I0421 17:41:58.068890       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0421 17:41:58.069100       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0421 17:41:58.069184       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0421 17:41:58.075894       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0421 17:41:58.076380       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0421 17:41:58.076504       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0421 17:41:58.076615       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0421 17:41:58.079237       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0421 17:41:58.099031       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0421 17:41:58.104910       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0421 17:41:58.107397       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0421 17:41:58.113598       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0421 17:41:58.116749       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0421 17:41:58.116791       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0421 17:41:58.116883       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0421 17:41:58.119531       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0421 17:41:58.121811       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0421 17:41:58.123903       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0421 17:41:58.125708       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0421 17:41:58.127326       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0421 17:41:58.127527       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0421 17:41:58.135522       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0421 17:41:58.135635       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0421 17:41:58.139054       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0421 17:41:58.142005       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0421 17:41:58.144244       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0421 17:41:58.144275       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0421 17:41:58.144372       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0421 17:41:58.146487       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0421 17:41:58.148625       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0421 17:41:58.153256       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0421 17:41:58.156565       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0421 17:41:58.159578       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0421 17:41:58.163476       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.166414       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.166995       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.186138       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.201829       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.218619       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.234459       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.257585       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.257933       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:41:58.275132       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0421 17:42:11.262796       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 17:42:11.26278225 +0000 UTC m=+13.228627062
I0421 17:42:12.099573       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:42:12.09955525 +0000 UTC m=+14.065400072
I0421 17:42:12.099708       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:42:12.099787       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:42:12.099777735 +0000 UTC m=+14.065622557
E0421 17:42:12.119157       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0421 17:42:12.119338       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 17:42:12.119326876 +0000 UTC m=+14.085171698
E0421 17:42:12.119374       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0421 17:42:12.124691       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:12.124886       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:42:12.124873418 +0000 UTC m=+14.090718260
E0421 17:42:12.131826       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0421 17:42:12.132070       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0421 17:42:12.132114       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0421 17:42:12.132353       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0421 17:42:12.139352       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:12.139444       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:42:12.13943806 +0000 UTC m=+14.105282882
I0421 17:42:12.150244       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:12.154329       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hjgkz" condition "Approved" to 2026-04-21 17:42:12.154316729 +0000 UTC m=+14.120161581
I0421 17:42:12.167004       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hjgkz" condition "Ready" to 2026-04-21 17:42:12.166986777 +0000 UTC m=+14.132831599
I0421 17:42:12.194025       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:12.194014664 +0000 UTC m=+14.159859486
I0421 17:42:12.210744       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:12.259177       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:17.132431       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:17.132412418 +0000 UTC m=+19.098257230
I0421 17:42:36.486829       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:42:36.486809662 +0000 UTC m=+38.452654484
I0421 17:42:36.486952       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:42:36.487080       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 17:42:36.487069378 +0000 UTC m=+38.452914220
I0421 17:42:36.500801       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 17:42:36.500778291 +0000 UTC m=+38.466623143
I0421 17:42:36.517097       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:36.517295       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:42:36.517162823 +0000 UTC m=+38.483007635
I0421 17:42:36.793446       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:36.827381       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fch26" condition "Approved" to 2026-04-21 17:42:36.827327632 +0000 UTC m=+38.793172454
I0421 17:42:36.866354       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fch26" condition "Ready" to 2026-04-21 17:42:36.866338686 +0000 UTC m=+38.832183498
I0421 17:42:36.894980       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:36.89495897 +0000 UTC m=+38.860803792
I0421 17:42:36.919950       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:36.920308       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:36.920300701 +0000 UTC m=+38.886145513
I0421 17:42:36.942488       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:42:36.942730       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:42:36.942722017 +0000 UTC m=+38.908566819
I0421 17:42:36.945548       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:47:10.903056       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:47:10.903091       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-04-21 17:47:10.903084947 +0000 UTC m=+312.868929759
I0421 17:47:10.903184       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-21 17:47:10.903162609 +0000 UTC m=+312.869007451
I0421 17:47:10.920730       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:47:10.920847       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-21 17:47:10.920837345 +0000 UTC m=+312.886682167
