I0807 03:09:23.012300       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0807 03:09:23.012422       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0807 03:09:23.015646       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0807 03:09:23.015680       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0807 03:09:23.015690       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0807 03:09:23.016069       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0807 03:09:23.016091       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0807 03:09:23.016192       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0807 03:09:23.022183       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0807 03:09:25.870549       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0807 03:09:25.874260       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0807 03:09:25.876581       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0807 03:09:25.881744       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0807 03:09:25.885001       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0807 03:09:25.887758       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0807 03:09:25.890308       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0807 03:09:25.891863       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0807 03:09:25.894589       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0807 03:09:25.897395       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0807 03:09:25.902302       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0807 03:09:25.906818       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0807 03:09:25.906865       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0807 03:09:25.906936       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0807 03:09:25.909645       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0807 03:09:25.912105       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0807 03:09:25.912136       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0807 03:09:25.913901       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0807 03:09:25.914056       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0807 03:09:25.916314       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0807 03:09:25.918002       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0807 03:09:25.918016       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0807 03:09:25.918145       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0807 03:09:25.920344       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0807 03:09:25.924794       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0807 03:09:25.925728       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.928833       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.929347       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.931055       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.931135       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.933280       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.935158       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.935467       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.938158       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.938829       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:09:25.942587       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0807 03:10:09.303806       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:10:09.303861       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8ghkn-api" condition "Issuing" to 2026-08-07 03:10:09.30384845 +0000 UTC m=+46.326511009
I0807 03:10:09.304003       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8ghkn-api" condition "Ready" to 2026-08-07 03:10:09.303954773 +0000 UTC m=+46.326617342
I0807 03:10:09.311904       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:10:09.311929       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8ghkn-vnc" condition "Issuing" to 2026-08-07 03:10:09.311924625 +0000 UTC m=+46.334587184
I0807 03:10:09.314815       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8ghkn-vnc" condition "Ready" to 2026-08-07 03:10:09.31476228 +0000 UTC m=+46.337424849
I0807 03:10:09.319588       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8ghkn-api\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:10:09.319684       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8ghkn-api" condition "Ready" to 2026-08-07 03:10:09.319676372 +0000 UTC m=+46.342338951
I0807 03:10:09.326695       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8ghkn-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:10:09.326833       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8ghkn-vnc" condition "Ready" to 2026-08-07 03:10:09.326821005 +0000 UTC m=+46.349483554
I0807 03:10:09.437631       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8ghkn-api\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:10:09.490270       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8ghkn-api-1" condition "Approved" to 2026-08-07 03:10:09.490252929 +0000 UTC m=+46.512915508
I0807 03:10:09.513542       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8ghkn-api-1" condition "Ready" to 2026-08-07 03:10:09.51353088 +0000 UTC m=+46.536193429
I0807 03:10:09.560551       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8ghkn-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:10:09.560530954 +0000 UTC m=+46.583193553
I0807 03:10:09.560811       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8ghkn-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:10:09.576949       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8ghkn-api\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:10:09.590662       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8ghkn-vnc-1" condition "Approved" to 2026-08-07 03:10:09.590617051 +0000 UTC m=+46.613279650
I0807 03:10:09.607589       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8ghkn-vnc-1" condition "Ready" to 2026-08-07 03:10:09.607573158 +0000 UTC m=+46.630235717
I0807 03:10:09.635050       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8ghkn-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:10:09.635031576 +0000 UTC m=+46.657694135
I0807 03:10:09.652557       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8ghkn-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:10:09.653517       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8ghkn-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:10:09.653507207 +0000 UTC m=+46.676169796
I0807 03:10:09.668284       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-8ghkn-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8ghkn-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:15:04.717867       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:15:04.717983       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-07 03:15:04.71796824 +0000 UTC m=+341.740630819
I0807 03:15:04.718904       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-07 03:15:04.718889671 +0000 UTC m=+341.741552250
I0807 03:15:04.733161       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:15:04.733284       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-07 03:15:04.73327269 +0000 UTC m=+341.755935249
