I0715 15:04:22.541183       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0715 15:04:22.541394       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0715 15:04:22.546104       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0715 15:04:22.546126       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0715 15:04:22.546135       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0715 15:04:22.546498       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0715 15:04:22.546625       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0715 15:04:22.546694       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0715 15:04:22.548536       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0715 15:04:23.085533       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0715 15:04:23.091588       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0715 15:04:23.098527       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0715 15:04:23.101242       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0715 15:04:23.101317       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0715 15:04:23.104602       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0715 15:04:23.113485       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0715 15:04:23.113594       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0715 15:04:23.113635       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0715 15:04:23.113368       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0715 15:04:23.129564       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0715 15:04:23.133709       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0715 15:04:23.141439       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0715 15:04:23.183623       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0715 15:04:23.185561       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0715 15:04:23.190703       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0715 15:04:23.192682       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0715 15:04:23.192752       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0715 15:04:23.195736       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0715 15:04:23.196770       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0715 15:04:23.199119       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0715 15:04:23.200704       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0715 15:04:23.202672       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0715 15:04:23.206213       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0715 15:04:23.212853       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.213717       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.214299       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0715 15:04:23.218089       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.218594       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.218726       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.218890       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.219152       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.219956       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.221612       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.221819       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:04:23.226387       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0715 15:09:11.044975       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:09:11.045146       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-15 15:09:11.045127799 +0000 UTC m=+288.543907180
I0715 15:09:11.045436       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-15 15:09:11.045425496 +0000 UTC m=+288.544204837
I0715 15:09:15.620443       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:09:16.621544       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:09:16.621666       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-15 15:09:16.621653917 +0000 UTC m=+294.120433288
I0715 15:09:19.901165       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:09:19.901355       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:09:19.901440       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-15 15:09:19.901426135 +0000 UTC m=+297.400205526
E0715 15:09:27.672634       1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{cinder-api-certs.18c27f1c024889cb  openstack    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Certificate,Namespace:openstack,Name:cinder-api-certs,UID:0c2125b9-fe1b-4b62-a974-82f7b0db6e69,APIVersion:cert-manager.io/v1,ResourceVersion:15027,FieldPath:,},Reason:Issuing,Message:Issuing certificate as Secret does not exist,Source:EventSource{Component:cert-manager-certificates-trigger,Host:,},FirstTimestamp:2026-07-15 15:09:20.666257867 +0000 UTC m=+298.165037248,LastTimestamp:2026-07-15 15:09:20.666257867 +0000 UTC m=+298.165037248,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificates-trigger,ReportingInstance:,}"
E0715 15:09:27.804847       1 controller.go:162] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.controller" key="openstack/cinder-api-certs"
E0715 15:09:36.027999       1 controller.go:162] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.controller" key="openstack/cinder-api-certs"
I0715 15:09:46.971051       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-07-15 15:09:46.971033804 +0000 UTC m=+324.469813155
I0715 15:09:50.543556       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-07-15 15:09:50.543535332 +0000 UTC m=+328.042314673
I0715 15:09:54.807927       1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.controller" key="openstack/cinder-api-certs" resource_name="cinder-api-certs" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="cinder-api-certs-1" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="cinder-api-certs-5j4st" resource_namespace="openstack" resource_kind="" resource_version=""