I0421 17:47:11.236292       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:47:11.265241       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-fgs29" condition "Approved" to 2026-04-21 17:47:11.265225924 +0000 UTC m=+313.231070746
I0421 17:47:11.299683       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-fgs29" condition "Ready" to 2026-04-21 17:47:11.299670306 +0000 UTC m=+313.265515128
I0421 17:47:11.330204       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:47:11.330189625 +0000 UTC m=+313.296034467
I0421 17:47:11.351280       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:47:11.351961       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:47:11.351947027 +0000 UTC m=+313.317791889
I0421 17:47:11.371721       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:47:11.372083       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:47:11.372072515 +0000 UTC m=+313.337917337
I0421 17:48:20.295767       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 17:48:20.295687806 +0000 UTC m=+382.261532668
I0421 17:48:20.295973       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:48:20.296059       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:48:20.296042415 +0000 UTC m=+382.261887267
E0421 17:48:20.308799       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0421 17:48:20.308894       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 17:48:20.308884437 +0000 UTC m=+382.274729259
E0421 17:48:20.308969       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0421 17:48:20.311290       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:48:20.311429       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:48:20.311476       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:48:20.311457201 +0000 UTC m=+382.277302013
E0421 17:48:20.324990       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0421 17:48:20.325220       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0421 17:48:20.325339       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0421 17:48:20.325443       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0421 17:48:20.358509       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dz44f" condition "Approved" to 2026-04-21 17:48:20.358494271 +0000 UTC m=+382.324339113
I0421 17:48:20.403701       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dz44f" condition "Ready" to 2026-04-21 17:48:20.40367947 +0000 UTC m=+382.369524322
I0421 17:48:20.437169       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:20.437147001 +0000 UTC m=+382.402991843
I0421 17:48:20.454305       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:48:20.454776       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:20.454765264 +0000 UTC m=+382.420610086
I0421 17:48:20.472498       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:48:25.326069       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:48:25.326051362 +0000 UTC m=+387.291896214
I0421 17:49:07.512504       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:49:07.512600       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:49:07.512592316 +0000 UTC m=+429.478437128
I0421 17:49:07.513097       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 17:49:07.513091098 +0000 UTC m=+429.478935910
I0421 17:49:07.513555       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:49:07.513550517 +0000 UTC m=+429.479395339
I0421 17:49:07.514222       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 17:49:07.514195341 +0000 UTC m=+429.480040163
I0421 17:49:07.514689       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:49:07.514714       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:49:07.514710582 +0000 UTC m=+429.480555404
I0421 17:49:07.515061       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:49:07.515082       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:49:07.515077759 +0000 UTC m=+429.480922581
I0421 17:49:07.554037       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:07.554105       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:49:07.554126       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:49:07.554118288 +0000 UTC m=+429.519963110
I0421 17:49:07.556504       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:07.556559       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:49:07.55655292 +0000 UTC m=+429.522397742
I0421 17:49:07.560618       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:07.560823       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 17:49:07.56074955 +0000 UTC m=+429.526594382
I0421 17:49:07.655267       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:07.710334       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mv4fk" condition "Approved" to 2026-04-21 17:49:07.710314166 +0000 UTC m=+429.676158988
I0421 17:49:07.737696       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mv4fk" condition "Ready" to 2026-04-21 17:49:07.737680897 +0000 UTC m=+429.703525739
I0421 17:49:07.772493       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:07.772482256 +0000 UTC m=+429.738327068
I0421 17:49:07.796759       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:07.797266       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:07.797255742 +0000 UTC m=+429.763100564
I0421 17:49:07.821165       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:07.901874       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:07.939232       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-twjch" condition "Approved" to 2026-04-21 17:49:07.939221687 +0000 UTC m=+429.905066489
I0421 17:49:07.957811       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-twjch" condition "Ready" to 2026-04-21 17:49:07.957798501 +0000 UTC m=+429.923643323
I0421 17:49:07.987749       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:07.987734347 +0000 UTC m=+429.953579169
I0421 17:49:08.014821       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:08.015255       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:08.015247931 +0000 UTC m=+429.981092743
I0421 17:49:08.150876       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:08.406982       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tvtkr" condition "Approved" to 2026-04-21 17:49:08.4069595 +0000 UTC m=+430.372804322
I0421 17:49:08.765913       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tvtkr" condition "Ready" to 2026-04-21 17:49:08.765901702 +0000 UTC m=+430.731746504
I0421 17:49:08.953993       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:08.953972976 +0000 UTC m=+430.919817788
I0421 17:49:09.051703       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:09.052075       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:09.052068769 +0000 UTC m=+431.017913581
I0421 17:49:09.248590       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:16.163859       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:49:16.163929       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls" condition "Issuing" to 2026-04-21 17:49:16.163914185 +0000 UTC m=+438.129759047
I0421 17:49:16.163966       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls" condition "Ready" to 2026-04-21 17:49:16.163935936 +0000 UTC m=+438.129780768
I0421 17:49:16.186054       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:16.186326       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls" condition "Ready" to 2026-04-21 17:49:16.186305601 +0000 UTC m=+438.152150423
