I0520 06:04:01.239235 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0520 06:04:01.239414 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0520 06:04:01.239520 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0520 06:04:01.244495 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0520 06:04:01.244987 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0520 06:04:01.245053 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0520 06:04:01.245078 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0520 06:04:01.247776 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0520 06:04:01.273093 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0520 06:04:01.276661 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0520 06:04:01.276687 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0520 06:04:01.276713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0520 06:04:01.284970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0520 06:04:01.288745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0520 06:04:01.293883 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0520 06:04:01.295900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0520 06:04:01.297861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0520 06:04:01.299713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0520 06:04:01.304909 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0520 06:04:01.305029 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0520 06:04:01.310500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0520 06:04:01.313671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0520 06:04:01.316255 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0520 06:04:01.316363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0520 06:04:01.320161 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0520 06:04:01.320179 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0520 06:04:01.320316 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0520 06:04:01.322144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0520 06:04:01.324014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0520 06:04:01.325904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0520 06:04:01.331335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0520 06:04:01.335485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0520 06:04:01.339375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0520 06:04:01.342235 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.342672 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.342795 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.361492 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.383189 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.430698 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.436453 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.451945 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.476558 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:01.495428 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0520 06:04:14.085195 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-20 06:04:14.085178318 +0000 UTC m=+12.889001382 I0520 06:04:14.789596 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-20 06:04:14.789585642 +0000 UTC m=+13.593408686 I0520 06:04:14.789656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:04:14.789738 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 06:04:14.789726515 +0000 UTC m=+13.593549589 E0520 06:04:14.805701 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 06:04:14.805781 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-20 06:04:14.80577095 +0000 UTC m=+13.609593994 E0520 06:04:14.805812 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 06:04:14.807486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:04:14.807567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:04:14.807597 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-20 06:04:14.807588876 +0000 UTC m=+13.611411940 E0520 06:04:14.815722 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0520 06:04:14.816282 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 06:04:14.816497 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 06:04:14.816706 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0520 06:04:14.841750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:04:14.847037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pfdd4" condition "Approved" to 2026-05-20 06:04:14.847022232 +0000 UTC m=+13.650845286 I0520 06:04:14.858363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pfdd4" condition "Ready" to 2026-05-20 06:04:14.858352645 +0000 UTC m=+13.662175679 I0520 06:04:14.883272 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:04:14.883257305 +0000 UTC m=+13.687080349 I0520 06:04:14.903742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:04:14.904253 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:04:14.904242698 +0000 UTC m=+13.708065772 I0520 06:04:14.915477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:04:14.916781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:04:14.917107 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:04:14.917098671 +0000 UTC m=+13.720921745 I0520 06:04:19.817263 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:04:19.817249488 +0000 UTC m=+18.621072552 I0520 06:04:37.483454 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 06:04:37.483438999 +0000 UTC m=+36.287262043 I0520 06:04:37.483907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:04:37.483961 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-20 06:04:37.483951969 +0000 UTC m=+36.287775013 I0520 06:04:37.492474 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-20 06:04:37.492462067 +0000 UTC m=+36.296285111 I0520 06:04:37.501084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:04:37.501146 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-20 06:04:37.501139758 +0000 UTC m=+36.304962802 I0520 06:04:37.578797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:04:37.634038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d7gtd" condition "Approved" to 2026-05-20 06:04:37.634026429 +0000 UTC m=+36.437849473 I0520 06:04:37.671838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d7gtd" condition "Ready" to 2026-05-20 06:04:37.671821185 +0000 UTC m=+36.475644259 I0520 06:04:37.700927 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:04:37.700917449 +0000 UTC m=+36.504740483 I0520 06:04:37.721667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:04:37.778249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:09:07.143835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-30.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:09:07.143882 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-30.nip.io-tls" condition "Issuing" to 2026-05-20 06:09:07.143870765 +0000 UTC m=+305.947693839 I0520 06:09:07.143871 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-30.nip.io-tls" condition "Ready" to 2026-05-20 06:09:07.143848635 +0000 UTC m=+305.947671729 I0520 06:09:07.158883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:09:07.158944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-30.