I0715 15:10:03.788700       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-07-15 15:10:03.788679706 +0000 UTC m=+341.287459087
I0715 15:10:08.537119       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-07-15 15:10:08.537101273 +0000 UTC m=+346.035880674
E0715 15:10:21.605817       1 controller.go:162] "re-queuing item due to error processing" err="failed to apply secret openstack/cinder-api-certs: Patch \"https://10.96.0.1:443/api/v1/namespaces/openstack/secrets/cinder-api-certs?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.controller" key="openstack/cinder-api-certs"
I0715 15:10:28.049449       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:10:28.049427992 +0000 UTC m=+365.548207363
E0715 15:10:32.607350       1 controller.go:162] "re-queuing item due to error processing" err="Put \"https://10.96.0.1:443/apis/cert-manager.io/v1/namespaces/openstack/certificates/cinder-api-certs/status\": context deadline exceeded" logger="cert-manager.controller" key="openstack/cinder-api-certs"
I0715 15:10:32.709677       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:10:32.710162       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:10:32.710156264 +0000 UTC m=+370.208935605
E0715 15:10:42.608799       1 controller.go:162] "re-queuing item due to error processing" err="Put \"https://10.96.0.1:443/apis/cert-manager.io/v1/namespaces/openstack/certificates/cinder-api-certs/status\": context deadline exceeded" logger="cert-manager.controller" key="openstack/cinder-api-certs"
I0715 15:10:50.408622       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
E0715 15:11:12.415892       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path
I0715 15:14:00.619894       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-15 15:14:00.619880176 +0000 UTC m=+578.118659527
I0715 15:14:00.620290       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:14:00.620401       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-15 15:14:00.620388448 +0000 UTC m=+578.119167819
I0715 15:14:00.630767       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:14:00.630889       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:14:00.630972       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-15 15:14:00.630914611 +0000 UTC m=+578.129693982
I0715 15:14:00.851190       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:14:00.866622       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-07-15 15:14:00.866605668 +0000 UTC m=+578.365385039
I0715 15:14:00.888891       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-07-15 15:14:00.888878483 +0000 UTC m=+578.387657834
I0715 15:14:00.923370       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:14:00.923352992 +0000 UTC m=+578.422132333
I0715 15:14:00.942268       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:14:00.943003       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:14:00.942995084 +0000 UTC m=+578.441774425
I0715 15:14:00.960904       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:15:27.508118       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-15 15:15:27.508103076 +0000 UTC m=+665.006882427
I0715 15:15:27.508276       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:15:27.508567       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-15 15:15:27.508550967 +0000 UTC m=+665.007330338
I0715 15:15:27.520517       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:15:27.520668       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:15:27.520712       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-15 15:15:27.520699289 +0000 UTC m=+665.019478660
I0715 15:15:27.564714       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:15:27.574967       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-07-15 15:15:27.574946534 +0000 UTC m=+665.073725905
I0715 15:15:27.594262       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-07-15 15:15:27.594244808 +0000 UTC m=+665.093024179
I0715 15:15:27.619609       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:15:27.619597087 +0000 UTC m=+665.118376458
I0715 15:15:27.645537       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:15:28.257953       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-15 15:15:28.257911145 +0000 UTC m=+665.756690496
I0715 15:15:28.258467       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:15:28.258483       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-15 15:15:28.258479579 +0000 UTC m=+665.757258930
I0715 15:15:28.273827       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:15:28.274037       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:15:28.274087       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-15 15:15:28.274070184 +0000 UTC m=+665.772849565
I0715 15:15:28.322441       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-07-15 15:15:28.322427497 +0000 UTC m=+665.821206848
I0715 15:15:28.335127       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-07-15 15:15:28.335118142 +0000 UTC m=+665.833897483
I0715 15:15:28.368681       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:15:28.368663988 +0000 UTC m=+665.867443329
I0715 15:15:28.389621       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:15:28.389968       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:15:28.38995951 +0000 UTC m=+665.888738841
I0715 15:15:28.394544       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:15:28.406422       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:15:28.984193       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-15 15:15:28.984178818 +0000 UTC m=+666.482958199
I0715 15:15:29.621412       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-15 15:15:29.621363069 +0000 UTC m=+667.120142440
I0715 15:16:15.287222       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-15 15:16:15.287203246 +0000 UTC m=+712.785982597
