UTC m=+2028.148904758 I0728 14:47:31.437233 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2kdvs-api" condition "Ready" to 2026-07-28 14:47:31.437209091 +0000 UTC m=+2028.148412549 I0728 14:47:31.459852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-2kdvs-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2kdvs-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:47:31.459920 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2kdvs-api" condition "Ready" to 2026-07-28 14:47:31.459911519 +0000 UTC m=+2028.171114957 I0728 14:47:31.460663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2kdvs-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2kdvs-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:47:31.460722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-2kdvs-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:47:31.460741 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2kdvs-vnc" condition "Issuing" to 2026-07-28 14:47:31.460737035 +0000 UTC m=+2028.171940473 I0728 14:47:31.564646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-2kdvs-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2kdvs-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:47:31.604313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2kdvs-api-628b2" condition "Approved" to 2026-07-28 14:47:31.604292117 +0000 UTC m=+2028.315495555 I0728 14:47:31.626889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2kdvs-api-628b2" condition "Ready" to 2026-07-28 14:47:31.626878284 +0000 UTC m=+2028.338081722 I0728 14:47:31.659930 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2kdvs-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:47:31.659915735 +0000 UTC m=+2028.371119153 I0728 14:47:31.683277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-2kdvs-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2kdvs-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:47:32.025171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-2kdvs-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2kdvs-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:47:32.031838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2kdvs-vnc-2vjbk" condition "Approved" to 2026-07-28 14:47:32.031822104 +0000 UTC m=+2028.743025542 I0728 14:47:32.049065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2kdvs-vnc-2vjbk" condition "Ready" to 2026-07-28 14:47:32.049051403 +0000 UTC m=+2028.760254841 I0728 14:47:32.079631 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2kdvs-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:47:32.079606657 +0000 UTC m=+2028.790810115 I0728 14:47:32.104743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-2kdvs-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2kdvs-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:47:32.105267 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2kdvs-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:47:32.105256292 +0000 UTC m=+2028.816459730 I0728 14:47:32.120080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-2kdvs-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2kdvs-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:47:32.120737 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2kdvs-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:47:32.120720037 +0000 UTC m=+2028.831923515 I0728 14:49:01.154390 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-07-28 14:49:01.154371649 +0000 UTC m=+2117.865575087 I0728 14:49:01.155040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:49:01.155073 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-07-28 14:49:01.155065192 +0000 UTC m=+2117.866268630 I0728 14:49:01.173512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:49:01.173678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:49:01.173722 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-07-28 14:49:01.17371179 +0000 UTC m=+2117.884915248 I0728 14:49:01.716291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-m5l8t" condition "Approved" to 2026-07-28 14:49:01.716271286 +0000 UTC m=+2118.427474714 I0728 14:49:01.737578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-m5l8t" condition "Ready" to 2026-07-28 14:49:01.737559125 +0000 UTC m=+2118.448762593 I0728 14:49:01.765007 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:49:01.764994047 +0000 UTC m=+2118.476197505 I0728 14:49:01.788519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:52:41.403326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:52:41.403346 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-28 14:52:41.403329378 +0000 UTC m=+2338.114532846 I0728 14:52:41.403440 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-28 14:52:41.40342774 +0000 UTC m=+2338.114631198 I0728 14:52:41.419302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:52:41.419437 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:52:41.419473 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-28 14:52:41.419460987 +0000 UTC m=+2338.130665015 I0728 14:52:41.649679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:52:41.661762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-khsc9" condition "Approved" to 2026-07-28 14:52:41.661737294 +0000 UTC m=+2338.372940762 I0728 14:52:41.680155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-khsc9" condition "Ready" to 2026-07-28 14:52:41.680142636 +0000 UTC m=+2338.391346064 I0728 14:52:41.718290 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:52:41.718275668 +0000 UTC m=+2338.429479106 I0728 14:52:41.742249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:52:41.788019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:52:42.872581 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-28 14:52:42.872561938 +0000 UTC m=+2339.583765396 I0728 14:52:42.872651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:52:42.872680 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-28 14:52:42.87267297 +0000 UTC m=+2339.583876428 I0728 14:52:42.892342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:52:42.892671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:52:42.892786 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-28 