I0421 17:49:16.593317       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:16.628432       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q5gxn-79rdb" condition "Approved" to 2026-04-21 17:49:16.628406238 +0000 UTC m=+438.594251060
I0421 17:49:16.645964       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q5gxn-79rdb" condition "Ready" to 2026-04-21 17:49:16.645947361 +0000 UTC m=+438.611792173
I0421 17:49:16.675501       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:16.675483638 +0000 UTC m=+438.641328460
I0421 17:49:16.696689       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q5gxn-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:42.154838       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 17:49:42.154818873 +0000 UTC m=+464.120663695
I0421 17:49:42.154949       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:49:42.155013       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:49:42.155002307 +0000 UTC m=+464.120847109
I0421 17:49:42.187471       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:42.187617       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:49:42.187657       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:49:42.18764564 +0000 UTC m=+464.153490482
I0421 17:49:42.422796       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:42.429166       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6j5vr" condition "Approved" to 2026-04-21 17:49:42.429144938 +0000 UTC m=+464.394989750
I0421 17:49:42.449344       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6j5vr" condition "Ready" to 2026-04-21 17:49:42.449329937 +0000 UTC m=+464.415174759
I0421 17:49:42.482679       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:42.482659275 +0000 UTC m=+464.448504097
I0421 17:49:42.504981       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:49:42.505408       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:42.505395888 +0000 UTC m=+464.471240710
I0421 17:49:42.529003       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:52:58.004810       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:52:58.004875       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:52:58.004862955 +0000 UTC m=+659.970707797
I0421 17:52:58.005036       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:52:58.005009958 +0000 UTC m=+659.970854810
I0421 17:52:58.021756       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:52:58.021848       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:52:58.021869       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:52:58.021861975 +0000 UTC m=+659.987706797
I0421 17:52:58.175954       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dszc5" condition "Approved" to 2026-04-21 17:52:58.175937661 +0000 UTC m=+660.141782483
I0421 17:52:58.195921       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dszc5" condition "Ready" to 2026-04-21 17:52:58.195909825 +0000 UTC m=+660.161754647
I0421 17:52:58.230949       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:58.230926877 +0000 UTC m=+660.196771719
I0421 17:52:58.253200       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:52:58.307013       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:55:22.358930       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-21 17:55:22.358908555 +0000 UTC m=+804.324753407
I0421 17:55:22.359502       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:55:22.359600       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-21 17:55:22.359586789 +0000 UTC m=+804.325431641
I0421 17:55:22.378004       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:55:22.378112       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-21 17:55:22.378101999 +0000 UTC m=+804.343946821
I0421 17:55:22.469360       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:55:22.505256       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xskcs" condition "Approved" to 2026-04-21 17:55:22.505240621 +0000 UTC m=+804.471085443
I0421 17:55:22.524537       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xskcs" condition "Ready" to 2026-04-21 17:55:22.524523998 +0000 UTC m=+804.490368800
I0421 17:55:22.560593       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:22.560578548 +0000 UTC m=+804.526423350
I0421 17:55:22.587134       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:55:22.590984       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:22.590969958 +0000 UTC m=+804.556814810
I0421 17:55:22.611120       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:55:22.611363       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:22.611359009 +0000 UTC m=+804.577203821
I0421 17:56:21.133108       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:56:21.133159       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-21 17:56:21.133150983 +0000 UTC m=+863.098995785
I0421 17:56:21.133695       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-21 17:56:21.133691065 +0000 UTC m=+863.099535877
I0421 17:56:21.153607       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:56:21.153688       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-21 17:56:21.153679806 +0000 UTC m=+863.119524618
I0421 17:56:21.438881       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:56:21.474400       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4vvd8" condition "Approved" to 2026-04-21 17:56:21.47437771 +0000 UTC m=+863.440222522
I0421 17:56:21.510036       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4vvd8" condition "Ready" to 2026-04-21 17:56:21.510017282 +0000 UTC m=+863.475862124
I0421 17:56:21.543241       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:56:21.543220132 +0000 UTC m=+863.509064964
I0421 17:56:21.569913       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:59:24.629277       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:59:24.629370       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-21 17:59:24.629358807 +0000 UTC m=+1046.595203689
I0421 17:59:24.629505       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-21 17:59:24.629482449 +0000 UTC m=+1046.595327341
I0421 17:59:24.649469       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 17:59:24.649588       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 17:59:24.649622       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-21 17:59:24.649614612 +0000 UTC m=+1046.615459434
I0421 17:59:24.812913       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-5spf7" condition "Approved" to 2026-04-21 17:59:24.812897436 +0000 UTC m=+1046.778742258
I0421 17:59:24.832410       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-5spf7" condition "Ready" to 2026-04-21 17:59:24.832398194 +0000 UTC m=+1046.798242996
I0421 17:59:24.864838       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:59:24.864819655 +0000 UTC m=+1046.830664477
I0421 17:59:24.902200       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:05:34.844780       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-21 18:05:34.844755923 +0000 UTC m=+1416.810600775
I0421 18:05:34.844846       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:05:34.844902       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-21 18:05:34.844896176 +0000 UTC m=+1416.810741008
I0421 18:05:34.863046       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:05:34.863323       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:05:34.863351       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-21 18:05:34.863342133 +0000 UTC m=+1416.829186945
I0421 18:05:35.061691       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:05:35.070876       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-clkrl" condition "Approved" to 2026-04-21 18:05:35.070864558 +0000 UTC m=+1417.036709370
