I0819 09:07:26.969295 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0819 09:07:26.969502 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0819 09:07:26.969588 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0819 09:07:26.973105 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0819 09:07:26.973548 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0819 09:07:26.973589 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0819 09:07:26.973630 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0819 09:07:26.976095 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0819 09:07:26.992527 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0819 09:07:26.998154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0819 09:07:27.006534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0819 09:07:27.008995 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0819 09:07:27.009061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0819 09:07:27.011496 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0819 09:07:27.011521 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0819 09:07:27.011712 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0819 09:07:27.014150 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0819 09:07:27.017141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0819 09:07:27.019343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0819 09:07:27.025017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0819 09:07:27.028648 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0819 09:07:27.028689 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0819 09:07:27.028744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0819 09:07:27.031663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0819 09:07:27.033359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0819 09:07:27.034992 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0819 09:07:27.035235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0819 09:07:27.036807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0819 09:07:27.038691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0819 09:07:27.040342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0819 09:07:27.044004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0819 09:07:27.046500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0819 09:07:27.048568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0819 09:07:27.050260 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.050422 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.052611 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.073909 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.093030 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.107884 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.126267 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.142067 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.145006 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:27.157794 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0819 09:07:40.996791 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-19 09:07:40.996776229 +0000 UTC m=+14.060692988 I0819 09:07:41.683713 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-19 09:07:41.683697575 +0000 UTC m=+14.747614334 I0819 09:07:41.683875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:07:41.683980 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-19 09:07:41.683967731 +0000 UTC m=+14.747884500 E0819 09:07:41.697461 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:07:41.697673 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-19 09:07:41.697659823 +0000 UTC m=+14.761576592 E0819 09:07:41.698175 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:07:41.700249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:07:41.700375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:07:41.700436 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-19 09:07:41.700429824 +0000 UTC m=+14.764346563 E0819 09:07:41.708542 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0819 09:07:41.708685 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:07:41.708759 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:07:41.708813 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0819 09:07:41.730811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:07:41.736606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x4ztd" condition "Approved" to 2026-08-19 09:07:41.736598661 +0000 UTC m=+14.800515400 I0819 09:07:41.750302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x4ztd" condition "Ready" to 2026-08-19 09:07:41.750292393 +0000 UTC m=+14.814209132 I0819 09:07:41.772427 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:07:41.772416771 +0000 UTC m=+14.836333510 I0819 09:07:41.788733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:07:41.829653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:07:46.709592 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:07:46.709578261 +0000 UTC m=+19.773495020 I0819 09:08:08.062005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:08:08.062042 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-19 09:08:08.062034545 +0000 UTC m=+41.125951284 I0819 09:08:08.062364 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-19 09:08:08.062340221 +0000 UTC m=+41.126257020 I0819 09:08:08.077925 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-19 09:08:08.077905184 +0000 UTC m=+41.141821923 I0819 09:08:08.092980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:08.093059 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-19 09:08:08.093050757 +0000 UTC m=+41.156967476 I0819 09:08:08.171615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:08:08.201963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-n8jzv" condition "Approved" to 2026-08-19 09:08:08.201951155 +0000 UTC m=+41.265867924 I0819 09:08:08.236643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-n8jzv" condition "Ready" to 2026-08-19 09:08:08.236628259 +0000 UTC m=+41.300545028 I0819 09:08:08.266847 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:08:08.266834694 +0000 UTC m=+41.330751423 I0819 09:08:08.288175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:12:50.206070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:12:50.206071 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-08-19 09:12:50.206048517 +0000 UTC m=+323.269965276 I0819 09:12:50.206129 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-08-19 09:12:50.206113758 +0000 UTC m=+323.270030527 I0819 09:12:50.228589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:12:50.228725 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:12:50.228767 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-08-19 09:12:50.228756618 +0000 UTC m=+323.292673387 I0819 09:12:50.474414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:12:50.485287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-7rt5w" condition "Approved" to 2026-08-19 09:12:50.48527377 +0000 UTC m=+323.549190529 I0819 09:12:50.511972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-7rt5w" condition "Ready" to 2026-08-19 09:12:50.511953862 +0000 UTC m=+323.575870621 I0819 09:12:50.537854 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:12:50.537833716 +0000 UTC m=+323.601750475 