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:09:07.158961 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-30.nip.io-tls" condition "Issuing" to 2026-05-20 06:09:07.158953862 +0000 UTC m=+305.962776906 I0520 06:09:07.474970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-30.nip.io-tls-g57qj" condition "Approved" to 2026-05-20 06:09:07.474948553 +0000 UTC m=+306.278771627 I0520 06:09:07.509088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-30.nip.io-tls-g57qj" condition "Ready" to 2026-05-20 06:09:07.509076626 +0000 UTC m=+306.312899690 I0520 06:09:07.541905 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-30.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:09:07.541882043 +0000 UTC m=+306.345705157 I0520 06:09:07.567535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:09:07.568070 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-30.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:09:07.568057358 +0000 UTC m=+306.371880412 I0520 06:09:07.585592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:09:07.586203 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-30.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:09:07.586188496 +0000 UTC m=+306.390011550 I0520 06:09:07.588277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:14.649123 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-20 06:10:14.64908074 +0000 UTC m=+373.452903814 I0520 06:10:14.649194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:10:14.649232 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 06:10:14.649220922 +0000 UTC m=+373.453043986 E0520 06:10:14.661641 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 06:10:14.661679 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-20 06:10:14.661672919 +0000 UTC m=+373.465495963 E0520 06:10:14.661727 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0520 06:10:14.661778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:14.661831 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:10:14.661845 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-20 06:10:14.661840312 +0000 UTC m=+373.465663346 E0520 06:10:14.673595 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0520 06:10:14.674047 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 06:10:14.674153 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0520 06:10:14.674620 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0520 06:10:14.697052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-skfvz" condition "Approved" to 2026-05-20 06:10:14.697031279 +0000 UTC m=+373.500854363 I0520 06:10:14.708350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-skfvz" condition "Ready" to 2026-05-20 06:10:14.708339372 +0000 UTC m=+373.512162406 I0520 06:10:14.728961 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:14.728944611 +0000 UTC m=+373.532767685 I0520 06:10:14.750768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:14.751082 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:14.75107534 +0000 UTC m=+373.554898384 I0520 06:10:14.762492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:14.762778 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:14.762769351 +0000 UTC m=+373.566592405 I0520 06:10:19.674873 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:19.674858778 +0000 UTC m=+378.478681842 I0520 06:10:57.153576 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-20 06:10:57.153563921 +0000 UTC m=+415.957386955 I0520 06:10:57.153919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:10:57.153938 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 06:10:57.153935658 +0000 UTC m=+415.957758692 I0520 06:10:57.157842 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-20 06:10:57.157832094 +0000 UTC m=+415.961655128 I0520 06:10:57.158063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:10:57.158093 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 06:10:57.15809019 +0000 UTC m=+415.961913224 I0520 06:10:57.158111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:10:57.158123 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-20 06:10:57.158121251 +0000 UTC m=+415.961944285 I0520 06:10:57.158092 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 06:10:57.15808791 +0000 UTC m=+415.961910944 I0520 06:10:57.177647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:57.177724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:10:57.177742 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 06:10:57.177737059 +0000 UTC m=+415.981560093 I0520 06:10:57.180616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:57.181529 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-20 06:10:57.181494574 +0000 UTC m=+415.985317648 I0520 06:10:57.193469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:57.193653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:10:57.193709 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-20 06:10:57.193700535 +0000 UTC m=+415.997523579 I0520 06:10:57.340389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:57.382690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mcq6r" condition "Approved" to 2026-05-20 06:10:57.382679342 +0000 UTC m=+416.186502376 I0520 06:10:57.410762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mcq6r" condition "Ready" to 2026-05-20 06:10:57.410745349 +0000 UTC m=+416.214568393 I0520 06:10:57.421319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-88lwl" condition "Approved" to 2026-05-20 06:10:57.421307139 +0000 UTC m=+416.225130213 I0520 06:10:57.437861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-88lwl" condition "Ready" to 2026-05-20 06:10:57.437841926 +0000 UTC m=+416.241664980 I0520 06:10:57.445782 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:57.445661832 +0000 UTC m=+416.249484896 I0520 06:10:57.501631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:57.501973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v4zp5" condition "Approved" to 2026-05-20 06:10:57.50196297 +0000 UTC m=+416.305786004 I0520 06:10:57.529715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:10:57.529754 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-20 06:10:57.529746531 +0000 UTC m=+416.333569565 I0520 06:10:57.549238 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:57.549224568 +0000 UTC m=+416.353047602 I0520 06:10:57.747293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v4zp5" condition "Ready" to 2026-05-20 06:10:57.74724815 +0000 UTC m=+416.551071224 I0520 06:10:58.039025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:58.039606 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:58.039595344 +0000 UTC m=+416.843418388 I0520 06:10:58.288270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:58.538706 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:58.538678373 +0000 UTC m=+417.342501417 I0520 06:10:58.741862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:58.742410 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:10:58.742377728 +0000 UTC m=+417.546200792 E0520 06:10:58.836818 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-j4gvg\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0520 06:10:58.897705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-br5zn" condition "Approved" to 2026-05-20 06:10:58.897670272 +0000 UTC m=+417.701493316 I0520 06:10:58.943138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:59.362743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-br5zn" condition "Ready" to 2026-05-20 06:10:59.362729515 +0000 UTC m=+418.166552559 I0520 