I0421 18:05:35.095286       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-clkrl" condition "Ready" to 2026-04-21 18:05:35.095271588 +0000 UTC m=+1417.061116410
I0421 18:05:35.123951       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:35.123941414 +0000 UTC m=+1417.089786226
I0421 18:05:35.150904       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:05:35.151425       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:35.151416336 +0000 UTC m=+1417.117261158
I0421 18:05:35.173586       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:05:35.174059       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:05:35.174047259 +0000 UTC m=+1417.139892091
I0421 18:05:35.175657       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:06:58.019612       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-21 18:06:58.019597004 +0000 UTC m=+1499.985441816
I0421 18:06:58.019640       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:06:58.019688       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-21 18:06:58.019679676 +0000 UTC m=+1499.985524498
I0421 18:06:58.039680       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:06:58.039767       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-21 18:06:58.039758396 +0000 UTC m=+1500.005603218
I0421 18:06:58.328291       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:06:58.367998       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nx2vl" condition "Approved" to 2026-04-21 18:06:58.36798058 +0000 UTC m=+1500.333825412
I0421 18:06:58.390640       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nx2vl" condition "Ready" to 2026-04-21 18:06:58.390627444 +0000 UTC m=+1500.356472256
I0421 18:06:58.422672       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:06:58.422657504 +0000 UTC m=+1500.388502316
I0421 18:06:58.453928       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:06:58.454164       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:06:58.454156125 +0000 UTC m=+1500.420000937
I0421 18:06:58.462694       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:06:58.474990       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:07:57.843843       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:07:57.843897       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-21 18:07:57.843877122 +0000 UTC m=+1559.809721974
I0421 18:07:57.843949       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-21 18:07:57.843884702 +0000 UTC m=+1559.809729544
I0421 18:07:57.869867       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:07:57.869932       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:07:57.870076       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-21 18:07:57.87006762 +0000 UTC m=+1559.835912442
I0421 18:07:57.916254       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:07:57.922253       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-d5tb8" condition "Approved" to 2026-04-21 18:07:57.922231123 +0000 UTC m=+1559.888075935
I0421 18:07:57.952049       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-d5tb8" condition "Ready" to 2026-04-21 18:07:57.952035628 +0000 UTC m=+1559.917880440
I0421 18:07:57.984099       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:57.984082008 +0000 UTC m=+1559.949926820
I0421 18:07:58.006891       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:07:58.570910       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-21 18:07:58.570892917 +0000 UTC m=+1560.536737739
I0421 18:07:58.570951       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:07:58.570973       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-21 18:07:58.570967269 +0000 UTC m=+1560.536812101
I0421 18:07:58.596422       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:07:58.596575       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-21 18:07:58.596561506 +0000 UTC m=+1560.562406348
I0421 18:07:58.627648       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-nf94j" condition "Approved" to 2026-04-21 18:07:58.627629336 +0000 UTC m=+1560.593474178
I0421 18:07:58.633236       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:07:58.633538       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-21 18:07:58.633526059 +0000 UTC m=+1560.599370901
I0421 18:07:58.649623       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-nf94j" condition "Ready" to 2026-04-21 18:07:58.649608976 +0000 UTC m=+1560.615453788
I0421 18:07:58.679363       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:58.679343719 +0000 UTC m=+1560.645188541
I0421 18:07:58.699336       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:07:58.699647       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:58.699636463 +0000 UTC m=+1560.665481285
I0421 18:07:58.720860       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:07:59.279427       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-21 18:07:59.279410255 +0000 UTC m=+1561.245255097
I0421 18:07:59.985842       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-21 18:07:59.98582495 +0000 UTC m=+1561.951669802
I0421 18:08:39.893815       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-21 18:08:39.893794536 +0000 UTC m=+1601.859639358
I0421 18:08:39.894374       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:08:39.894410       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-21 18:08:39.89440416 +0000 UTC m=+1601.860248992
I0421 18:08:39.939692       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:08:39.939818       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-21 18:08:39.93980509 +0000 UTC m=+1601.905649942
I0421 18:08:41.782382       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:08:41.889509       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-fbz28" condition "Approved" to 2026-04-21 18:08:41.889495839 +0000 UTC m=+1603.855340641
I0421 18:08:41.948964       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-fbz28" condition "Ready" to 2026-04-21 18:08:41.94895174 +0000 UTC m=+1603.914796562
I0421 18:08:42.046348       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:08:42.04633062 +0000 UTC m=+1604.012175442
I0421 18:08:42.094242       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:08:42.094986       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:08:42.094977699 +0000 UTC m=+1604.060822521
I0421 18:08:42.109860       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:08:42.165449       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:14.845582       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-21 18:11:14.845561064 +0000 UTC m=+1756.811405916
I0421 18:11:14.845635       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:11:14.845725       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-21 18:11:14.845715557 +0000 UTC m=+1756.811560399
I0421 18:11:14.867844       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:14.867932       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:11:14.867956       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-21 18:11:14.867948 +0000 UTC m=+1756.833792852
I0421 18:11:15.027750       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:15.037728       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-bmsp7" condition "Approved" to 2026-04-21 18:11:15.037713297 +0000 UTC m=+1757.003558119
I0421 18:11:15.068396       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-bmsp7" condition "Ready" to 2026-04-21 18:11:15.06838359 +0000 UTC m=+1757.034228422