I0819 09:12:50.559898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:12:50.560409 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:12:50.560399213 +0000 UTC m=+323.624315982 I0819 09:12:50.568602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:12:50.584770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:00.209986 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-19 09:14:00.209963024 +0000 UTC m=+393.273879783 I0819 09:14:00.210080 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:00.210139 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-19 09:14:00.210124577 +0000 UTC m=+393.274041346 E0819 09:14:00.224025 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:14:00.224143 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-19 09:14:00.224130994 +0000 UTC m=+393.288047753 E0819 09:14:00.224185 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0819 09:14:00.226135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:00.226196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:00.226211 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-19 09:14:00.22620652 +0000 UTC m=+393.290123249 E0819 09:14:00.234148 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0819 09:14:00.234251 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:14:00.234290 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0819 09:14:00.234338 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0819 09:14:00.264698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rspvk" condition "Approved" to 2026-08-19 09:14:00.264674179 +0000 UTC m=+393.328590918 I0819 09:14:00.277518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rspvk" condition "Ready" to 2026-08-19 09:14:00.27750242 +0000 UTC m=+393.341419159 I0819 09:14:00.299104 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:00.299076197 +0000 UTC m=+393.362992986 I0819 09:14:00.327293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:00.330333 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:00.330323624 +0000 UTC m=+393.394240363 I0819 09:14:00.339781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:00.342193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:00.342493 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:00.342479628 +0000 UTC m=+393.406396397 I0819 09:14:05.234633 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:05.234593927 +0000 UTC m=+398.298510686 I0819 09:14:48.264753 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-19 09:14:48.26473261 +0000 UTC m=+441.328649349 I0819 09:14:48.264961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:48.265078 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-19 09:14:48.265068147 +0000 UTC m=+441.328984886 I0819 09:14:48.271578 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-19 09:14:48.271570056 +0000 UTC m=+441.335486795 I0819 09:14:48.275708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:48.275777 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-19 09:14:48.275764173 +0000 UTC m=+441.339680932 I0819 09:14:48.276498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:48.276545 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-19 09:14:48.276535971 +0000 UTC m=+441.340452710 I0819 09:14:48.276458 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-19 09:14:48.276435199 +0000 UTC m=+441.340351938 I0819 09:14:48.311080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:48.311154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:48.311180 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-19 09:14:48.311170796 +0000 UTC m=+441.375087535 I0819 09:14:48.311490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:48.311528 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-19 09:14:48.311523364 +0000 UTC m=+441.375440103 I0819 09:14:48.312593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:48.312752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:48.312827 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-19 09:14:48.312776313 +0000 UTC m=+441.376693052 I0819 09:14:48.666436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:48.667113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7gfvr" condition "Approved" to 2026-08-19 09:14:48.667001057 +0000 UTC m=+441.730917786 I0819 09:14:48.669111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zb2jn" condition "Approved" to 2026-08-19 09:14:48.669102626 +0000 UTC m=+441.733019355 I0819 09:14:48.687323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7gfvr" condition "Ready" to 2026-08-19 09:14:48.687310084 +0000 UTC m=+441.751226813 I0819 09:14:48.689266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zb2jn" condition "Ready" to 2026-08-19 09:14:48.689257619 +0000 UTC m=+441.753174358 I0819 09:14:48.723338 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:48.723319351 +0000 UTC m=+441.787236080 I0819 09:14:48.730225 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:48.730200499 +0000 UTC m=+441.794117258 I0819 09:14:48.750097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:48.759288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:48.759612 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:48.759606474 +0000 UTC m=+441.823523203 I0819 09:14:48.790994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:48.950879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0819 09:14:49.000191 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-nzpgn\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0819 09:14:49.358974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wb77v" condition "Approved" to 2026-08-19 09:14:49.358953269 +0000 UTC m=+442.422870008 I0819 09:14:49.530051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wb77v" condition "Ready" to 2026-08-19 09:14:49.530032978 +0000 UTC m=+442.593949707 I0819 09:14:50.033560 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-wb77v" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-mkfkm" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0819 09:14:50.105440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m7w9g" condition "Approved" to 2026-08-19 09:14:50.105420482 +0000 UTC m=+443.169337221 I0819 09:14:50.365932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m7w9g" condition "Ready" to 2026-08-19 09:14:50.365906145 +0000 UTC m=+443.429822904 I0819 09:14:50.653198 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:50.653174182 +0000 UTC m=+443.717090941 I0819 09:14:50.750703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:50.751103 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:50.75109512 +0000 UTC m=+443.815011849 I0819 09:14:50.954445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:57.553698 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls" condition "Ready" to 2026-08-19 09:14:57.553675276 +0000 UTC m=+450.617592045 I0819 09:14:57.553830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:57.553876 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls" condition "Issuing" to 2026-08-19 09:14:57.553863131 +0000 UTC m=+450.617779900 I0819 09:14:57.572521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:14:57.572625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:14:57.572656 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls" condition "Issuing" to 2026-08-19 09:14:57.572645302 +0000 