06:10:59.539498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:59.589750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:10:59.937852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:00.189844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:00.237920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:05.286118 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qk26c-tls" condition "Ready" to 2026-05-20 06:11:05.286098902 +0000 UTC m=+424.089921966 I0520 06:11:05.286249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qk26c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:11:05.286303 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qk26c-tls" condition "Issuing" to 2026-05-20 06:11:05.286290335 +0000 UTC m=+424.090113399 I0520 06:11:05.303315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qk26c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qk26c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:05.303421 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qk26c-tls" condition "Ready" to 2026-05-20 06:11:05.303408715 +0000 UTC m=+424.107231789 I0520 06:11:05.393604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qk26c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qk26c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:05.422075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qk26c-gzxxm" condition "Approved" to 2026-05-20 06:11:05.422063392 +0000 UTC m=+424.225886436 I0520 06:11:05.438101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qk26c-gzxxm" condition "Ready" to 2026-05-20 06:11:05.438090029 +0000 UTC m=+424.241913073 I0520 06:11:05.463148 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qk26c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:11:05.463136006 +0000 UTC m=+424.266959050 I0520 06:11:05.483315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qk26c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qk26c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:32.528303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:11:32.528336 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-20 06:11:32.528328288 +0000 UTC m=+451.332151322 I0520 06:11:32.528517 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 06:11:32.528500812 +0000 UTC m=+451.332323866 I0520 06:11:32.544437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:32.544525 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-20 06:11:32.544517899 +0000 UTC m=+451.348340933 I0520 06:11:32.641811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:32.672810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-snn54" condition "Approved" to 2026-05-20 06:11:32.672795976 +0000 UTC m=+451.476619030 I0520 06:11:32.695037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-snn54" condition "Ready" to 2026-05-20 06:11:32.695026068 +0000 UTC m=+451.498849112 I0520 06:11:32.751044 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:11:32.751027079 +0000 UTC m=+451.554850153 I0520 06:11:32.773907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:32.774173 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:11:32.774164989 +0000 UTC m=+451.577988033 I0520 06:11:32.782351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:11:32.795968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:14:49.415242 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-20 06:14:49.415197209 +0000 UTC m=+648.219020273 I0520 06:14:49.415663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:14:49.415717 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 06:14:49.415706479 +0000 UTC m=+648.219529543 I0520 06:14:49.439242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:14:49.439342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:14:49.439371 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-20 06:14:49.43936203 +0000 UTC m=+648.243185104 I0520 06:14:49.576856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:14:49.586797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kh6k9" condition "Approved" to 2026-05-20 06:14:49.586780356 +0000 UTC m=+648.390603420 I0520 06:14:49.603550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kh6k9" condition "Ready" to 2026-05-20 06:14:49.60353814 +0000 UTC m=+648.407361184 I0520 06:14:49.633015 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:14:49.633003557 +0000 UTC m=+648.436826601 I0520 06:14:49.653358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:14:49.653887 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:14:49.653878192 +0000 UTC m=+648.457701256 I0520 06:14:49.674740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:14:49.675124 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:14:49.675115466 +0000 UTC m=+648.478938530 I0520 06:17:10.561241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:17:10.561301 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-20 06:17:10.561293967 +0000 UTC m=+789.365117001 I0520 06:17:10.561323 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-20 06:17:10.561301517 +0000 UTC m=+789.365124561 I0520 06:17:10.580048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:17:10.580122 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-20 06:17:10.580114042 +0000 UTC m=+789.383937086 I0520 06:17:10.789341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:17:10.819274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-l6qvl" condition "Approved" to 2026-05-20 06:17:10.819263809 +0000 UTC m=+789.623086843 I0520 06:17:10.844758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-l6qvl" condition "Ready" to 2026-05-20 06:17:10.844748068 +0000 UTC m=+789.648571102 I0520 06:17:10.871316 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:17:10.871307679 +0000 UTC m=+789.675130713 I0520 06:17:10.894647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:17:10.957453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:18:06.464895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:18:06.464941 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-20 06:18:06.464930474 +0000 UTC m=+845.268753538 I0520 06:18:06.464980 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-20 06:18:06.464965295 +0000 UTC m=+845.268788349 I0520 06:18:06.483609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:18:06.483701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:18:06.483728 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-20 06:18:06.483719959 +0000 UTC m=+845.287543023 I0520 06:18:06.872667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-d7k2v" condition "Approved" to 2026-05-20 06:18:06.872650717 +0000 UTC m=+845.676473761 I0520 06:18:06.891067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-d7k2v" condition "Ready" to 2026-05-20 06:18:06.891053245 +0000 UTC m=+845.694876289 I0520 06:18:06.920559 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:18:06.920545734 +0000 UTC m=+845.724368778 I0520 06:18:06.943383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:18:06.943678 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:18:06.943672807 +0000 UTC m=+845.747495851 I0520 06:18:06.963315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:21:06.070410 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-20 06:21:06.070368137 +0000 UTC m=+1024.874191211 I0520 06:21:06.071016 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:21:06.071115 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-20 06:21:06.071103832 +0000 UTC m=+1024.874926896 I0520 