I0421 18:11:15.105476       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:15.105461619 +0000 UTC m=+1757.071306441
I0421 18:11:15.140628       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:15.141422       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:15.141414056 +0000 UTC m=+1757.107259028
I0421 18:11:15.162565       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:15.163035       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:15.163025026 +0000 UTC m=+1757.128869848
I0421 18:11:16.373028       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-21 18:11:16.373013078 +0000 UTC m=+1758.338857920
I0421 18:11:16.373103       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:11:16.373123       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-21 18:11:16.37311851 +0000 UTC m=+1758.338963322
I0421 18:11:16.387885       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:16.387954       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:11:16.387968       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-21 18:11:16.387963316 +0000 UTC m=+1758.353808138
I0421 18:11:16.513931       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:16.524728       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-vvpsc" condition "Approved" to 2026-04-21 18:11:16.524708568 +0000 UTC m=+1758.490553400
I0421 18:11:16.543541       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-vvpsc" condition "Ready" to 2026-04-21 18:11:16.543525758 +0000 UTC m=+1758.509370600
I0421 18:11:16.575652       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:16.575634693 +0000 UTC m=+1758.541479525
I0421 18:11:16.597562       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:16.597775       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:11:16.597767134 +0000 UTC m=+1758.563611936
I0421 18:11:16.620320       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:11:16.625586       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:14:24.829447       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:14:24.829485       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-21 18:14:24.829477395 +0000 UTC m=+1946.795322217
I0421 18:14:24.830026       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-21 18:14:24.830018546 +0000 UTC m=+1946.795863368
I0421 18:14:24.850377       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:14:24.850465       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-21 18:14:24.850457931 +0000 UTC m=+1946.816302743
I0421 18:14:25.167850       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:14:25.196932       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-5gtj9" condition "Approved" to 2026-04-21 18:14:25.196917705 +0000 UTC m=+1947.162762547
I0421 18:14:25.217763       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-5gtj9" condition "Ready" to 2026-04-21 18:14:25.217746988 +0000 UTC m=+1947.183591840
I0421 18:14:25.256501       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:14:25.256487421 +0000 UTC m=+1947.222332233
I0421 18:14:25.281558       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:23.639256       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cntk6-api" condition "Ready" to 2026-04-21 18:15:23.639221798 +0000 UTC m=+2005.605066630
I0421 18:15:23.639462       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-cntk6-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:15:23.639490       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cntk6-api" condition "Issuing" to 2026-04-21 18:15:23.639483533 +0000 UTC m=+2005.605328345
I0421 18:15:23.644451       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-cntk6-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:15:23.644496       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cntk6-vnc" condition "Issuing" to 2026-04-21 18:15:23.644485839 +0000 UTC m=+2005.610330671
I0421 18:15:23.645024       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cntk6-vnc" condition "Ready" to 2026-04-21 18:15:23.6450188 +0000 UTC m=+2005.610863622
I0421 18:15:23.661078       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-cntk6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:23.661580       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cntk6-api" condition "Ready" to 2026-04-21 18:15:23.661568311 +0000 UTC m=+2005.627413143
I0421 18:15:23.665189       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-cntk6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:23.665471       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-cntk6-vnc" condition "Ready" to 2026-04-21 18:15:23.665461204 +0000 UTC m=+2005.631306026
I0421 18:15:23.764856       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-cntk6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:23.802979       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cntk6-vnc-llwl5" condition "Approved" to 2026-04-21 18:15:23.802963019 +0000 UTC m=+2005.768807861
I0421 18:15:23.832445       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cntk6-vnc-llwl5" condition "Ready" to 2026-04-21 18:15:23.832429364 +0000 UTC m=+2005.798274216
I0421 18:15:23.863850       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-cntk6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:23.86383394 +0000 UTC m=+2005.829678762
I0421 18:15:23.889048       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-cntk6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:23.889739       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-cntk6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:23.889725679 +0000 UTC m=+2005.855570521
I0421 18:15:23.905187       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-cntk6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:23.905467       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-cntk6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:23.905455143 +0000 UTC m=+2005.871299965
I0421 18:15:24.039064       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-cntk6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:24.080284       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cntk6-api-llsgx" condition "Approved" to 2026-04-21 18:15:24.080269419 +0000 UTC m=+2006.046114241
I0421 18:15:24.100436       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-cntk6-api-llsgx" condition "Ready" to 2026-04-21 18:15:24.100423627 +0000 UTC m=+2006.066268449
I0421 18:15:24.131673       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-cntk6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:24.13165418 +0000 UTC m=+2006.097499002
I0421 18:15:24.149800       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-cntk6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:24.150289       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-cntk6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:24.150276264 +0000 UTC m=+2006.116121086
I0421 18:15:24.171797       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-cntk6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:15:24.174044       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-cntk6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-cntk6-api\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:17:10.866908       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:17:10.866966       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-21 18:17:10.866956086 +0000 UTC m=+2112.832800938
I0421 18:17:10.867249       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-21 18:17:10.867214971 +0000 UTC m=+2112.833059823