UTC m=+450.636562041 I0819 09:14:57.946397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vnmbk-qfjxh" condition "Approved" to 2026-08-19 09:14:57.946380425 +0000 UTC m=+451.010297164 I0819 09:14:57.962744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vnmbk-qfjxh" condition "Ready" to 2026-08-19 09:14:57.96272631 +0000 UTC m=+451.026643049 I0819 09:14:57.992753 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:14:57.99273705 +0000 UTC m=+451.056653769 I0819 09:14:58.020724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vnmbk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:28.015957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:15:28.016002 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-19 09:15:28.015996064 +0000 UTC m=+481.079912803 I0819 09:15:28.015955 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-19 09:15:28.015933453 +0000 UTC m=+481.079850222 I0819 09:15:28.030786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:28.030859 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-19 09:15:28.030847511 +0000 UTC m=+481.094764250 I0819 09:15:28.303270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:28.336346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qwtg8" condition "Approved" to 2026-08-19 09:15:28.336329812 +0000 UTC m=+481.400246551 I0819 09:15:28.356068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qwtg8" condition "Ready" to 2026-08-19 09:15:28.35605016 +0000 UTC m=+481.419966909 I0819 09:15:28.390359 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:15:28.390340828 +0000 UTC m=+481.454257567 I0819 09:15:28.413290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:28.413678 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:15:28.413672047 +0000 UTC m=+481.477588786 I0819 09:15:28.432466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:15:28.433415 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:15:28.43321432 +0000 UTC m=+481.497131079 I0819 09:15:28.433960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:18:47.029642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:18:47.029749 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-19 09:18:47.029737927 +0000 UTC m=+680.093654696 I0819 09:18:47.029846 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-19 09:18:47.029826279 +0000 UTC m=+680.093743018 I0819 09:18:47.049796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:18:47.049878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:18:47.049909 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-19 09:18:47.049900004 +0000 UTC m=+680.113816743 I0819 09:18:47.404243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:18:47.418220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-f7672" condition "Approved" to 2026-08-19 09:18:47.418201072 +0000 UTC m=+680.482117841 I0819 09:18:47.438815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-f7672" condition "Ready" to 2026-08-19 09:18:47.438796139 +0000 UTC m=+680.502712908 I0819 09:18:47.467536 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:18:47.467522051 +0000 UTC m=+680.531438790 I0819 09:18:47.499915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:18:47.500737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:18:47.501316 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:18:47.501304448 +0000 UTC m=+680.565221217 I0819 09:18:47.518424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:18:47.518717 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:18:47.518708003 +0000 UTC m=+680.582624732 I0819 09:21:13.224578 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:21:13.224626 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-19 09:21:13.224605931 +0000 UTC m=+826.288522690 I0819 09:21:13.224677 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-08-19 09:21:13.224666842 +0000 UTC m=+826.288583601 I0819 09:21:13.243366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:21:13.243515 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-19 09:21:13.243500491 +0000 UTC m=+826.307417250 I0819 09:21:13.445542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:21:13.476296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-sp9cs" condition "Approved" to 2026-08-19 09:21:13.476248955 +0000 UTC m=+826.540165694 I0819 09:21:13.495987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-sp9cs" condition "Ready" to 2026-08-19 09:21:13.495974173 +0000 UTC m=+826.559890902 I0819 09:21:13.533238 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:21:13.533220678 +0000 UTC m=+826.597137417 I0819 09:21:13.566211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:21:13.566792 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:21:13.56678314 +0000 UTC m=+826.630699879 I0819 09:21:13.587281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:21:13.587781 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:21:13.587744957 +0000 UTC m=+826.651661726 I0819 09:22:15.389102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:22:15.389142 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-19 09:22:15.389132456 +0000 UTC m=+888.453049195 I0819 09:22:15.389832 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-19 09:22:15.389817611 +0000 UTC m=+888.453734350 I0819 09:22:15.405427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:22:15.405507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:22:15.405524 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-19 09:22:15.405517076 +0000 UTC m=+888.469433815 I0819 09:22:15.712595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:22:15.721622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6s98d" condition "Approved" to 2026-08-19 09:22:15.721613226 +0000 UTC m=+888.785529965 I0819 09:22:15.743175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6s98d" condition "Ready" to 2026-08-19 09:22:15.743165714 +0000 UTC m=+888.807082483 I0819 09:22:15.781302 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:22:15.781283556 +0000 UTC m=+888.845200315 I0819 09:22:15.802065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:22:15.802301 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:22:15.802292291 +0000 UTC m=+888.866209020 I0819 09:22:15.826499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:25:22.866143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:25:22.866222 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-19 09:25:22.866213173 +0000 UTC m=+1075.930129912 I0819 09:25:22.866946 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-19 09:25:22.86694028 +0000 UTC m=+1075.930857019 I0819 09:25:22.886362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:25:22.886455 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-19 09:25:22.88644597 +0000 UTC m=+1075.950362699 I0819 09:25:23.000359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:25:23.034918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7df8h" condition "Approved" to 2026-08-19 09:25:23.03490102 +0000 UTC m=+1076.098817749 I0819 09:25:23.058067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7df8h" condition "Ready" to 2026-08-19 09:25:23.058052672 +0000 UTC m=+1076.121969411 I0819 09:25:23.093734 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:25:23.093720197 +0000 UTC m=+1076.157636936 I0819 