I0715 15:16:15.288422       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:16:15.288452       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-15 15:16:15.288447286 +0000 UTC m=+712.787226637
I0715 15:16:15.305879       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:16:15.306543       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-15 15:16:15.306530631 +0000 UTC m=+712.805310212
I0715 15:16:16.911595       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:16:16.954844       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-07-15 15:16:16.954833003 +0000 UTC m=+714.453612354
I0715 15:16:16.979482       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-07-15 15:16:16.979470465 +0000 UTC m=+714.478249816
I0715 15:16:17.019858       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:16:17.019840936 +0000 UTC m=+714.518620307
I0715 15:16:17.034664       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:16:17.036193       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:16:17.036187979 +0000 UTC m=+714.534967340
I0715 15:16:17.049730       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:16:17.060885       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:54.092476       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:19:54.092527       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-15 15:19:54.092515939 +0000 UTC m=+931.591295290
I0715 15:19:54.092687       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-15 15:19:54.092673153 +0000 UTC m=+931.591452524
I0715 15:19:54.103691       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:54.103812       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-15 15:19:54.103803931 +0000 UTC m=+931.602583272
I0715 15:19:54.258977       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:54.311406       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-07-15 15:19:54.311396182 +0000 UTC m=+931.810175523
I0715 15:19:54.334895       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-07-15 15:19:54.334881197 +0000 UTC m=+931.833660568
I0715 15:19:54.568694       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:19:54.568681759 +0000 UTC m=+932.067461110
I0715 15:19:54.601602       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:55.724484       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-15 15:19:55.724471358 +0000 UTC m=+933.223250729
I0715 15:19:55.725033       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:19:55.725162       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-15 15:19:55.725148474 +0000 UTC m=+933.223927845
I0715 15:19:55.739053       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:55.739166       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-15 15:19:55.739156651 +0000 UTC m=+933.237936032
I0715 15:19:56.133369       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:56.166472       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-07-15 15:19:56.166445685 +0000 UTC m=+933.665225056
I0715 15:19:56.321750       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-07-15 15:19:56.32173938 +0000 UTC m=+933.820518731
I0715 15:19:56.403822       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:19:56.403804203 +0000 UTC m=+933.902583544
I0715 15:19:56.435813       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:56.436903       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:56.437448       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:19:56.437440461 +0000 UTC m=+933.936219802
I0715 15:19:56.451118       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:19:56.453227       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:19:56.453217101 +0000 UTC m=+933.951996452
I0715 15:19:56.453248       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:23:10.871193       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9h8vz-api" condition "Ready" to 2026-07-15 15:23:10.871176939 +0000 UTC m=+1128.369956290
I0715 15:23:10.871435       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:23:10.871528       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9h8vz-api" condition "Issuing" to 2026-07-15 15:23:10.871517737 +0000 UTC m=+1128.370297108
I0715 15:23:10.910970       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9h8vz-vnc" condition "Ready" to 2026-07-15 15:23:10.910944338 +0000 UTC m=+1128.409723719
I0715 15:23:10.911228       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:23:10.911282       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9h8vz-vnc" condition "Issuing" to 2026-07-15 15:23:10.911266906 +0000 UTC m=+1128.410046277
I0715 15:23:10.913751       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9h8vz-api\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:23:10.913903       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:23:10.913952       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9h8vz-api" condition "Issuing" to 2026-07-15 15:23:10.913941751 +0000 UTC m=+1128.412721122
I0715 15:23:10.993860       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9h8vz-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:23:10.994167       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:23:10.994261       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-9h8vz-vnc" condition "Issuing" to 2026-07-15 15:23:10.994248978 +0000 UTC m=+1128.493028329
I0715 15:23:11.433937       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-9h8vz-api-1" condition "Approved" to 2026-07-15 15:23:11.433915775 +0000 UTC m=+1128.932695156
I0715 15:23:11.485477       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-9h8vz-api-1" condition "Ready" to 2026-07-15 15:23:11.485456188 +0000 UTC m=+1128.984235629
I0715 15:23:11.525528       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-9h8vz-vnc-1" condition "Approved" to 2026-07-15 15:23:11.525511434 +0000 UTC m=+1129.024290775