I0421 18:17:10.894351       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:17:10.894462       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-21 18:17:10.894452569 +0000 UTC m=+2112.860297391
I0421 18:17:11.120589       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:17:11.153352       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-7dlkr" condition "Approved" to 2026-04-21 18:17:11.153332684 +0000 UTC m=+2113.119177526
I0421 18:17:11.176103       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-7dlkr" condition "Ready" to 2026-04-21 18:17:11.176092006 +0000 UTC m=+2113.141936828
I0421 18:17:11.206828       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:17:11.206787656 +0000 UTC m=+2113.172632478
I0421 18:17:11.233602       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:17:11.234420       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:17:11.234410842 +0000 UTC m=+2113.200255694
I0421 18:17:11.259876       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:53.974919       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:20:53.974962       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-21 18:20:53.974946921 +0000 UTC m=+2335.940791743
I0421 18:20:53.975010       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-21 18:20:53.974999662 +0000 UTC m=+2335.940844514
I0421 18:20:53.991654       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:53.991764       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:20:53.991796       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-21 18:20:53.991789127 +0000 UTC m=+2335.957633939
I0421 18:20:54.217386       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-q66dz" condition "Approved" to 2026-04-21 18:20:54.217374844 +0000 UTC m=+2336.183219656
I0421 18:20:54.238602       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-q66dz" condition "Ready" to 2026-04-21 18:20:54.238588812 +0000 UTC m=+2336.204433644
I0421 18:20:54.271388       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:54.271373495 +0000 UTC m=+2336.237218317
I0421 18:20:54.290252       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:54.290787       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:54.290778355 +0000 UTC m=+2336.256623187
I0421 18:20:54.311961       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:55.523950       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-21 18:20:55.523925731 +0000 UTC m=+2337.489770553
I0421 18:20:55.524493       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:20:55.524521       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-21 18:20:55.524517823 +0000 UTC m=+2337.490362635
I0421 18:20:55.549533       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:55.549699       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-21 18:20:55.549689435 +0000 UTC m=+2337.515534247
I0421 18:20:55.808129       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:55.859154       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-9z5tn" condition "Approved" to 2026-04-21 18:20:55.859141424 +0000 UTC m=+2337.824986256
I0421 18:20:55.882922       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-9z5tn" condition "Ready" to 2026-04-21 18:20:55.882910176 +0000 UTC m=+2337.848754998
I0421 18:20:55.920954       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:55.9209385 +0000 UTC m=+2337.886783322
I0421 18:20:55.943221       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:55.943680       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:55.94367221 +0000 UTC m=+2337.909517022
I0421 18:20:55.951736       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:55.970897       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:20:55.971408       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:55.971397456 +0000 UTC m=+2337.937242278
I0421 18:23:20.020057       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-21 18:23:20.020035601 +0000 UTC m=+2481.985880443
I0421 18:23:20.020100       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:23:20.020140       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-21 18:23:20.020129433 +0000 UTC m=+2481.985974255
E0421 18:23:20.033873       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0421 18:23:20.033955       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-21 18:23:20.033949187 +0000 UTC m=+2481.999794019
I0421 18:23:20.033976       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0421 18:23:20.036903       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:20.037063       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-21 18:23:20.037053972 +0000 UTC m=+2482.002898804
E0421 18:23:20.044369       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
E0421 18:23:20.045228       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0421 18:23:20.045359       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0421 18:23:20.045430       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
I0421 18:23:20.056054       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:20.086968       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-28zxl" condition "Approved" to 2026-04-21 18:23:20.086952772 +0000 UTC m=+2482.052797594
I0421 18:23:20.104627       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-28zxl" condition "Ready" to 2026-04-21 18:23:20.104613166 +0000 UTC m=+2482.070457998
I0421 18:23:20.135934       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:20.1359186 +0000 UTC m=+2482.101763422
I0421 18:23:20.158975       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:20.212802       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:20.703766       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:23:20.703807       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-21 18:23:20.703799454 +0000 UTC m=+2482.669644266
I0421 18:23:20.704038       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-21 18:23:20.704028399 +0000 UTC m=+2482.669873251
E0421 18:23:20.718148       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0421 18:23:20.718226       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-21 18:23:20.71820935 +0000 UTC m=+2482.684054192
I0421 18:23:20.718421       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0421 18:23:20.721232       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:20.721431       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-21 18:23:20.721420428 +0000 UTC m=+2482.687265250
E0421 18:23:20.728334       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
E0421 18:23:20.728465       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0421 18:23:20.728504       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0421 18:23:20.728555       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
I0421 18:23:20.738798       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:20.770932       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-nqdk5" condition "Approved" to 2026-04-21 18:23:20.770915439 +0000 UTC m=+2482.736760271
I0421 18:23:20.789973       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-nqdk5" condition "Ready" to 2026-04-21 18:23:20.789963144 +0000 UTC m=+2482.755807956
I0421 18:23:20.817462       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:20.817443766 +0000 UTC m=+2482.783288588
I0421 18:23:20.841401       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:20.841912       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:20.841899355 +0000 UTC m=+2482.807744177
I0421 18:23:20.853377       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:20.862455       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:21.395951       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-21 18:23:21.395937745 +0000 UTC m=+2483.361782547