14:52:42.892702265 +0000 UTC m=+2339.603905733 I0728 14:52:43.096639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:52:43.113698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-shkf9" condition "Approved" to 2026-07-28 14:52:43.113638751 +0000 UTC m=+2339.824842209 I0728 14:52:43.133307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-shkf9" condition "Ready" to 2026-07-28 14:52:43.133292349 +0000 UTC m=+2339.844495777 I0728 14:52:43.179974 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:52:43.179956909 +0000 UTC m=+2339.891160347 I0728 14:52:43.204602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:52:43.204961 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:52:43.204949511 +0000 UTC m=+2339.916152949 I0728 14:52:43.225612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:52.044633 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-28 14:54:52.044614385 +0000 UTC m=+2468.755817853 I0728 14:54:52.044731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:54:52.044794 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-28 14:54:52.044781969 +0000 UTC m=+2468.755985427 E0728 14:54:52.059929 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 14:54:52.060020 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-28 14:54:52.060009478 +0000 UTC m=+2468.771212916 I0728 14:54:52.060050 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 14:54:52.060759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:52.060964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:54:52.060994 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-28 14:54:52.060986368 +0000 UTC m=+2468.772189806 E0728 14:54:52.068366 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0728 14:54:52.068455 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 14:54:52.068495 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 14:54:52.068538 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0728 14:54:52.109821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-zdvtp" condition "Approved" to 2026-07-28 14:54:52.10980814 +0000 UTC m=+2468.821011578 I0728 14:54:52.133165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-zdvtp" condition "Ready" to 2026-07-28 14:54:52.13315544 +0000 UTC m=+2468.844358868 I0728 14:54:52.167995 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:54:52.167881704 +0000 UTC m=+2468.879085142 I0728 14:54:52.189929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:52.733319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:54:52.733371 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-28 14:54:52.733361602 +0000 UTC m=+2469.444565040 I0728 14:54:52.733363 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-28 14:54:52.733334672 +0000 UTC m=+2469.444538140 E0728 14:54:52.749787 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 14:54:52.749830 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-28 14:54:52.749821626 +0000 UTC m=+2469.461025064 I0728 14:54:52.749884 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 14:54:52.753108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:52.753208 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-28 14:54:52.753199184 +0000 UTC m=+2469.464402632 E0728 14:54:52.760884 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0728 14:54:52.761005 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 14:54:52.761033 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 14:54:52.761067 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0728 14:54:52.779786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:52.817134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-tcnvq" condition "Approved" to 2026-07-28 14:54:52.817118832 +0000 UTC m=+2469.528322270 I0728 14:54:52.836833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-tcnvq" condition "Ready" to 2026-07-28 14:54:52.83681927 +0000 UTC m=+2469.548022708 I0728 14:54:52.863876 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:54:52.863861793 +0000 UTC m=+2469.575065231 I0728 14:54:52.888616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:52.889003 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:54:52.888991478 +0000 UTC m=+2469.600194946 I0728 14:54:52.893024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:52.905199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:52.905488 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:54:52.905478342 +0000 UTC m=+2469.616681780 I0728 14:54:53.518892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:54:53.518934 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-28 14:54:53.518920865 +0000 UTC m=+2470.230124303 I0728 14:54:53.519093 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 14:54:53.519068069 +0000 UTC m=+2470.230271527 I0728 14:54:53.538237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:53.538377 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 14:54:53.538366418 +0000 UTC m=+2470.249569856 I0728 14:54:53.559548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:53.559601 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 14:54:53.559594817 +0000 UTC m=+2470.270798245 I0728 14:54:53.561854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vzrnm" condition "Approved" to 2026-07-28 14:54:53.561837801 +0000 UTC m=+2470.273041239 I0728 14:54:53.574506 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 14:54:53.57449959 +0000 UTC m=+2470.285703028 I0728 14:54:53.583780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vzrnm" condition "Ready" to 2026-07-28 14:54:53.583772463 +0000 UTC m=+2470.294975901 I0728 14:54:53.655560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:57.068983 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:54:57.068964543 +0000 UTC m=+2473.780168001 I0728 14:54:57.081986 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-vzrnm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:54:57.081966898 +0000 UTC m=+2473.793170366 I0728 14:54:57.109836 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:54:57.109819747 +0000 UTC m=+2473.821023215 I0728 14:54:57.128193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:57.181943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:54:57.762256 