I0715 15:23:11.539876       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-9h8vz-vnc-1" condition "Ready" to 2026-07-15 15:23:11.53986147 +0000 UTC m=+1129.038640821
I0715 15:23:11.543300       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-9h8vz-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:23:11.543288423 +0000 UTC m=+1129.042067774
I0715 15:23:11.576553       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9h8vz-api\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:23:11.577608       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-9h8vz-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:23:11.57758661 +0000 UTC m=+1129.076366001
I0715 15:23:11.607481       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9h8vz-api\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:23:11.620333       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-9h8vz-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:23:11.620318991 +0000 UTC m=+1129.119098362
I0715 15:23:11.863816       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9h8vz-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:23:11.864983       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-9h8vz-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:23:11.864967853 +0000 UTC m=+1129.363747224
I0715 15:23:11.934494       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-9h8vz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-9h8vz-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:25:47.778071       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-15 15:25:47.778045536 +0000 UTC m=+1285.276824947
I0715 15:25:47.778408       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:25:47.778490       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-15 15:25:47.778472587 +0000 UTC m=+1285.277251968
I0715 15:25:47.828897       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:25:47.834071       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:25:47.834110       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-15 15:25:47.834102939 +0000 UTC m=+1285.332882280
I0715 15:25:48.064354       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-07-15 15:25:48.064328393 +0000 UTC m=+1285.563107774
I0715 15:25:48.082103       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-07-15 15:25:48.082091481 +0000 UTC m=+1285.580870812
I0715 15:25:48.110729       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:25:48.110714862 +0000 UTC m=+1285.609494203
I0715 15:25:48.129681       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:25:48.130361       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:25:48.130350236 +0000 UTC m=+1285.629129587
I0715 15:25:48.147064       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
E0715 15:27:37.974420       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path
I0715 15:31:33.146028       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-15 15:31:33.146016976 +0000 UTC m=+1630.644796327
I0715 15:31:33.146096       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:31:33.146155       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-15 15:31:33.146146829 +0000 UTC m=+1630.644926170
I0715 15:31:33.173904       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:31:33.174064       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-15 15:31:33.17405351 +0000 UTC m=+1630.672832871
I0715 15:31:33.443249       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:31:33.489775       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-07-15 15:31:33.489757116 +0000 UTC m=+1630.988536467
I0715 15:31:33.506904       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-07-15 15:31:33.506687039 +0000 UTC m=+1631.005466380
I0715 15:31:33.559526       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:31:33.559505848 +0000 UTC m=+1631.058285219
I0715 15:31:33.588908       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:31:33.589552       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:31:33.589540791 +0000 UTC m=+1631.088320132
I0715 15:31:33.614261       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:31:34.972903       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:31:34.973006       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-15 15:31:34.972992638 +0000 UTC m=+1632.471772079
I0715 15:31:34.974092       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-15 15:31:34.974078764 +0000 UTC m=+1632.472858135
I0715 15:31:34.993873       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:31:34.993980       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-15 15:31:34.9939614 +0000 UTC m=+1632.492740751
I0715 15:31:35.351639       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:31:35.389595       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-07-15 15:31:35.389571035 +0000 UTC m=+1632.888350406
I0715 15:31:35.409749       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-07-15 15:31:35.409738288 +0000 UTC m=+1632.908517629
I0715 15:31:35.443104       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:31:35.443088602 +0000 UTC m=+1632.941867943
I0715 15:31:35.460991       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:31:35.463310       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:31:35.463298485 +0000 UTC m=+1632.962077836
I0715 15:31:35.491119       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:31:35.491773       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:31:35.49176304 +0000 UTC m=+1632.990542401
E0715 15:33:54.006321       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path
I0715 15:36:16.451219       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-15 15:36:16.451190412 +0000 UTC m=+1913.949969783
I0715 15:36:16.451510       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:36:16.451620       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-15 15:36:16.451606993 +0000 UTC m=+1913.950386344