06:21:06.094014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:21:06.094165 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-20 06:21:06.094152442 +0000 UTC m=+1024.897975506 I0520 06:21:06.322609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:21:06.357282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vj4xg" condition "Approved" to 2026-05-20 06:21:06.357267698 +0000 UTC m=+1025.161090742 I0520 06:21:06.390674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vj4xg" condition "Ready" to 2026-05-20 06:21:06.390653554 +0000 UTC m=+1025.194476628 I0520 06:21:06.421102 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:21:06.42108217 +0000 UTC m=+1025.224905244 I0520 06:21:06.448745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:27:16.344465 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-20 06:27:16.344414249 +0000 UTC m=+1395.148237293 I0520 06:27:16.344593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:27:16.344681 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-20 06:27:16.344673664 +0000 UTC m=+1395.148496708 I0520 06:27:16.363211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:27:16.363403 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:27:16.363429 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-20 06:27:16.363421415 +0000 UTC m=+1395.167244459 I0520 06:27:16.720007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:27:16.723477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-hhwkb" condition "Approved" to 2026-05-20 06:27:16.723463603 +0000 UTC m=+1395.527286637 I0520 06:27:16.746236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-hhwkb" condition "Ready" to 2026-05-20 06:27:16.746221974 +0000 UTC m=+1395.550045018 I0520 06:27:16.776194 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:27:16.776181383 +0000 UTC m=+1395.580004437 I0520 06:27:16.797707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:28:41.416760 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-20 06:28:41.416734196 +0000 UTC m=+1480.220557240 I0520 06:28:41.416781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:28:41.416862 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-20 06:28:41.416854658 +0000 UTC m=+1480.220677702 I0520 06:28:41.432430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:28:41.432511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:28:41.432727 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-20 06:28:41.432720195 +0000 UTC m=+1480.236543269 I0520 06:28:41.821909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:28:41.839596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-55682" condition "Approved" to 2026-05-20 06:28:41.839574677 +0000 UTC m=+1480.643397741 I0520 06:28:41.865813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-55682" condition "Ready" to 2026-05-20 06:28:41.865801328 +0000 UTC m=+1480.669624362 I0520 06:28:41.897193 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:28:41.897176217 +0000 UTC m=+1480.700999281 I0520 06:28:41.917715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:28:41.918272 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:28:41.918260721 +0000 UTC m=+1480.722083765 I0520 06:28:41.939636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:35.735458 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 06:29:35.735435305 +0000 UTC m=+1534.539258349 I0520 06:29:35.735594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:29:35.735687 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-20 06:29:35.73567894 +0000 UTC m=+1534.539502014 I0520 06:29:35.758473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:35.758557 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 06:29:35.758548033 +0000 UTC m=+1534.562371077 I0520 06:29:35.775530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:35.775594 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 06:29:35.775581888 +0000 UTC m=+1534.579404922 I0520 06:29:35.781077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-cbxkg" condition "Approved" to 2026-05-20 06:29:35.781056339 +0000 UTC m=+1534.584879403 I0520 06:29:35.793484 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-20 06:29:35.793477009 +0000 UTC m=+1534.597300053 I0520 06:29:35.798765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-cbxkg" condition "Ready" to 2026-05-20 06:29:35.798757867 +0000 UTC m=+1534.602580911 I0520 06:29:35.804789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:35.823472 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:29:35.823458644 +0000 UTC m=+1534.627281688 I0520 06:29:35.843108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:36.365063 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-20 06:29:36.365044092 +0000 UTC m=+1535.168867166 I0520 06:29:36.365515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:29:36.365606 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-20 06:29:36.365593482 +0000 UTC m=+1535.169416516 I0520 06:29:36.382985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:36.383064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:29:36.383098 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-20 06:29:36.383074805 +0000 UTC m=+1535.186897849 I0520 06:29:36.443962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:36.448576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-tnzqr" condition "Approved" to 2026-05-20 06:29:36.448562617 +0000 UTC m=+1535.252385651 I0520 06:29:36.472596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-tnzqr" condition "Ready" to 2026-05-20 06:29:36.472579501 +0000 UTC m=+1535.276402545 I0520 06:29:36.500997 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:29:36.500979976 +0000 UTC m=+1535.304803010 I0520 06:29:36.516582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:36.517055 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:29:36.517022483 +0000 UTC m=+1535.320845527 I0520 06:29:36.536339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:29:37.091497 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-20 06:29:37.0914814 +0000 UTC m=+1535.895304474 I0520 06:29:37.745462 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-20 06:29:37.745449407 +0000 UTC m=+1536.549272461 I0520 06:30:23.321448 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-20 06:30:23.321431993 +0000 UTC m=+1582.125255027 I0520 06:30:23.321712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:30:23.321781 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-20 06:30:23.321770039 +0000 UTC m=+1582.125593073 I0520 06:30:23.364202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:30:23.364298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:30:23.364329 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-20 06:30:23.364323586 +0000 UTC m=+1582.168146620 I0520 06:30:26.591061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-84b9t" condition "Approved" to 2026-05-20 06:30:26.591043831 +0000 UTC m=+1585.394866885 I0520 06:30:26.615406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-84b9t" condition "Ready" to 2026-05-20 06:30:26.615389973 +0000 UTC m=+1585.419213017 I0520 06:30:26.658610 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:30:26.658596872 +0000 UTC m=+1585.462419906 I0520 06:30:26.684097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:30:26.688042 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:30:26.688013411 +0000 UTC m=+1585.491836455 I0520 