I0807 03:15:04.957996       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:15:04.997502       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-08-07 03:15:04.997485244 +0000 UTC m=+342.020147813
I0807 03:15:05.012936       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-08-07 03:15:05.012925298 +0000 UTC m=+342.035587867
I0807 03:15:05.046025       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:15:05.045999855 +0000 UTC m=+342.068662414
I0807 03:15:05.064886       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:15:05.067289       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:15:05.067276041 +0000 UTC m=+342.089938600
I0807 03:15:05.079159       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:15:05.080723       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:15:05.080710159 +0000 UTC m=+342.103372718
I0807 03:15:06.276316       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:15:06.276493       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-07 03:15:06.276476296 +0000 UTC m=+343.299138875
I0807 03:15:06.281505       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-07 03:15:06.27618851 +0000 UTC m=+343.298851089
I0807 03:15:06.291566       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:15:06.291705       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-07 03:15:06.291690874 +0000 UTC m=+343.314353443
I0807 03:15:06.473634       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:15:06.503377       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-08-07 03:15:06.503356037 +0000 UTC m=+343.526018616
I0807 03:15:06.524650       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-08-07 03:15:06.524638674 +0000 UTC m=+343.547301223
I0807 03:15:06.587969       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:15:06.587960232 +0000 UTC m=+343.610622781
I0807 03:15:06.632124       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:15:06.632887       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:15:06.6328809 +0000 UTC m=+343.655543449
I0807 03:15:06.655783       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:46.346858       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-07 03:17:46.346845092 +0000 UTC m=+503.369507651
I0807 03:17:46.347792       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:17:46.347813       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-07 03:17:46.347809014 +0000 UTC m=+503.370471573
E0807 03:17:46.383371       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0807 03:17:46.383428       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-08-07 03:17:46.383415759 +0000 UTC m=+503.406078348
I0807 03:17:46.383489       1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0807 03:17:46.383596       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:46.383724       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-07 03:17:46.383715736 +0000 UTC m=+503.406378315
E0807 03:17:46.394712       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client"
E0807 03:17:46.394819       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0807 03:17:46.394843       1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0807 03:17:46.394878       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client"
I0807 03:17:46.399095       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:46.431711       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-08-07 03:17:46.431696213 +0000 UTC m=+503.454358762
I0807 03:17:46.446971       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-08-07 03:17:46.446954053 +0000 UTC m=+503.469616642
I0807 03:17:46.476877       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:17:46.476858836 +0000 UTC m=+503.499521415
I0807 03:17:46.491416       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:47.106925       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-07 03:17:47.106909371 +0000 UTC m=+504.129571930
I0807 03:17:47.107585       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:17:47.107711       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-07 03:17:47.1076994 +0000 UTC m=+504.130361989
I0807 03:17:47.123502       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:47.123627       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:17:47.123683       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-07 03:17:47.123674755 +0000 UTC m=+504.146337314
E0807 03:17:47.124294       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0807 03:17:47.124369       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-08-07 03:17:47.12435938 +0000 UTC m=+504.147021939
I0807 03:17:47.124439       1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0807 03:17:47.133620       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server"
E0807 03:17:47.133725       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0807 03:17:47.133809       1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0807 03:17:47.133847       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server"
I0807 03:17:47.160353       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-08-07 03:17:47.160334633 +0000 UTC m=+504.182997182
I0807 03:17:47.172894       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-08-07 03:17:47.172884201 +0000 UTC m=+504.195546750
I0807 03:17:47.193380       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:17:47.193365679 +0000 UTC m=+504.216028228
I0807 03:17:47.204380       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:47.204730       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:17:47.204724289 +0000 UTC m=+504.227386838
I0807 03:17:47.236883       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:47.237084       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:47.237520       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:17:47.237510939 +0000 UTC m=+504.260173498
I0807 03:17:47.892954       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-07 03:17:47.892938615 +0000 UTC m=+504.915601174
I0807 03:17:47.893047       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:17:47.893114       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-07 03:17:47.893103848 +0000 UTC m=+504.915766437
I0807 03:17:47.905162       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:47.905317       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:17:47.905350       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-07 03:17:47.905343288 +0000 UTC m=+504.928005837
I0807 03:17:47.969777       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-08-07 03:17:47.969762572 +0000 UTC m=+504.992425131
I0807 03:17:47.998728       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-08-07 03:17:47.998715345 +0000 UTC m=+505.021377894
I0807 03:17:51.396240       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:17:51.396221644 +0000 UTC m=+508.418884223
I0807 03:17:51.412461       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:17:51.412448206 +0000 UTC m=+508.435110765
I0807 03:17:51.435455       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:17:51.435442811 +0000 UTC m=+508.458105370
I0807 03:17:51.450650       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:51.493445       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:17:52.134346       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:17:52.134329381 +0000 UTC m=+509.156991940