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:54:57.762245918 +0000 UTC m=+2474.473449356 I0728 14:57:07.799809 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-28 14:57:07.799751768 +0000 UTC m=+2604.510955196 I0728 14:57:07.799937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:07.800514 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-28 14:57:07.800501403 +0000 UTC m=+2604.511704861 I0728 14:57:07.817960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:07.818055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:07.818076 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-28 14:57:07.818069528 +0000 UTC m=+2604.529272956 I0728 14:57:08.050073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:08.055477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-fmhgk" condition "Approved" to 2026-07-28 14:57:08.055463125 +0000 UTC m=+2604.766666563 I0728 14:57:08.075076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-fmhgk" condition "Ready" to 2026-07-28 14:57:08.075065241 +0000 UTC m=+2604.786268699 I0728 14:57:08.105696 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:08.105680264 +0000 UTC m=+2604.816883702 I0728 14:57:08.127063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:08.127469 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:08.127462083 +0000 UTC m=+2604.838665511 I0728 14:57:08.144869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:08.160403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:55.132108 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-28 14:57:55.132066962 +0000 UTC m=+2651.843270420 I0728 14:57:55.158823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:55.158860 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-28 14:57:55.158853089 +0000 UTC m=+2651.870056547 I0728 14:57:55.158820 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-28 14:57:55.158793968 +0000 UTC m=+2651.869997436 I0728 14:57:55.182136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:55.182209 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-28 14:57:55.182199538 +0000 UTC m=+2651.893402996 E0728 14:57:55.198659 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0728 14:57:55.248463 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-28 14:57:55.248446954 +0000 UTC m=+2651.959650392 I0728 14:57:55.268664 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-28 14:57:55.268643461 +0000 UTC m=+2651.979846919 I0728 14:57:55.269132 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:55.269162 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-28 14:57:55.269156092 +0000 UTC m=+2651.980359550 I0728 14:57:55.283814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:55.283857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:55.283875 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-28 14:57:55.283871171 +0000 UTC m=+2651.995074609 E0728 14:57:55.370818 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0728 14:57:55.440912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:55.465915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-fwfv5" condition "Approved" to 2026-07-28 14:57:55.465903047 +0000 UTC m=+2652.177106485 I0728 14:57:55.492593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-fwfv5" condition "Ready" to 2026-07-28 14:57:55.492578862 +0000 UTC m=+2652.203782320 I0728 14:57:55.526073 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:55.526061182 +0000 UTC m=+2652.237264620 I0728 14:57:55.559147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:56.190961 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-28 14:57:56.190948429 +0000 UTC m=+2652.902151857 I0728 14:57:56.216486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:56.216509 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-28 14:57:56.216503661 +0000 UTC m=+2652.927707089 I0728 14:57:56.216785 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-28 14:57:56.216779307 +0000 UTC m=+2652.927982735 I0728 14:57:56.238134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:56.238227 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-28 14:57:56.238188499 +0000 UTC m=+2652.949391927 I0728 14:57:56.488464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:56.550693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lsk7f" condition "Approved" to 2026-07-28 14:57:56.550679904 +0000 UTC m=+2653.261883332 I0728 14:57:56.576071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lsk7f" condition "Ready" to 2026-07-28 14:57:56.576055744 +0000 UTC m=+2653.287259182 I0728 14:57:56.615150 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:56.615132434 +0000 UTC m=+2653.326335882 I0728 14:57:56.652171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:56.652505 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:56.65249806 +0000 UTC m=+2653.363701488 I0728 14:57:56.676406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:56.702086 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-28 14:57:56.702069276 +0000 UTC m=+2653.413272704 I0728 14:57:56.724463 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-28 14:57:56.724450267 +0000 UTC m=+2653.435653695 I0728 14:57:56.724805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:56.724866 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-28 14:57:56.724854804 +0000 UTC m=+2653.436058232 I0728 14:57:56.744699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:56.744829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:56.744882 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-28 14:57:56.74487276 +0000 UTC m=+2653.456076198 I0728 14:57:57.023476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-thpls" condition "Approved" to 2026-07-28 14:57:57.023454417 +0000 UTC m=+2653.734657885 I0728 14:57:57.083273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-thpls" condition "Ready" to 2026-07-28 14:57:57.083264705 +0000 UTC m=+2653.794468133 I0728 14:57:57.152328 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:57.152313915 +0000 UTC m=+2653.863517333 I0728 14:57:57.179163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:57.261421 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-28 