06:30:26.698847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:30:26.707818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:50.004131 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-20 06:32:50.004088701 +0000 UTC m=+1728.807911725 I0520 06:32:50.004555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:32:50.004570 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-20 06:32:50.00456711 +0000 UTC m=+1728.808390144 I0520 06:32:50.024316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:50.024426 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-20 06:32:50.024416147 +0000 UTC m=+1728.828239191 I0520 06:32:50.203743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:50.238067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-xs7vb" condition "Approved" to 2026-05-20 06:32:50.238051495 +0000 UTC m=+1729.041874529 I0520 06:32:50.255425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-xs7vb" condition "Ready" to 2026-05-20 06:32:50.255413105 +0000 UTC m=+1729.059236149 I0520 06:32:50.289517 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:32:50.289499942 +0000 UTC m=+1729.093322986 I0520 06:32:50.313170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:50.313545 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:32:50.313537039 +0000 UTC m=+1729.117360073 I0520 06:32:50.318569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:50.331307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:51.550486 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-20 06:32:51.5504698 +0000 UTC m=+1730.354292844 I0520 06:32:51.550988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:32:51.551019 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-20 06:32:51.5510128 +0000 UTC m=+1730.354835854 I0520 06:32:51.569216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:51.569279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:32:51.569302 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-20 06:32:51.569293728 +0000 UTC m=+1730.373116772 I0520 06:32:51.924221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:51.930123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-bn4xp" condition "Approved" to 2026-05-20 06:32:51.930109911 +0000 UTC m=+1730.733932955 I0520 06:32:51.954233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-bn4xp" condition "Ready" to 2026-05-20 06:32:51.954213508 +0000 UTC m=+1730.758036552 I0520 06:32:51.990290 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:32:51.990268353 +0000 UTC m=+1730.794091397 I0520 06:32:52.015338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:32:52.089915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:35:51.866875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:35:51.866988 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-20 06:35:51.866974125 +0000 UTC m=+1910.670797199 I0520 06:35:51.866963 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-20 06:35:51.866933814 +0000 UTC m=+1910.670756878 I0520 06:35:51.887062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:35:51.887333 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-20 06:35:51.887312731 +0000 UTC m=+1910.691135815 I0520 06:35:52.017489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:35:52.049746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lrvwg" condition "Approved" to 2026-05-20 06:35:52.049730989 +0000 UTC m=+1910.853554033 I0520 06:35:52.071129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lrvwg" condition "Ready" to 2026-05-20 06:35:52.071113964 +0000 UTC m=+1910.874937018 I0520 06:35:52.105476 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:35:52.105458363 +0000 UTC m=+1910.909281407 I0520 06:35:52.129365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.098753 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rhc5s-api" condition "Ready" to 2026-05-20 06:36:41.098704531 +0000 UTC m=+1959.902527565 I0520 06:36:41.099136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-rhc5s-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:36:41.099163 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rhc5s-api" condition "Issuing" to 2026-05-20 06:36:41.09916005 +0000 UTC m=+1959.902983084 I0520 06:36:41.099579 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rhc5s-vnc" condition "Ready" to 2026-05-20 06:36:41.099575668 +0000 UTC m=+1959.903398702 I0520 06:36:41.099713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-rhc5s-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:36:41.099727 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rhc5s-vnc" condition "Issuing" to 2026-05-20 06:36:41.099724021 +0000 UTC m=+1959.903547055 I0520 06:36:41.115778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-rhc5s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rhc5s-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.115928 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rhc5s-api" condition "Ready" to 2026-05-20 06:36:41.115913616 +0000 UTC m=+1959.919736690 I0520 06:36:41.123895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-rhc5s-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rhc5s-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.123997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-rhc5s-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:36:41.124037 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-rhc5s-vnc" condition "Issuing" to 2026-05-20 06:36:41.124026284 +0000 UTC m=+1959.927849328 I0520 06:36:41.278347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rhc5s-vnc-2c4wl" condition "Approved" to 2026-05-20 06:36:41.278335364 +0000 UTC m=+1960.082158408 I0520 06:36:41.308891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rhc5s-vnc-2c4wl" condition "Ready" to 2026-05-20 06:36:41.308878708 +0000 UTC m=+1960.112701742 I0520 06:36:41.340929 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rhc5s-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:36:41.340905531 +0000 UTC m=+1960.144728575 I0520 06:36:41.371774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-rhc5s-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rhc5s-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.372182 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rhc5s-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:36:41.372172068 +0000 UTC m=+1960.175995102 I0520 06:36:41.392556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-rhc5s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rhc5s-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.393201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-rhc5s-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rhc5s-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.420786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rhc5s-api-8lnk6" condition "Approved" to 2026-05-20 06:36:41.420767134 +0000 UTC m=+1960.224590168 I0520 06:36:41.438536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-rhc5s-api-8lnk6" condition "Ready" to 2026-05-20 06:36:41.438515899 +0000 UTC m=+1960.242338943 I0520 06:36:41.467313 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rhc5s-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:36:41.467293068 +0000 UTC m=+1960.271116122 I0520 06:36:41.491866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-rhc5s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rhc5s-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.494668 