09:25:23.121788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:25:23.122393 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:25:23.122382593 +0000 UTC m=+1076.186299322 I0819 09:25:23.143532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:31:35.044801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:31:35.044885 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-19 09:31:35.044875277 +0000 UTC m=+1448.108792036 I0819 09:31:35.045128 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-19 09:31:35.045107922 +0000 UTC m=+1448.109024681 I0819 09:31:35.061143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:31:35.061279 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-19 09:31:35.061264087 +0000 UTC m=+1448.125180846 I0819 09:31:35.259691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:31:35.291482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-lxtld" condition "Approved" to 2026-08-19 09:31:35.291464509 +0000 UTC m=+1448.355381278 I0819 09:31:35.312150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-lxtld" condition "Ready" to 2026-08-19 09:31:35.312133354 +0000 UTC m=+1448.376050113 I0819 09:31:35.346062 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:31:35.346046619 +0000 UTC m=+1448.409963358 I0819 09:31:35.375574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:31:35.378233 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:31:35.378217995 +0000 UTC m=+1448.442134734 I0819 09:31:35.381513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:31:35.396831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:31:35.397239 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:31:35.397227104 +0000 UTC m=+1448.461143843 I0819 09:31:35.399244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:33:03.333861 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-19 09:33:03.333816383 +0000 UTC m=+1536.397733112 I0819 09:33:03.333942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:33:03.334071 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-19 09:33:03.334055839 +0000 UTC m=+1536.397972608 I0819 09:33:03.350751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:33:03.350836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:33:03.350867 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-19 09:33:03.350859578 +0000 UTC m=+1536.414776317 I0819 09:33:03.769138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-lqvnj" condition "Approved" to 2026-08-19 09:33:03.76912088 +0000 UTC m=+1536.833037609 I0819 09:33:03.789921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-lqvnj" condition "Ready" to 2026-08-19 09:33:03.789902799 +0000 UTC m=+1536.853819568 I0819 09:33:03.823907 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:33:03.823886785 +0000 UTC m=+1536.887803544 I0819 09:33:03.853858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:04.871099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:34:04.871144 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-19 09:34:04.871132719 +0000 UTC m=+1597.935049488 I0819 09:34:04.871646 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-08-19 09:34:04.87163701 +0000 UTC m=+1597.935553769 I0819 09:34:04.897292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:04.897617 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:34:04.897647 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-19 09:34:04.897640647 +0000 UTC m=+1597.961557376 I0819 09:34:04.952048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-nlg2b" condition "Approved" to 2026-08-19 09:34:04.952025284 +0000 UTC m=+1598.015942013 I0819 09:34:04.974727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-nlg2b" condition "Ready" to 2026-08-19 09:34:04.974716405 +0000 UTC m=+1598.038633134 I0819 09:34:05.008902 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:34:05.008779653 +0000 UTC m=+1598.072696392 I0819 09:34:05.028171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:05.028576 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:34:05.028564059 +0000 UTC m=+1598.092480818 I0819 09:34:05.043535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:05.052815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:05.550191 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:34:05.550240 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-19 09:34:05.550219163 +0000 UTC m=+1598.614135922 I0819 09:34:05.550276 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-19 09:34:05.550263894 +0000 UTC m=+1598.614180653 I0819 09:34:05.569953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:05.570058 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-19 09:34:05.57004607 +0000 UTC m=+1598.633962809 I0819 09:34:05.606419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:05.638256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-wq5c7" condition "Approved" to 2026-08-19 09:34:05.638231748 +0000 UTC m=+1598.702148517 I0819 09:34:05.654494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-wq5c7" condition "Ready" to 2026-08-19 09:34:05.654479125 +0000 UTC m=+1598.718395864 I0819 09:34:05.700030 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:34:05.700016362 +0000 UTC m=+1598.763933101 I0819 09:34:05.719541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:05.719714 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:34:05.719705676 +0000 UTC m=+1598.783622405 I0819 09:34:05.729582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:05.740228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:06.266936 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-08-19 09:34:06.266924996 +0000 UTC m=+1599.330841735 I0819 09:34:06.939886 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-08-19 09:34:06.939873341 +0000 UTC m=+1600.003790080 I0819 09:34:52.240734 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-19 09:34:52.240708575 +0000 UTC m=+1645.304625344 I0819 09:34:52.240819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:34:52.240888 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-19 09:34:52.240877439 +0000 UTC m=+1645.304794158 I0819 09:34:52.276835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:52.276996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:34:52.277039 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-19 09:34:52.277026995 +0000 UTC m=+1645.340943754 I0819 09:34:54.899078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-rrbzs" condition "Approved" to 2026-08-19 09:34:54.899064052 +0000 UTC m=+1647.962980791 I0819 09:34:54.934207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-rrbzs" condition "Ready" to 2026-08-19 09:34:54.934194473 +0000 UTC m=+1647.998111192 I0819 09:34:55.003493 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:34:55.003470631 +0000 UTC m=+1648.067387390 I0819 09:34:55.028656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:55.029291 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:34:55.029283141 +0000 UTC m=+1648.093199870 I0819 09:34:55.040662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:34:55.053115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:37:24.182777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:37:24.182867 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-19 09:37:24.182857967 +0000 UTC m=+1797.246774706 I0819 09:37:24.183089 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-19 