14:57:57.261401483 +0000 UTC m=+2653.972604911 I0728 14:57:57.290045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 14:57:57.290081 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-28 14:57:57.290071098 +0000 UTC m=+2654.001274536 I0728 14:57:57.290612 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-28 14:57:57.290605068 +0000 UTC m=+2654.001808506 I0728 14:57:57.304664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:57.304724 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-28 14:57:57.304719376 +0000 UTC m=+2654.015922814 I0728 14:57:57.515967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:57.603760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-mr547" condition "Approved" to 2026-07-28 14:57:57.603743727 +0000 UTC m=+2654.314947155 I0728 14:57:57.763371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-mr547" condition "Ready" to 2026-07-28 14:57:57.763357851 +0000 UTC m=+2654.474561279 I0728 14:57:58.146894 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:58.146879155 +0000 UTC m=+2654.858082603 I0728 14:57:58.291302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:58.291748 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:58.291737828 +0000 UTC m=+2655.002941286 I0728 14:57:58.450558 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 14:57:58.450545387 +0000 UTC m=+2655.161748825 I0728 14:57:58.497457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:58.546102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 14:57:58.642365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:01:23.960945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:01:23.961000 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-28 15:01:23.960986848 +0000 UTC m=+2860.672190306 I0728 15:01:23.961930 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-28 15:01:23.961920137 +0000 UTC m=+2860.673123595 I0728 15:01:23.981449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:01:23.981774 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-28 15:01:23.981768898 +0000 UTC m=+2860.692972336 I0728 15:01:24.094597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:01:24.125308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-sgp4z" condition "Approved" to 2026-07-28 15:01:24.125296036 +0000 UTC m=+2860.836499464 I0728 15:01:24.167005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-sgp4z" condition "Ready" to 2026-07-28 15:01:24.166994268 +0000 UTC m=+2860.878197706 I0728 15:01:24.196812 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:01:24.196789955 +0000 UTC m=+2860.907993423 I0728 15:01:24.229731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:01:26.725049 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-28 15:01:26.725030021 +0000 UTC m=+2863.436233459 I0728 15:01:26.725198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:01:26.725247 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-28 15:01:26.725237154 +0000 UTC m=+2863.436440572 I0728 15:01:26.742789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:01:26.742883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:01:26.742903 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-28 15:01:26.742898393 +0000 UTC m=+2863.454101821 I0728 15:01:27.003124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-7pzgc" condition "Approved" to 2026-07-28 15:01:27.003108381 +0000 UTC m=+2863.714311809 I0728 15:01:27.027648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-7pzgc" condition "Ready" to 2026-07-28 15:01:27.027629874 +0000 UTC m=+2863.738833312 I0728 15:01:27.060103 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:01:27.060093093 +0000 UTC m=+2863.771296521 I0728 15:01:27.077213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:07:23.039022 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-28 15:07:23.039005769 +0000 UTC m=+3219.750209207 I0728 15:07:23.039508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:07:23.039527 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-28 15:07:23.039523138 +0000 UTC m=+3219.750726576 I0728 15:07:23.063038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:07:23.063195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:07:23.063225 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-28 15:07:23.063217055 +0000 UTC m=+3219.774420523 I0728 15:07:23.235947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:07:23.245877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-xpjxq" condition "Approved" to 2026-07-28 15:07:23.245861023 +0000 UTC m=+3219.957064481 I0728 15:07:23.266285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-xpjxq" condition "Ready" to 2026-07-28 15:07:23.266265865 +0000 UTC m=+3219.977469323 I0728 15:07:23.302932 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:07:23.302917327 +0000 UTC m=+3220.014120795 I0728 15:07:23.326047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:07:58.731542 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-28 15:07:58.731523974 +0000 UTC m=+3255.442727442 I0728 15:07:58.732086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:07:58.732164 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 15:07:58.732156716 +0000 UTC m=+3255.443360144 I0728 15:07:58.750218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:07:58.750338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 15:07:58.750362 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 15:07:58.750355364 +0000 UTC m=+3255.461558802 I0728 15:07:58.977402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jpk67" condition "Approved" to 2026-07-28 15:07:58.977387217 +0000 UTC m=+3255.688590685 I0728 15:07:58.995271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jpk67" condition "Ready" to 2026-07-28 15:07:58.995262699 +0000 UTC m=+3255.706466137 I0728 15:07:59.025451 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:07:59.025435224 +0000 UTC m=+3255.736638672 I0728 15:07:59.042288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 15:07:59.042622 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 15:07:59.042616352 +0000 UTC m=+3255.753819790 I0728 15:07:59.076790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"