E0715 15:36:16.516862       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0715 15:36:16.517193       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:36:16.517336       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-15 15:36:16.517328077 +0000 UTC m=+1914.016107448
I0715 15:36:16.517331       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-15 15:36:16.517221394 +0000 UTC m=+1914.016000745
I0715 15:36:16.517513       1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0715 15:36:16.695388       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client"
E0715 15:36:16.695493       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0715 15:36:16.695524       1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0715 15:36:16.695732       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client"
I0715 15:36:16.754139       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:36:17.012285       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-07-15 15:36:17.012270107 +0000 UTC m=+1914.511049448
I0715 15:36:17.163299       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-07-15 15:36:17.163289253 +0000 UTC m=+1914.662068594
I0715 15:36:17.410093       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:36:17.410070166 +0000 UTC m=+1914.908849537
I0715 15:36:17.489257       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:36:17.489250       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-15 15:36:17.489225098 +0000 UTC m=+1914.988004449
I0715 15:36:17.489304       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-15 15:36:17.48929309 +0000 UTC m=+1914.988072441
I0715 15:36:17.619836       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:36:17.620306       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:36:17.620296017 +0000 UTC m=+1915.119075368
I0715 15:36:17.687110       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:36:17.687215       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:36:17.687245       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-15 15:36:17.687237801 +0000 UTC m=+1915.186017142
E0715 15:36:17.760481       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0715 15:36:17.760539       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-15 15:36:17.76052818 +0000 UTC m=+1915.259307541
I0715 15:36:17.760606       1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0715 15:36:17.865418       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server"
I0715 15:36:17.865742       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0715 15:36:17.866808       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0715 15:36:17.866846       1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0715 15:36:17.866895       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server"
I0715 15:36:17.911620       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-07-15 15:36:17.911597207 +0000 UTC m=+1915.410376588
I0715 15:36:18.086894       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-07-15 15:36:18.086874675 +0000 UTC m=+1915.585654026
I0715 15:36:18.277361       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:36:18.277340854 +0000 UTC m=+1915.776120235
I0715 15:36:18.385931       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:36:18.940668       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:36:18.940691       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-15 15:36:18.940676384 +0000 UTC m=+1916.439455765
I0715 15:36:18.940760       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-15 15:36:18.940753776 +0000 UTC m=+1916.439533117
I0715 15:36:19.076503       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:36:19.076698       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:36:19.076743       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-15 15:36:19.076732045 +0000 UTC m=+1916.575511436
I0715 15:36:19.303708       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-07-15 15:36:19.303692725 +0000 UTC m=+1916.802472086
I0715 15:36:19.326061       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-07-15 15:36:19.32604549 +0000 UTC m=+1916.824824831
I0715 15:36:21.696229       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:36:21.696207239 +0000 UTC m=+1919.194986590
I0715 15:36:21.709768       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:36:21.709746499 +0000 UTC m=+1919.208525840
I0715 15:36:21.734991       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:36:21.734977715 +0000 UTC m=+1919.233757046
I0715 15:36:21.760720       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:36:21.761799       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:36:21.761780239 +0000 UTC m=+1919.260559620
I0715 15:36:21.777202       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:36:22.867068       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:36:22.866907283 +0000 UTC m=+1920.365686634
E0715 15:41:19.631555       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path
I0715 15:42:53.177567       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:42:53.177629       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-15 15:42:53.177620756 +0000 UTC m=+2310.676400117
I0715 15:42:53.177674       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-15 15:42:53.177665387 +0000 UTC m=+2310.676444738
I0715 15:42:53.194274       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:42:53.194750       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:42:53.194788       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-15 15:42:53.194780782 +0000 UTC m=+2310.693560123
I0715 15:42:53.393810       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-07-15 15:42:53.393792811 +0000 UTC m=+2310.892572182
I0715 15:42:53.410432       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-07-15 15:42:53.410277691 +0000 UTC m=+2310.909057042
I0715 15:42:53.440132       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:42:53.440120164 +0000 UTC m=+2310.938899515