09:37:24.183066512 +0000 UTC m=+1797.246983301 I0819 09:37:24.200805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:37:24.201042 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-19 09:37:24.201032495 +0000 UTC m=+1797.264949234 I0819 09:37:24.388693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:37:24.434589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tnb7x" condition "Approved" to 2026-08-19 09:37:24.434570828 +0000 UTC m=+1797.498487557 I0819 09:37:24.454955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tnb7x" condition "Ready" to 2026-08-19 09:37:24.454941986 +0000 UTC m=+1797.518858745 I0819 09:37:24.489173 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:37:24.489152655 +0000 UTC m=+1797.553069414 I0819 09:37:24.513625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:37:24.514037 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:37:24.514028175 +0000 UTC m=+1797.577944914 I0819 09:37:24.532634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:37:25.626373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:37:25.626421 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-08-19 09:37:25.626410251 +0000 UTC m=+1798.690327010 I0819 09:37:25.627050 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-19 09:37:25.627040225 +0000 UTC m=+1798.690956984 I0819 09:37:25.648026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:37:25.648102 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-19 09:37:25.648095199 +0000 UTC m=+1798.712011958 I0819 09:37:25.764917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:37:25.798650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-5c9d8" condition "Approved" to 2026-08-19 09:37:25.798636105 +0000 UTC m=+1798.862552824 I0819 09:37:25.824934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-5c9d8" condition "Ready" to 2026-08-19 09:37:25.824920925 +0000 UTC m=+1798.888837674 I0819 09:37:25.857587 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:37:25.85757207 +0000 UTC m=+1798.921488799 I0819 09:37:25.877785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:40:24.009693 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:40:24.009787 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-19 09:40:24.009779638 +0000 UTC m=+1977.073696387 I0819 09:40:24.009822 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-19 09:40:24.009800658 +0000 UTC m=+1977.073717397 I0819 09:40:24.028587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:40:24.028903 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-19 09:40:24.028890229 +0000 UTC m=+1977.092806988 I0819 09:40:24.179122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:40:24.220925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-kn8nz" condition "Approved" to 2026-08-19 09:40:24.220911509 +0000 UTC m=+1977.284828248 I0819 09:40:24.237957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-kn8nz" condition "Ready" to 2026-08-19 09:40:24.237945683 +0000 UTC m=+1977.301862412 I0819 09:40:24.270670 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:40:24.27065546 +0000 UTC m=+1977.334572229 I0819 09:40:24.288943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:40:24.289214 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:40:24.289206819 +0000 UTC m=+1977.353123558 I0819 09:40:24.309485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:40:24.320508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:41:33.511391 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-snj7m-api" condition "Ready" to 2026-08-19 09:41:33.511371223 +0000 UTC m=+2046.575287962 I0819 09:41:33.511772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-snj7m-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:41:33.511819 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-snj7m-api" condition "Issuing" to 2026-08-19 09:41:33.511806443 +0000 UTC m=+2046.575723172 I0819 09:41:33.513917 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-snj7m-vnc" condition "Ready" to 2026-08-19 09:41:33.51390991 +0000 UTC m=+2046.577826649 I0819 09:41:33.513977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-snj7m-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:41:33.514002 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-snj7m-vnc" condition "Issuing" to 2026-08-19 09:41:33.513997112 +0000 UTC m=+2046.577913851 I0819 09:41:33.530844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-snj7m-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-snj7m-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:41:33.530907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-snj7m-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:41:33.530927 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-snj7m-vnc" condition "Issuing" to 2026-08-19 09:41:33.530920174 +0000 UTC m=+2046.594836913 I0819 09:41:33.534460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-snj7m-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-snj7m-api\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:41:33.534518 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-snj7m-api" condition "Ready" to 2026-08-19 09:41:33.534514335 +0000 UTC m=+2046.598431074 I0819 09:41:34.089988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-snj7m-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-snj7m-api\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:41:34.148828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-snj7m-vnc-5kttv" condition "Approved" to 2026-08-19 09:41:34.148775898 +0000 UTC m=+2047.212692657 I0819 09:41:34.207539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-snj7m-api-qnmtl" condition "Approved" to 2026-08-19 09:41:34.207505433 +0000 UTC m=+2047.271422172 I0819 09:41:34.257311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-snj7m-vnc-5kttv" condition "Ready" to 2026-08-19 09:41:34.257297435 +0000 UTC m=+2047.321214174 I0819 09:41:34.257479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-snj7m-api-qnmtl" condition "Ready" to 2026-08-19 09:41:34.257459648 +0000 UTC m=+2047.321376387 I0819 09:41:34.359245 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-snj7m-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:41:34.359208004 +0000 UTC m=+2047.423124733 I0819 09:41:34.379087 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-snj7m-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:41:34.379064512 +0000 UTC m=+2047.442981281 I0819 09:41:34.404133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-snj7m-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-snj7m-api\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:41:34.404565 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-snj7m-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:41:34.404556567 +0000 UTC m=+2047.468473326 I0819 09:41:34.429562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-snj7m-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-snj7m-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:41:34.429998 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-snj7m-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:41:34.42999014 +0000 UTC m=+2047.493906939 I0819 