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rhc5s-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:36:41.49465638 +0000 UTC m=+1960.298479444 I0520 06:36:41.498612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-rhc5s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rhc5s-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.507326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-rhc5s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-rhc5s-api\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:36:41.507801 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-rhc5s-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:36:41.507790416 +0000 UTC m=+1960.311613460 I0520 06:38:44.142286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:38:44.142426 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-20 06:38:44.142413972 +0000 UTC m=+2082.946237046 I0520 06:38:44.142312 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-20 06:38:44.1422925 +0000 UTC m=+2082.946115544 I0520 06:38:44.160582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:38:44.160663 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-20 06:38:44.160656505 +0000 UTC m=+2082.964479549 I0520 06:38:44.234807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:38:44.264162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-5mnq5" condition "Approved" to 2026-05-20 06:38:44.264144457 +0000 UTC m=+2083.067967521 I0520 06:38:44.283969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-5mnq5" condition "Ready" to 2026-05-20 06:38:44.283958278 +0000 UTC m=+2083.087781322 I0520 06:38:44.322347 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:38:44.322332289 +0000 UTC m=+2083.126155333 I0520 06:38:44.354126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:38:44.355250 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:38:44.355240526 +0000 UTC m=+2083.159063570 I0520 06:38:44.381352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:38:44.381732 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:38:44.381724013 +0000 UTC m=+2083.185547057 I0520 06:42:20.259927 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-20 06:42:20.259864406 +0000 UTC m=+2299.063687470 I0520 06:42:20.260081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:42:20.260207 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-20 06:42:20.260194262 +0000 UTC m=+2299.064017336 I0520 06:42:20.280861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:42:20.280967 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:42:20.280992 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-20 06:42:20.280983554 +0000 UTC m=+2299.084806598 I0520 06:42:20.529656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-26m7w" condition "Approved" to 2026-05-20 06:42:20.529632637 +0000 UTC m=+2299.333455681 I0520 06:42:20.554290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-26m7w" condition "Ready" to 2026-05-20 06:42:20.554273843 +0000 UTC m=+2299.358096917 I0520 06:42:20.589882 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:42:20.589854434 +0000 UTC m=+2299.393677478 I0520 06:42:20.615411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:42:21.926303 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-20 06:42:21.926288948 +0000 UTC m=+2300.730111982 I0520 06:42:21.926605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:42:21.926634 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-20 06:42:21.926631675 +0000 UTC m=+2300.730454709 I0520 06:42:21.945356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:42:21.945505 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:42:21.945538 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-20 06:42:21.945530772 +0000 UTC m=+2300.749353846 I0520 06:42:22.148295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:42:22.162704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-2zwd9" condition "Approved" to 2026-05-20 06:42:22.16269091 +0000 UTC m=+2300.966513984 I0520 06:42:22.183229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-2zwd9" condition "Ready" to 2026-05-20 06:42:22.183217237 +0000 UTC m=+2300.987040311 I0520 06:42:22.221744 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:42:22.221727084 +0000 UTC m=+2301.025550148 I0520 06:42:22.247698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:31.473395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:44:31.473464 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-20 06:44:31.473450754 +0000 UTC m=+2430.277273798 I0520 06:44:31.473395 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-20 06:44:31.473343152 +0000 UTC m=+2430.277166196 E0520 06:44:31.489593 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 06:44:31.489768 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-20 06:44:31.489755537 +0000 UTC m=+2430.293578581 I0520 06:44:31.489868 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 06:44:31.491834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:31.491960 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-20 06:44:31.49194856 +0000 UTC m=+2430.295771624 E0520 06:44:31.503654 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0520 06:44:31.504391 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 06:44:31.504434 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0520 06:44:31.504571 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0520 06:44:31.522261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:31.548248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-frc47" condition "Approved" to 2026-05-20 06:44:31.548227272 +0000 UTC m=+2430.352050316 I0520 06:44:31.569139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-frc47" condition "Ready" to 2026-05-20 06:44:31.569122524 +0000 UTC m=+2430.372945588 I0520 06:44:31.603168 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:31.603151998 +0000 UTC m=+2430.406975042 I0520 06:44:31.632870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:31.633335 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:31.633326009 +0000 UTC m=+2430.437149053 I0520 06:44:31.655263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:31.655789 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:31.655775101 +0000 UTC m=+2430.459598175 I0520 06:44:31.657731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:32.181677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:44:32.181725 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-20 06:44:32.181714107 +0000 UTC m=+2430.985537141 I0520 06:44:32.181741 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-20 06:44:32.181714147 +0000 UTC m=+2430.985537191 E0520 06:44:32.197245 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 06:44:32.197287 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-20 06:44:32.197279156 +0000 UTC m=+2431.001102200 I0520 06:44:32.197352 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 06:44:32.197929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:32.198142 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-20 06:44:32.198132053 +0000 UTC m=+2431.001955107 E0520 06:44:32.208161 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0520 06:44:32.209078 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0520 06:44:32.209171 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0520 06:44:32.209222 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0520 