I0421 18:23:21.395959       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:23:21.396146       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-21 18:23:21.396124449 +0000 UTC m=+2483.361969281
I0421 18:23:21.413631       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:21.413705       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:23:21.413733       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-21 18:23:21.413722862 +0000 UTC m=+2483.379567684
I0421 18:23:21.451550       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:21.457163       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-bvxb9" condition "Approved" to 2026-04-21 18:23:21.457146355 +0000 UTC m=+2483.422991197
I0421 18:23:21.490568       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-bvxb9" condition "Ready" to 2026-04-21 18:23:21.490552804 +0000 UTC m=+2483.456397616
I0421 18:23:25.045462       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:25.045441808 +0000 UTC m=+2487.011286660
I0421 18:23:25.056209       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-bvxb9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:25.056191575 +0000 UTC m=+2487.022036427
I0421 18:23:25.081889       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:25.081870111 +0000 UTC m=+2487.047714963
I0421 18:23:25.111412       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:25.157556       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:23:25.729097       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:23:25.729084688 +0000 UTC m=+2487.694929500
I0421 18:25:35.829502       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-21 18:25:35.829481893 +0000 UTC m=+2617.795326745
I0421 18:25:35.829605       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:25:35.829628       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-21 18:25:35.829623006 +0000 UTC m=+2617.795467828
I0421 18:25:35.852887       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:25:35.852989       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:25:35.853032       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-21 18:25:35.853023974 +0000 UTC m=+2617.818868796
I0421 18:25:36.000033       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-q4ngs" condition "Approved" to 2026-04-21 18:25:36.000021152 +0000 UTC m=+2617.965865994
I0421 18:25:36.026885       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-q4ngs" condition "Ready" to 2026-04-21 18:25:36.026867041 +0000 UTC m=+2617.992711853
I0421 18:25:36.056253       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:25:36.056240634 +0000 UTC m=+2618.022085456
I0421 18:25:36.082471       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:25:36.083043       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:25:36.083033393 +0000 UTC m=+2618.048878225
I0421 18:25:36.109492       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:22.278003       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-21 18:26:22.277981996 +0000 UTC m=+2664.243826848
I0421 18:26:22.297576       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-21 18:26:22.297561252 +0000 UTC m=+2664.263406084
I0421 18:26:22.297714       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:22.297746       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-21 18:26:22.297739535 +0000 UTC m=+2664.263584357
I0421 18:26:22.315058       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:22.315137       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:22.315156       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-21 18:26:22.315150075 +0000 UTC m=+2664.280994897
E0421 18:26:22.327796       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers"
I0421 18:26:22.394029       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-21 18:26:22.394007187 +0000 UTC m=+2664.359852039
I0421 18:26:22.417380       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-21 18:26:22.417365773 +0000 UTC m=+2664.383210585
I0421 18:26:22.417400       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:22.417430       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-21 18:26:22.417423585 +0000 UTC m=+2664.383268417
I0421 18:26:22.436865       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:22.436951       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:22.436983       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-21 18:26:22.436974799 +0000 UTC m=+2664.402819621
E0421 18:26:22.506499       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert"
I0421 18:26:22.725723       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-s5sq8" condition "Approved" to 2026-04-21 18:26:22.725703035 +0000 UTC m=+2664.691547877
I0421 18:26:22.749661       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-s5sq8" condition "Ready" to 2026-04-21 18:26:22.749649242 +0000 UTC m=+2664.715494054
I0421 18:26:22.783068       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:22.783050641 +0000 UTC m=+2664.748895463
I0421 18:26:22.825917       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:22.826219       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:22.826210287 +0000 UTC m=+2664.792055099
I0421 18:26:22.838056       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:22.862139       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:23.223209       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-21 18:26:23.223193729 +0000 UTC m=+2665.189038541
I0421 18:26:23.248431       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:23.248470       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-21 18:26:23.248461394 +0000 UTC m=+2665.214306216
I0421 18:26:23.248417       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-21 18:26:23.248399173 +0000 UTC m=+2665.214243995
I0421 18:26:23.270137       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:23.270200       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:23.270360       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-21 18:26:23.270211106 +0000 UTC m=+2665.236055938
I0421 18:26:23.395988       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-jjh22" condition "Approved" to 2026-04-21 18:26:23.395974654 +0000 UTC m=+2665.361819456
I0421 18:26:23.438026       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-jjh22" condition "Ready" to 2026-04-21 18:26:23.438012616 +0000 UTC m=+2665.403857428
I0421 18:26:23.509459       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:23.509446342 +0000 UTC m=+2665.475291144
I0421 18:26:23.535876       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:23.536142       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:23.536136027 +0000 UTC m=+2665.501980839
I0421 18:26:23.570415       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:23.687456       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-21 18:26:23.687439477 +0000 UTC m=+2665.653284299
I0421 18:26:23.715599       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-21 18:26:23.715580484 +0000 UTC m=+2665.681425336
I0421 18:26:23.715753       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:23.715806       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-21 18:26:23.715795609 +0000 UTC m=+2665.681640451
I0421 18:26:23.734848       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:23.734945       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-21 18:26:23.734934075 +0000 UTC m=+2665.700778907