I0807 03:20:34.248535       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:20:34.248597       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-07 03:20:34.24858379 +0000 UTC m=+671.271246369
I0807 03:20:34.248634       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-07 03:20:34.24861509 +0000 UTC m=+671.271277679
I0807 03:20:34.293619       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:20:34.293758       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-07 03:20:34.293745654 +0000 UTC m=+671.316408213
I0807 03:20:34.480881       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:20:34.542463       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-08-07 03:20:34.542437613 +0000 UTC m=+671.565100172
I0807 03:20:34.556305       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-08-07 03:20:34.55629309 +0000 UTC m=+671.578955649
I0807 03:20:34.594185       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:20:34.594168147 +0000 UTC m=+671.616830706
I0807 03:20:34.611611       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:20:34.612507       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:20:34.612495616 +0000 UTC m=+671.635158195
I0807 03:20:34.678998       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:21.948247       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-07 03:21:21.948228183 +0000 UTC m=+718.970890742
I0807 03:21:21.969314       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:21:21.969378       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-07 03:21:21.969353096 +0000 UTC m=+718.992015675
I0807 03:21:21.969398       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-07 03:21:21.969384846 +0000 UTC m=+718.992047435
I0807 03:21:21.989673       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:21.989802       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-07 03:21:21.989790043 +0000 UTC m=+719.012452622
E0807 03:21:22.004641       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller"
I0807 03:21:22.062605       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-07 03:21:22.062582269 +0000 UTC m=+719.085244828
I0807 03:21:22.086457       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-07 03:21:22.086429025 +0000 UTC m=+719.109091614
I0807 03:21:22.086526       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:21:22.086590       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-07 03:21:22.086574029 +0000 UTC m=+719.109236618
I0807 03:21:22.100130       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:22.100245       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-07 03:21:22.100232031 +0000 UTC m=+719.122894590
E0807 03:21:22.115424       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert"
I0807 03:21:22.520949       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:22.557847       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-08-07 03:21:22.557833644 +0000 UTC m=+719.580496193
I0807 03:21:22.574131       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-08-07 03:21:22.574115207 +0000 UTC m=+719.596777756
I0807 03:21:22.605801       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:21:22.605780141 +0000 UTC m=+719.628442730
I0807 03:21:22.627945       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:22.998196       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-07 03:21:22.998175132 +0000 UTC m=+720.020837701
I0807 03:21:23.015025       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-07 03:21:23.015011547 +0000 UTC m=+720.037674106
I0807 03:21:23.015349       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:21:23.015367       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-07 03:21:23.015363046 +0000 UTC m=+720.038025595
I0807 03:21:23.029329       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:23.029395       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-07 03:21:23.029385847 +0000 UTC m=+720.052048396
I0807 03:21:23.238242       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:23.271602       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-08-07 03:21:23.27158579 +0000 UTC m=+720.294248329
I0807 03:21:23.303801       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-08-07 03:21:23.303783717 +0000 UTC m=+720.326446266
I0807 03:21:23.389134       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:21:23.389117579 +0000 UTC m=+720.411780128
I0807 03:21:23.412024       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:23.438580       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:23.492906       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:23.515938       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-07 03:21:23.515922301 +0000 UTC m=+720.538584840
I0807 03:21:23.540804       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:21:23.540903       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-07 03:21:23.540890903 +0000 UTC m=+720.563553472
I0807 03:21:23.541007       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-07 03:21:23.540987645 +0000 UTC m=+720.563650194
I0807 03:21:23.553935       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:23.554037       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:21:23.554072       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-07 03:21:23.554062214 +0000 UTC m=+720.576724773
I0807 03:21:23.737874       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:23.752058       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-08-07 03:21:23.752041206 +0000 UTC m=+720.774703755
I0807 03:21:23.776149       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-08-07 03:21:23.776134017 +0000 UTC m=+720.798796566
I0807 03:21:23.810196       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:21:23.810159005 +0000 UTC m=+720.832821564
I0807 03:21:23.856712       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:24.046297       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-07 03:21:24.04627304 +0000 UTC m=+721.068935599
I0807 03:21:24.083725       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:21:24.083758       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-07 03:21:24.083750777 +0000 UTC m=+721.106413326
I0807 03:21:24.084052       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-07 03:21:24.084048564 +0000 UTC m=+721.106711113
I0807 03:21:24.254207       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:24.254305       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-07 03:21:24.25429519 +0000 UTC m=+721.276957739
I0807 03:21:24.892243       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:24.929321       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-08-07 03:21:24.929304449 +0000 UTC m=+721.951967008
I0807 03:21:24.951925       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-08-07 03:21:24.951898966 +0000 UTC m=+721.974561515
I0807 03:21:25.240277       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:21:25.240256025 +0000 UTC m=+722.262918584
I0807 03:21:25.303569       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:25.304262       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:21:25.30425277 +0000 UTC m=+722.326915329
I0807 03:21:25.557038       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:21:25.604370       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:25:14.829942       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:25:14.830079       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-08-07 03:25:14.830062603 +0000 UTC m=+951.852725192