I0715 15:42:53.452634       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:42:53.453095       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:42:53.453088308 +0000 UTC m=+2310.951867659
I0715 15:42:53.473635       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:41.645288       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-15 15:43:41.645271299 +0000 UTC m=+2359.144050650
I0715 15:43:41.691223       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-15 15:43:41.691208982 +0000 UTC m=+2359.189988363
I0715 15:43:41.691232       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:43:41.691503       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-15 15:43:41.691484858 +0000 UTC m=+2359.190264269
I0715 15:43:41.742874       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:41.745523       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:43:41.745590       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-15 15:43:41.745580988 +0000 UTC m=+2359.244360339
E0715 15:43:41.769986       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller"
E0715 15:43:41.819371       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert"
I0715 15:43:41.911196       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-15 15:43:41.911180899 +0000 UTC m=+2359.409960250
I0715 15:43:41.951849       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:43:41.951902       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-15 15:43:41.951890615 +0000 UTC m=+2359.450669996
I0715 15:43:41.952362       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-15 15:43:41.952338596 +0000 UTC m=+2359.451117967
I0715 15:43:41.978983       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:41.979210       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:43:41.979252       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-15 15:43:41.979242888 +0000 UTC m=+2359.478022239
I0715 15:43:43.073547       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:43.073840       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-07-15 15:43:43.073830149 +0000 UTC m=+2360.572609500
I0715 15:43:43.164169       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-07-15 15:43:43.164152826 +0000 UTC m=+2360.662932197
I0715 15:43:43.320787       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:43:43.320768708 +0000 UTC m=+2360.819548079
I0715 15:43:43.627206       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:43.628444       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:43:43.62842927 +0000 UTC m=+2361.127208651
I0715 15:43:44.065197       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:44.803911       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:51.602972       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-15 15:43:51.602959903 +0000 UTC m=+2369.101739244
I0715 15:43:51.774958       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:43:51.775015       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-15 15:43:51.77500602 +0000 UTC m=+2369.273785361
I0715 15:43:51.775035       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-15 15:43:51.77501892 +0000 UTC m=+2369.273798271
I0715 15:43:52.054134       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:52.054277       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-15 15:43:52.054267973 +0000 UTC m=+2369.553047324
I0715 15:43:52.729734       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:52.932410       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-07-15 15:43:52.932397792 +0000 UTC m=+2370.431177173
I0715 15:43:53.011822       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-07-15 15:43:53.011811145 +0000 UTC m=+2370.510590496
I0715 15:43:53.165198       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:43:53.16518378 +0000 UTC m=+2370.663963151
I0715 15:43:53.227267       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:56.379185       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-15 15:43:56.379167432 +0000 UTC m=+2373.877946813
I0715 15:43:56.925668       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-15 15:43:56.925641208 +0000 UTC m=+2374.424420589
I0715 15:43:56.926054       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:43:56.926137       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-15 15:43:56.92612145 +0000 UTC m=+2374.424900831
I0715 15:43:57.474443       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:57.475268       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:43:57.475320       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-15 15:43:57.475312591 +0000 UTC m=+2374.974091952
I0715 15:43:58.994414       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-07-15 15:43:58.994396673 +0000 UTC m=+2376.493176034
I0715 15:43:59.003780       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:59.196674       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-07-15 15:43:59.196663862 +0000 UTC m=+2376.695443213
I0715 15:43:59.410550       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:43:59.410536762 +0000 UTC m=+2376.909316133
I0715 15:43:59.488551       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:59.489823       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:43:59.489815032 +0000 UTC m=+2376.988594383
I0715 15:43:59.690108       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:43:59.725807       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:44:01.863203       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-15 15:44:01.863190764 +0000 UTC m=+2379.361970115
I0715 15:44:01.964738       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:44:01.964803       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-15 15:44:01.964792675 +0000 UTC m=+2379.463572016
I0715 15:44:01.965198       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-15 15:44:01.965177224 +0000 UTC m=+2379.463956595