06:44:32.216170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:32.248054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-d6rrp" condition "Approved" to 2026-05-20 06:44:32.248027552 +0000 UTC m=+2431.051850596 I0520 06:44:32.262914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-d6rrp" condition "Ready" to 2026-05-20 06:44:32.262895649 +0000 UTC m=+2431.066718693 I0520 06:44:32.290796 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:32.290777305 +0000 UTC m=+2431.094600349 I0520 06:44:32.313069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:32.949129 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-20 06:44:32.949062977 +0000 UTC m=+2431.752886021 I0520 06:44:32.949608 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:44:32.949668 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-20 06:44:32.949654568 +0000 UTC m=+2431.753477612 I0520 06:44:32.970395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:32.970523 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-20 06:44:32.970511189 +0000 UTC m=+2431.774334233 I0520 06:44:32.992871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:33.025563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-h6fr2" condition "Approved" to 2026-05-20 06:44:33.025546667 +0000 UTC m=+2431.829369701 I0520 06:44:33.045891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-h6fr2" condition "Ready" to 2026-05-20 06:44:33.045865748 +0000 UTC m=+2431.849688812 I0520 06:44:36.504829 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:36.50481609 +0000 UTC m=+2435.308639194 I0520 06:44:36.520216 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-h6fr2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:36.520198976 +0000 UTC m=+2435.324022040 I0520 06:44:36.550236 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:36.550211173 +0000 UTC m=+2435.354034247 I0520 06:44:36.574582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:36.576011 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:36.575986229 +0000 UTC m=+2435.379809263 I0520 06:44:36.595498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:36.607058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:44:37.209354 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:44:37.209335322 +0000 UTC m=+2436.013158366 I0520 06:46:45.070630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:46:45.070673 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-20 06:46:45.07066483 +0000 UTC m=+2563.874487884 I0520 06:46:45.071217 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-20 06:46:45.07120946 +0000 UTC m=+2563.875032534 I0520 06:46:45.091283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:46:45.091348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:46:45.091363 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-20 06:46:45.091357415 +0000 UTC m=+2563.895180459 I0520 06:46:45.327902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:46:45.341015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-hhxz5" condition "Approved" to 2026-05-20 06:46:45.340985502 +0000 UTC m=+2564.144808566 I0520 06:46:45.361597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-hhxz5" condition "Ready" to 2026-05-20 06:46:45.361581466 +0000 UTC m=+2564.165404510 I0520 06:46:45.393679 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:46:45.393652989 +0000 UTC m=+2564.197476063 I0520 06:46:45.439887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:46:45.440622 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:46:45.440612068 +0000 UTC m=+2564.244435112 I0520 06:46:45.465314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:46:45.465457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:46:45.465875 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:46:45.465865861 +0000 UTC m=+2564.269688905 I0520 06:47:31.494017 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-20 06:47:31.493998688 +0000 UTC m=+2610.297821762 I0520 06:47:31.521025 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-20 06:47:31.520998654 +0000 UTC m=+2610.324821698 I0520 06:47:31.521204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:47:31.521371 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-20 06:47:31.521359162 +0000 UTC m=+2610.325182226 I0520 06:47:31.537047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:31.537116 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-20 06:47:31.537109933 +0000 UTC m=+2610.340932987 E0520 06:47:31.556604 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0520 06:47:31.619360 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-20 06:47:31.619335306 +0000 UTC m=+2610.423158340 I0520 06:47:31.646519 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-20 06:47:31.646500676 +0000 UTC m=+2610.450323720 I0520 06:47:31.646895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:47:31.646922 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-20 06:47:31.646917764 +0000 UTC m=+2610.450740798 I0520 06:47:31.671898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:31.672144 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-20 06:47:31.672131556 +0000 UTC m=+2610.475954630 E0520 06:47:31.680689 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0520 06:47:31.735175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:31.814581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2q5ks" condition "Approved" to 2026-05-20 06:47:31.814573522 +0000 UTC m=+2610.618396546 I0520 06:47:31.849591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-2q5ks" condition "Ready" to 2026-05-20 06:47:31.849578902 +0000 UTC m=+2610.653401946 I0520 06:47:31.886203 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:47:31.886185943 +0000 UTC m=+2610.690009007 I0520 06:47:31.904889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:31.905153 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:47:31.905141225 +0000 UTC m=+2610.708964269 I0520 06:47:31.930029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:32.480928 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-20 06:47:32.480913612 +0000 UTC m=+2611.284736646 I0520 06:47:32.504929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:47:32.505540 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-20 06:47:32.505529333 +0000 UTC m=+2611.309352377 I0520 06:47:32.505004 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-20 06:47:32.504977233 +0000 UTC m=+2611.308800267 I0520 06:47:32.526436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:32.526573 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-20 06:47:32.526560645 +0000 UTC m=+2611.330383679 I0520 06:47:32.623046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:32.651225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-m7ww6" condition "Approved" to 2026-05-20 06:47:32.651208101 +0000 UTC m=+2611.455031145 I0520 06:47:32.672278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-m7ww6" condition "Ready" to 2026-05-20 06:47:32.672257123 +0000 UTC m=+2611.476080157 I0520 06:47:32.716340 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:47:32.716327416 +0000 UTC m=+2611.520150450 I0520 06:47:32.736974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:32.903119 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-20 06:47:32.903103301 +0000 UTC m=+2611.706926335 I0520 06:47:32.920711 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-20 06:47:32.920697487 +0000 UTC m=+2611.724520521 I0520 