I0807 03:25:14.830735       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-08-07 03:25:14.830724768 +0000 UTC m=+951.853387357
I0807 03:25:14.847324       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:25:14.847503       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-08-07 03:25:14.847493532 +0000 UTC m=+951.870156091
I0807 03:25:15.007300       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:25:15.055446       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Approved" to 2026-08-07 03:25:15.055431171 +0000 UTC m=+952.078093730
I0807 03:25:15.084564       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Ready" to 2026-08-07 03:25:15.084546278 +0000 UTC m=+952.107208837
I0807 03:25:15.121283       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:25:15.121266418 +0000 UTC m=+952.143928997
I0807 03:25:15.150449       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:25:15.151319       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:25:15.151304596 +0000 UTC m=+952.173967175
I0807 03:25:15.157982       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:25:15.169356       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:25:15.170047       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:25:15.170033694 +0000 UTC m=+952.192696253
I0807 03:25:17.751914       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-08-07 03:25:17.751892154 +0000 UTC m=+954.774554713
I0807 03:25:17.752122       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:25:17.752214       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-08-07 03:25:17.752201951 +0000 UTC m=+954.774864530
I0807 03:25:17.766983       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:25:17.767304       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:25:17.767397       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-08-07 03:25:17.767381258 +0000 UTC m=+954.790043837
I0807 03:25:18.120200       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Approved" to 2026-08-07 03:25:18.120180252 +0000 UTC m=+955.142842791
I0807 03:25:18.140243       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Ready" to 2026-08-07 03:25:18.140229382 +0000 UTC m=+955.162891941
I0807 03:25:18.172190       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:25:18.172173182 +0000 UTC m=+955.194835741
I0807 03:25:18.187088       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:25:18.202012       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:32:37.627475       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:32:37.627559       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-08-07 03:32:37.627547201 +0000 UTC m=+1394.650209780
I0807 03:32:37.627718       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-08-07 03:32:37.627705784 +0000 UTC m=+1394.650368343
I0807 03:32:37.641468       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:32:37.641615       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:32:37.641651       1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-08-07 03:32:37.641642603 +0000 UTC m=+1394.664305182
I0807 03:32:38.073113       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-08-07 03:32:38.073088698 +0000 UTC m=+1395.095751247
I0807 03:32:38.095730       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-08-07 03:32:38.095716658 +0000 UTC m=+1395.118379227
I0807 03:32:38.179880       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:32:38.179862695 +0000 UTC m=+1395.202525284
I0807 03:32:38.246331       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:32:38.246931       1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:32:38.246925431 +0000 UTC m=+1395.269587980
I0807 03:32:38.310816       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:33:24.512714       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-08-07 03:33:24.512684849 +0000 UTC m=+1441.535347398
I0807 03:33:24.513004       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:33:24.513073       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-07 03:33:24.513061218 +0000 UTC m=+1441.535723797
I0807 03:33:24.540024       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:33:24.540179       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0807 03:33:24.540208       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-08-07 03:33:24.54019996 +0000 UTC m=+1441.562862519
I0807 03:33:24.935573       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-08-07 03:33:24.935559478 +0000 UTC m=+1441.958222017
I0807 03:33:24.954830       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-08-07 03:33:24.954817879 +0000 UTC m=+1441.977480448
I0807 03:33:24.984471       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:33:24.984460048 +0000 UTC m=+1442.007122617
I0807 03:33:24.996601       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0807 03:33:24.997495       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-07 03:33:24.997484026 +0000 UTC m=+1442.020146625
I0807 03:33:25.011325       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
E0807 03:48:10.903133       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path
E0807 03:48:17.926404       1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out
E0807 03:48:39.932271       1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path
E0807 03:48:43.897486       1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded
I0807 03:48:43.897539       1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition
E0807 03:48:50.905149       1 leaderelection.go:308] Failed to release lock: etcdserver: request timed out
I0807 03:48:50.905261       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-approver"
I0807 03:48:50.905494       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-ca"
I0807 03:48:50.905518       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-selfsigned"
I0807 03:48:50.905506       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.orders"
I0807 03:48:50.905533       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.issuers"
I0807 03:48:50.905546       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-trigger"
I0807 03:48:50.905561       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-key-manager"
I0807 03:48:50.905577       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-metrics"
I0807 03:48:50.905590       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-venafi"
I0807 03:48:50.905603       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.clusterissuers"
I0807 03:48:50.905618       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.challenges"
I0807 03:48:50.905653       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.ingress-shim"
I0807 03:48:50.905682       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-request-manager"
I0807 03:48:50.905704       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-issuing"
I0807 03:48:50.905721       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-readiness"
I0807 03:48:50.905738       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-revision-manager"
I0807 03:48:50.905755       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-acme"
I0807 03:48:50.905793       1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-vault"
E0807 03:48:50.905863       1 main.go:40] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"