I0715 15:44:02.025656       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:44:02.025775       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:44:02.025819       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-15 15:44:02.025810303 +0000 UTC m=+2379.524589674
I0715 15:44:03.833663       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:44:03.834100       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-07-15 15:44:03.83408889 +0000 UTC m=+2381.332868241
I0715 15:44:04.096557       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-07-15 15:44:04.096542317 +0000 UTC m=+2381.595321668
I0715 15:44:04.749317       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:44:04.749298126 +0000 UTC m=+2382.248077497
I0715 15:44:05.152318       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:44:05.152834       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:44:05.152827609 +0000 UTC m=+2382.651606960
I0715 15:44:05.399749       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:49:19.076448       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:49:19.076531       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-15 15:49:19.076515783 +0000 UTC m=+2696.575295164
I0715 15:49:19.076984       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-15 15:49:19.076973394 +0000 UTC m=+2696.575752765
I0715 15:49:19.094883       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:49:19.094940       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-15 15:49:19.094935357 +0000 UTC m=+2696.593714708
I0715 15:49:19.470615       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:49:19.499558       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Approved" to 2026-07-15 15:49:19.499541283 +0000 UTC m=+2696.998320664
I0715 15:49:19.526989       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Ready" to 2026-07-15 15:49:19.526977435 +0000 UTC m=+2697.025756786
I0715 15:49:19.561673       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:49:19.561660372 +0000 UTC m=+2697.060439713
I0715 15:49:19.575055       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:49:19.617587       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:49:21.683772       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-15 15:49:21.68375867 +0000 UTC m=+2699.182538011
I0715 15:49:21.683957       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:49:21.684002       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-15 15:49:21.683996046 +0000 UTC m=+2699.182775387
I0715 15:49:21.694712       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:49:21.694829       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-15 15:49:21.694821067 +0000 UTC m=+2699.193600408
I0715 15:49:21.878288       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:49:21.908349       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Approved" to 2026-07-15 15:49:21.908332701 +0000 UTC m=+2699.407112042
I0715 15:49:21.924552       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Ready" to 2026-07-15 15:49:21.924534821 +0000 UTC m=+2699.423314162
I0715 15:49:21.961835       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:49:21.961824242 +0000 UTC m=+2699.460603583
I0715 15:49:21.972895       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:49:21.982568       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:03.806644       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:56:03.806699       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-15 15:56:03.806690639 +0000 UTC m=+3101.305469990
I0715 15:56:03.807006       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-15 15:56:03.806984546 +0000 UTC m=+3101.305763907
I0715 15:56:03.820508       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:03.820656       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-15 15:56:03.820643806 +0000 UTC m=+3101.319423157
I0715 15:56:03.996967       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:04.029691       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-07-15 15:56:04.029680199 +0000 UTC m=+3101.528459540
I0715 15:56:04.050509       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-07-15 15:56:04.050490061 +0000 UTC m=+3101.549269462
I0715 15:56:04.086397       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:56:04.086379646 +0000 UTC m=+3101.585158997
I0715 15:56:04.106081       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:04.106730       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:56:04.106720847 +0000 UTC m=+3101.605500178
I0715 15:56:04.121193       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:04.124558       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:45.181738       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-15 15:56:45.181718272 +0000 UTC m=+3142.680497653
I0715 15:56:45.181773       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0715 15:56:45.181827       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-15 15:56:45.181813174 +0000 UTC m=+3142.680592555
I0715 15:56:45.222816       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:45.223019       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-15 15:56:45.223005028 +0000 UTC m=+3142.721784429
I0715 15:56:45.712456       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:45.853323       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-15 15:56:45.853310524 +0000 UTC m=+3143.352089865
I0715 15:56:45.913724       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-15 15:56:45.913712531 +0000 UTC m=+3143.412491902
I0715 15:56:46.068178       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:56:46.068157257 +0000 UTC m=+3143.566936638
I0715 15:56:46.080749       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0715 15:56:46.081938       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-15 15:56:46.081924419 +0000 UTC m=+3143.580703770
I0715 15:56:46.102082       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"