06:47:32.920753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:47:32.921228 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-20 06:47:32.921223347 +0000 UTC m=+2611.725046391 I0520 06:47:32.957799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:32.958143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:47:32.958175 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-20 06:47:32.958164423 +0000 UTC m=+2611.761987457 I0520 06:47:33.307283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ltrls" condition "Approved" to 2026-05-20 06:47:33.307263794 +0000 UTC m=+2612.111086828 I0520 06:47:33.333321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ltrls" condition "Ready" to 2026-05-20 06:47:33.333307472 +0000 UTC m=+2612.137130506 I0520 06:47:33.360501 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:47:33.360488982 +0000 UTC m=+2612.164312026 I0520 06:47:33.389255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:33.389806 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:47:33.389790772 +0000 UTC m=+2612.193613816 I0520 06:47:33.394575 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-20 06:47:33.394561264 +0000 UTC m=+2612.198384298 I0520 06:47:33.423127 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-20 06:47:33.42311153 +0000 UTC m=+2612.226934574 I0520 06:47:33.423280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:47:33.423320 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-20 06:47:33.423313694 +0000 UTC m=+2612.227136728 I0520 06:47:33.452227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:33.501912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:33.502329 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:47:33.502316696 +0000 UTC m=+2612.306139740 I0520 06:47:33.610031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:33.721717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:33.721781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:47:33.721796 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-20 06:47:33.721791985 +0000 UTC m=+2612.525615019 I0520 06:47:34.157739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:47:34.221380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-pbzpc" condition "Approved" to 2026-05-20 06:47:34.221349544 +0000 UTC m=+2613.025172608 I0520 06:47:34.320514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-pbzpc" condition "Ready" to 2026-05-20 06:47:34.320499022 +0000 UTC m=+2613.124322096 I0520 06:47:34.761015 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:47:34.760989512 +0000 UTC m=+2613.564812556 I0520 06:47:34.905564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:50:50.524600 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-20 06:50:50.524571284 +0000 UTC m=+2809.328394318 I0520 06:50:50.525147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:50:50.525170 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-20 06:50:50.525166086 +0000 UTC m=+2809.328989130 I0520 06:50:50.604944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:50:50.605047 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-20 06:50:50.605039327 +0000 UTC m=+2809.408862381 I0520 06:50:50.898546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:50:50.993949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-v8r6v" condition "Approved" to 2026-05-20 06:50:50.993922833 +0000 UTC m=+2809.797745907 I0520 06:50:51.030130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-v8r6v" condition "Ready" to 2026-05-20 06:50:51.03011445 +0000 UTC m=+2809.833937494 I0520 06:50:51.110299 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:50:51.110281438 +0000 UTC m=+2809.914104482 I0520 06:50:51.160273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:50:51.161000 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:50:51.160987422 +0000 UTC m=+2809.964810476 I0520 06:50:51.191607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:50:53.144167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:50:53.144315 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-20 06:50:53.144299767 +0000 UTC m=+2811.948122811 I0520 06:50:53.144731 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-20 06:50:53.144713055 +0000 UTC m=+2811.948536099 I0520 06:50:53.196635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:50:53.196783 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-20 06:50:53.196770793 +0000 UTC m=+2812.000593857 I0520 06:50:53.318711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:50:53.387119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-r9mp6" condition "Approved" to 2026-05-20 06:50:53.387093751 +0000 UTC m=+2812.190916825 I0520 06:50:53.434602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-r9mp6" condition "Ready" to 2026-05-20 06:50:53.434579266 +0000 UTC m=+2812.238402320 I0520 06:50:53.497974 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:50:53.497954344 +0000 UTC m=+2812.301777378 I0520 06:50:53.546044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:55:07.522670 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-20 06:55:07.522654527 +0000 UTC m=+3066.326477571 I0520 06:55:07.523255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:55:07.524719 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-05-20 06:55:07.524700466 +0000 UTC m=+3066.328523500 I0520 06:55:07.550673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:55:07.550806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:55:07.550840 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-05-20 06:55:07.550829995 +0000 UTC m=+3066.354653039 I0520 06:55:08.026949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:55:08.038868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-7d5sf" condition "Approved" to 2026-05-20 06:55:08.038852616 +0000 UTC m=+3066.842675680 I0520 06:55:08.063197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-7d5sf" condition "Ready" to 2026-05-20 06:55:08.063182102 +0000 UTC m=+3066.867005136 I0520 06:55:08.101098 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:55:08.101073626 +0000 UTC m=+3066.904896690 I0520 06:55:08.121480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:55:08.121866 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:55:08.121858544 +0000 UTC m=+3066.925681588 I0520 06:55:08.151181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:55:42.160652 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 06:55:42.16062201 +0000 UTC m=+3100.964445074 I0520 06:55:42.160673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0520 06:55:42.161175 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-20 06:55:42.161143949 +0000 UTC m=+3100.964967063 I0520 06:55:42.184699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:55:42.184844 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-20 06:55:42.184833362 +0000 UTC m=+3100.988656406 I0520 06:55:42.528789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0520 06:55:42.561834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8494q" condition "Approved" to 2026-05-20 06:55:42.56180929 +0000 UTC m=+3101.365632334 I0520 06:55:42.589542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-8494q" condition "Ready" to 2026-05-20 06:55:42.58952499 +0000 UTC m=+3101.393348024 I0520 06:55:42.623294 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-20 06:55:42.623275165 +0000 UTC m=+3101.427098199 I0520 06:55:42.655477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"