09:41:34.574759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-snj7m-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-snj7m-api\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:41:34.654177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-snj7m-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-snj7m-api\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:41:34.662196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-snj7m-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-snj7m-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:42:59.976967 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-08-19 09:42:59.976951587 +0000 UTC m=+2133.040868326 I0819 09:42:59.977248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:42:59.977306 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-08-19 09:42:59.977294354 +0000 UTC m=+2133.041211113 I0819 09:42:59.992361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:42:59.992490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:42:59.992524 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-08-19 09:42:59.992514787 +0000 UTC m=+2133.056431546 I0819 09:43:00.211180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-l729c" condition "Approved" to 2026-08-19 09:43:00.211162598 +0000 UTC m=+2133.275079337 I0819 09:43:00.229136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-l729c" condition "Ready" to 2026-08-19 09:43:00.229123883 +0000 UTC m=+2133.293040612 I0819 09:43:00.259411 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:43:00.259395315 +0000 UTC m=+2133.323312054 I0819 09:43:00.285670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:43:00.286125 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:43:00.286116908 +0000 UTC m=+2133.350033637 I0819 09:43:00.292319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:43:00.305121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:43:00.305652 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:43:00.305630068 +0000 UTC m=+2133.369546807 I0819 09:43:00.315503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:38.113316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:46:38.113397 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-19 09:46:38.113388364 +0000 UTC m=+2351.177305093 I0819 09:46:38.113423 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-19 09:46:38.113407434 +0000 UTC m=+2351.177324193 I0819 09:46:38.136519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:38.136572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:46:38.136585 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-19 09:46:38.136580757 +0000 UTC m=+2351.200497496 I0819 09:46:38.488414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:38.498833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-nr4f9" condition "Approved" to 2026-08-19 09:46:38.498788601 +0000 UTC m=+2351.562705350 I0819 09:46:38.526942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-nr4f9" condition "Ready" to 2026-08-19 09:46:38.526930065 +0000 UTC m=+2351.590846794 I0819 09:46:38.570501 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:46:38.570480876 +0000 UTC m=+2351.634397635 I0819 09:46:38.593591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:38.594902 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:46:38.594891606 +0000 UTC m=+2351.658808355 I0819 09:46:38.623365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:38.634995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:39.597802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:46:39.597849 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-19 09:46:39.59783924 +0000 UTC m=+2352.661756009 I0819 09:46:39.597917 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-19 09:46:39.597888691 +0000 UTC m=+2352.661805460 I0819 09:46:39.615590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:39.615663 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-19 09:46:39.615657963 +0000 UTC m=+2352.679574702 I0819 09:46:39.689922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:39.718987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-wrfbg" condition "Approved" to 2026-08-19 09:46:39.7189736 +0000 UTC m=+2352.782890359 I0819 09:46:39.740949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-wrfbg" condition "Ready" to 2026-08-19 09:46:39.740936386 +0000 UTC m=+2352.804853125 I0819 09:46:39.771446 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:46:39.771425253 +0000 UTC m=+2352.835341982 I0819 09:46:39.804443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:39.804787 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:46:39.804774534 +0000 UTC m=+2352.868691283 I0819 09:46:39.812937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:46:39.823927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:48:59.951281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:48:59.951330 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-19 09:48:59.951318881 +0000 UTC m=+2493.015235620 I0819 09:48:59.951336 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-19 09:48:59.9513077 +0000 UTC m=+2493.015224469 E0819 09:48:59.967103 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0819 09:48:59.967183 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-08-19 09:48:59.967174408 +0000 UTC m=+2493.031091167 I0819 09:48:59.967209 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0819 09:48:59.967989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:48:59.968074 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-19 09:48:59.968066228 +0000 UTC m=+2493.031982987 E0819 09:48:59.979410 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0819 09:48:59.979777 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0819 09:48:59.979816 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0819 09:48:59.979843 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0819 09:48:59.988491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.017439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-4g94z" condition "Approved" to 2026-08-19 09:49:00.017420161 +0000 UTC m=+2493.081336930 I0819 09:49:00.041944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-4g94z" condition "Ready" to 2026-08-19 09:49:00.041926414 +0000 UTC m=+2493.105843183 I0819 09:49:00.065718 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:00.06570043 +0000 UTC m=+2493.129617179 I0819 09:49:00.088520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.088978 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:00.088968425 +0000 UTC m=+2493.152885164 I0819 09:49:00.106944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.111495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.112340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.112689 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:00.112677099 +0000 UTC m=+2493.176593838 I0819 09:49:00.624815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:49:00.624843 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-19 09:49:00.624838048 +0000 UTC m=+2493.688754777 I0819 09:49:00.625202 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-19 09:49:00.625180746 +0000 UTC m=+2493.689097515 E0819 09:49:00.642181 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0819 09:49:00.642223 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-08-19 09:49:00.64221486 +0000 UTC m=+2493.706131599 I0819 09:49:00.642273 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0819 