I0421 18:26:23.987444       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:24.030980       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zxhmj" condition "Approved" to 2026-04-21 18:26:24.030971156 +0000 UTC m=+2665.996815968
I0421 18:26:24.057081       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zxhmj" condition "Ready" to 2026-04-21 18:26:24.057068189 +0000 UTC m=+2666.022912991
I0421 18:26:24.128842       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:24.128828632 +0000 UTC m=+2666.094673484
I0421 18:26:24.129223       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-21 18:26:24.12921363 +0000 UTC m=+2666.095058472
I0421 18:26:24.148620       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-21 18:26:24.148604381 +0000 UTC m=+2666.114449193
I0421 18:26:24.148810       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:24.148829       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-21 18:26:24.148825596 +0000 UTC m=+2666.114670408
I0421 18:26:24.157928       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:24.158305       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:24.158297767 +0000 UTC m=+2666.124142589
I0421 18:26:24.300645       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:24.300721       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:26:24.300743       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-21 18:26:24.300736149 +0000 UTC m=+2666.266580961
I0421 18:26:24.389672       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:24.390104       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:24.390095585 +0000 UTC m=+2666.355940417
I0421 18:26:25.206671       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-2bckr" condition "Approved" to 2026-04-21 18:26:25.206650357 +0000 UTC m=+2667.172495199
I0421 18:26:25.227447       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-2bckr" condition "Ready" to 2026-04-21 18:26:25.227433839 +0000 UTC m=+2667.193278681
I0421 18:26:25.344098       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:25.344083483 +0000 UTC m=+2667.309928325
I0421 18:26:25.438630       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:25.439072       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:26:25.439061668 +0000 UTC m=+2667.404906520
I0421 18:26:25.687176       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:26:25.736833       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:29:47.817526       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:29:47.817583       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-21 18:29:47.817568405 +0000 UTC m=+2869.783413257
I0421 18:29:47.817704       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-21 18:29:47.817682727 +0000 UTC m=+2869.783527579
I0421 18:29:47.871549       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:29:47.871635       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-21 18:29:47.87162759 +0000 UTC m=+2869.837472412
I0421 18:29:48.114710       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:29:48.159391       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-m6md4" condition "Approved" to 2026-04-21 18:29:48.159369648 +0000 UTC m=+2870.125214460
I0421 18:29:48.188355       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-m6md4" condition "Ready" to 2026-04-21 18:29:48.188342443 +0000 UTC m=+2870.154187265
I0421 18:29:48.235659       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:29:48.23564827 +0000 UTC m=+2870.201493082
I0421 18:29:48.271107       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:29:50.593555       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:29:50.594428       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-21 18:29:50.594421064 +0000 UTC m=+2872.560265886
I0421 18:29:50.593766       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-21 18:29:50.59373617 +0000 UTC m=+2872.559581002
I0421 18:29:50.619736       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:29:50.620004       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-21 18:29:50.619996585 +0000 UTC m=+2872.585841397
I0421 18:29:50.875546       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:29:50.911993       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-4vz2k" condition "Approved" to 2026-04-21 18:29:50.911976917 +0000 UTC m=+2872.877821739
I0421 18:29:50.934474       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-4vz2k" condition "Ready" to 2026-04-21 18:29:50.93446153 +0000 UTC m=+2872.900306352
I0421 18:29:50.971163       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:29:50.971149174 +0000 UTC m=+2872.936993986
I0421 18:29:51.001342       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:29:51.001613       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:29:51.001605292 +0000 UTC m=+2872.967450104
I0421 18:29:51.029629       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:10.707411       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:38:10.707451       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-21 18:38:10.707427366 +0000 UTC m=+3372.673272208
I0421 18:38:10.707462       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-21 18:38:10.707452287 +0000 UTC m=+3372.673297099
I0421 18:38:10.725467       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:10.725640       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:38:10.725671       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-21 18:38:10.725662783 +0000 UTC m=+3372.691507605
I0421 18:38:10.905395       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-w9vnz" condition "Approved" to 2026-04-21 18:38:10.905371375 +0000 UTC m=+3372.871216197
I0421 18:38:10.938852       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-w9vnz" condition "Ready" to 2026-04-21 18:38:10.938836906 +0000 UTC m=+3372.904681718
I0421 18:38:10.965114       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:38:10.965098735 +0000 UTC m=+3372.930943557
I0421 18:38:11.003250       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:11.058445       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:46.334679       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0421 18:38:46.334759       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-21 18:38:46.334750356 +0000 UTC m=+3408.300595178
I0421 18:38:46.335436       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 18:38:46.33543048 +0000 UTC m=+3408.301275302
I0421 18:38:46.360076       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:46.360449       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-21 18:38:46.360428622 +0000 UTC m=+3408.326273434
I0421 18:38:46.472253       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:46.505408       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7q4tf" condition "Approved" to 2026-04-21 18:38:46.505395104 +0000 UTC m=+3408.471239916
I0421 18:38:46.528575       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-7q4tf" condition "Ready" to 2026-04-21 18:38:46.528560267 +0000 UTC m=+3408.494405089
I0421 18:38:46.561905       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:38:46.561877275 +0000 UTC m=+3408.527722097
I0421 18:38:46.590187       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:46.590699       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:38:46.590688428 +0000 UTC m=+3408.556533270
I0421 18:38:46.622967       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:46.623558       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0421 18:38:46.623556       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:38:46.623543256 +0000 UTC m=+3408.589388068
I0421 18:38:46.625917       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"