09:49:00.652619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.652773 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-19 09:49:00.652757088 +0000 UTC m=+2493.716673827 E0819 09:49:00.655980 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0819 09:49:00.656081 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0819 09:49:00.656126 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0819 09:49:00.656173 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0819 09:49:00.673110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.699681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-4cgvg" condition "Approved" to 2026-08-19 09:49:00.699663196 +0000 UTC m=+2493.763579935 I0819 09:49:00.716119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-4cgvg" condition "Ready" to 2026-08-19 09:49:00.716100387 +0000 UTC m=+2493.780017126 I0819 09:49:00.749249 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:00.749219673 +0000 UTC m=+2493.813136442 I0819 09:49:00.778244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.778514 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:00.778501793 +0000 UTC m=+2493.842418532 I0819 09:49:00.859683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:00.861745 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:00.86172206 +0000 UTC m=+2493.925638789 I0819 09:49:00.909535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:01.363457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:49:01.363488 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-19 09:49:01.363481914 +0000 UTC m=+2494.427398643 I0819 09:49:01.363887 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-19 09:49:01.363857683 +0000 UTC m=+2494.427774452 I0819 09:49:01.405769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:01.405874 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-19 09:49:01.40585738 +0000 UTC m=+2494.469774099 I0819 09:49:01.412938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-f4m7r" condition "Approved" to 2026-08-19 09:49:01.41293117 +0000 UTC m=+2494.476847889 I0819 09:49:01.431549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-f4m7r" condition "Ready" to 2026-08-19 09:49:01.431531259 +0000 UTC m=+2494.495448008 I0819 09:49:04.980684 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:04.980668201 +0000 UTC m=+2498.044584940 I0819 09:49:04.996110 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-f4m7r" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:04.996092869 +0000 UTC m=+2498.060009628 I0819 09:49:05.027278 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:05.027259692 +0000 UTC m=+2498.091176461 I0819 09:49:05.046986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:05.047280 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:05.047272193 +0000 UTC m=+2498.111188932 I0819 09:49:05.063619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:49:05.658115 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:49:05.658104927 +0000 UTC m=+2498.722021646 I0819 09:51:14.430404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:51:14.430408 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-19 09:51:14.430389993 +0000 UTC m=+2627.494306792 I0819 09:51:14.430456 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-19 09:51:14.430447284 +0000 UTC m=+2627.494364063 I0819 09:51:14.447426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:51:14.447565 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-19 09:51:14.44755423 +0000 UTC m=+2627.511470989 I0819 09:51:14.527604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:51:14.557845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-5nsgl" condition "Approved" to 2026-08-19 09:51:14.557831876 +0000 UTC m=+2627.621748605 I0819 09:51:14.575344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-5nsgl" condition "Ready" to 2026-08-19 09:51:14.575333921 +0000 UTC m=+2627.639250650 I0819 09:51:14.603764 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:51:14.603745991 +0000 UTC m=+2627.667662740 I0819 09:51:14.630412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:01.111113 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-19 09:52:01.11108346 +0000 UTC m=+2674.175000199 I0819 09:52:01.129161 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-19 09:52:01.129141487 +0000 UTC m=+2674.193058246 I0819 09:52:01.129193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:52:01.129240 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-19 09:52:01.12922878 +0000 UTC m=+2674.193145539 I0819 09:52:01.143024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:01.143083 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-19 09:52:01.143075891 +0000 UTC m=+2674.206992650 E0819 09:52:01.166596 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0819 09:52:01.225539 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-19 09:52:01.22551076 +0000 UTC m=+2674.289427529 I0819 09:52:01.246516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:52:01.246536 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-19 09:52:01.246532324 +0000 UTC m=+2674.310449053 I0819 09:52:01.246769 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-19 09:52:01.246743539 +0000 UTC m=+2674.310660308 I0819 09:52:01.263444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:01.263588 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-19 09:52:01.263567918 +0000 UTC m=+2674.327484657 E0819 09:52:01.439653 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0819 09:52:01.850072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:01.898907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-4zrbx" condition "Approved" to 2026-08-19 09:52:01.898897495 +0000 UTC m=+2674.962814224 I0819 09:52:01.923992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-4zrbx" condition "Ready" to 2026-08-19 09:52:01.92397987 +0000 UTC m=+2674.987896599 I0819 09:52:01.966456 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:52:01.966442398 +0000 UTC m=+2675.030359127 I0819 09:52:01.984634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:02.066918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:02.172609 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-19 09:52:02.172593007 +0000 UTC m=+2675.236509746 I0819 09:52:02.207379 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-19 09:52:02.2073593 +0000 UTC m=+2675.271276039 I0819 09:52:02.207820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:52:02.207851 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-19 09:52:02.207845732 +0000 UTC m=+2675.271762471 I0819 09:52:02.228132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:02.228212 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-19 09:52:02.228204001 +0000 UTC m=+2675.292120740 I0819 09:52:02.342196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:02.399663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-rrhtj" condition "Approved" to 2026-08-19 09:52:02.399650257 +0000 UTC m=+2675.463566986 I0819 09:52:02.470513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-rrhtj" condition "Ready" to 2026-08-19 09:52:02.470501494 +0000 UTC m=+2675.534418223 I0819 09:52:02.557808 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:52:02.557797723 +0000 UTC m=+2675.621714452 I0819 09:52:02.593904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:02.594211 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:52:02.594205144 +0000 UTC m=+2675.658121863 I0819 09:52:02.632214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:02.643983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:02.730715 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-19 09:52:02.730698472 +0000 UTC m=+2675.794615201 I0819 09:52:02.752802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:52:02.752842 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-19 09:52:02.752830021 +0000 UTC m=+2675.816746760 I0819 09:52:02.753414 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-19 09:52:02.753404844 +0000 UTC m=+2675.817321583 I0819 09:52:02.774572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:02.774752 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-19 09:52:02.774744975 +0000 UTC m=+2675.838661704 I0819 09:52:03.012082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:03.090554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-vgs54" condition "Approved" to 2026-08-19 09:52:03.090543527 +0000 UTC m=+2676.154460256 I0819 09:52:03.181196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-vgs54" condition "Ready" to 2026-08-19 09:52:03.181181561 +0000 UTC m=+2676.245098280 I0819 09:52:03.245972 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:52:03.245956831 +0000 UTC m=+2676.309873580 I0819 09:52:03.276331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:03.276535 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:52:03.27652668 +0000 UTC m=+2676.340443409 I0819 09:52:03.335623 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-19 09:52:03.335607362 +0000 UTC m=+2676.399524101 I0819 09:52:03.360115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:52:03.360138 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-19 09:52:03.360133196 +0000 UTC m=+2676.424049925 I0819 09:52:03.360287 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-19 09:52:03.360283719 +0000 UTC m=+2676.424200448 I0819 09:52:03.387091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:03.387519 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:52:03.387507714 +0000 UTC m=+2676.451424453 I0819 09:52:03.490029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:03.592697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:03.592777 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-19 09:52:03.592769642 +0000 UTC m=+2676.656686361 I0819 09:52:03.868228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:04.014554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-kmctk" condition "Approved" to 2026-08-19 09:52:04.014538182 +0000 UTC m=+2677.078454921 I0819 09:52:04.046090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-kmctk" condition "Ready" to 2026-08-19 09:52:04.046076574 +0000 UTC m=+2677.109993323 I0819 09:52:04.540568 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:52:04.540544904 +0000 UTC m=+2677.604461673 I0819 09:52:04.686727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:52:04.687091 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:52:04.687082349 +0000 UTC m=+2677.750999078 I0819 09:52:04.912628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:55:12.323611 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-08-19 09:55:12.323598811 +0000 UTC m=+2865.387515540 I0819 09:55:12.323646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:55:12.323687 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-08-19 09:55:12.323675333 +0000 UTC m=+2865.387592102 I0819 09:55:12.349208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:55:12.349424 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-08-19 09:55:12.349410653 +0000 UTC m=+2865.413327422 I0819 09:55:12.436601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:55:12.469022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bw4d6" condition "Approved" to 2026-08-19 09:55:12.468877679 +0000 UTC m=+2865.532794418 I0819 09:55:12.490628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bw4d6" condition "Ready" to 2026-08-19 09:55:12.490617918 +0000 UTC m=+2865.554534647 I0819 09:55:12.529103 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:55:12.529088657 +0000 UTC m=+2865.593005396 I0819 09:55:12.559075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:55:12.559445 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:55:12.559438972 +0000 UTC m=+2865.623355711 I0819 09:55:12.580819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:55:14.973935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0819 09:55:14.973983 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-08-19 09:55:14.973973155 +0000 UTC m=+2868.037889914 I0819 09:55:14.974462 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-08-19 09:55:14.974452516 +0000 UTC m=+2868.038369275 I0819 09:55:14.992892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:55:14.992962 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-08-19 09:55:14.992955784 +0000 UTC m=+2868.056872513 I0819 09:55:15.324331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0819 09:55:15.354279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-tbxmr" condition "Approved" to 2026-08-19 09:55:15.354259045 +0000 UTC m=+2868.418175784 I0819 09:55:15.384137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-tbxmr" condition "Ready" to 2026-08-19 09:55:15.384125078 +0000 UTC m=+2868.448041817 I0819 09:55:15.414673 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-19 09:55:15.414659337 +0000 UTC m=+2868.478576076 I0819 09:55:15.444746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0819 09:56:09.651757 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0819 09:56:31.009696 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0819 09:56:31.009746 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0819 09:56:48.063514 1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again I0819 09:56:48.063802 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0819 09:56:48.063839 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0819 09:56:48.063893 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0819 09:56:48.063918 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0819 09:56:48.063983 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0819 09:56:48.064072 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0819 09:56:48.064092 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0819 09:56:48.064110 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0819 09:56:48.064129 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0819 09:56:48.064236 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0819 09:56:48.064299 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0819 09:56:48.064302 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0819 09:56:48.064338 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0819 09:56:48.064366 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0819 09:56:48.064388 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0819 09:56:48.064326 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0819 09:56:48.064407 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0819 09:56:48.064432 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" E0819 09:56:48.064581 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"