I0427 02:46:08.036623 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0427 02:46:08.036741 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0427 02:46:08.036804 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0427 02:46:08.040991 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0427 02:46:08.041268 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0427 02:46:08.041367 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0427 02:46:08.041405 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0427 02:46:08.043043 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0427 02:46:08.054802 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0427 02:46:08.058307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0427 02:46:08.061087 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0427 02:46:08.068596 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0427 02:46:08.068684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0427 02:46:08.072090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0427 02:46:08.073998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0427 02:46:08.076159 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0427 02:46:08.076182 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0427 02:46:08.076222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0427 02:46:08.078598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0427 02:46:08.081009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0427 02:46:08.085960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0427 02:46:08.089861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0427 02:46:08.093907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0427 02:46:08.095864 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0427 02:46:08.095984 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0427 02:46:08.097968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0427 02:46:08.102130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0427 02:46:08.106265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0427 02:46:08.108040 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0427 02:46:08.112162 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0427 02:46:08.112225 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0427 02:46:08.112286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0427 02:46:08.118200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0427 02:46:08.120402 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.124019 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.124029 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.124320 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.124338 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.124677 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.124734 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.124837 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.124719 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:08.261259 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0427 02:46:21.826805 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-27 02:46:21.82679565 +0000 UTC m=+13.823871580 I0427 02:46:22.816254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:46:22.816296 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-27 02:46:22.816288358 +0000 UTC m=+14.813364308 I0427 02:46:22.820939 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 02:46:22.820922197 +0000 UTC m=+14.817998137 E0427 02:46:22.943278 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 02:46:22.943368 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-27 02:46:22.94335711 +0000 UTC m=+14.940433070 E0427 02:46:22.943453 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 02:46:22.970019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:22.970614 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-27 02:46:22.970607128 +0000 UTC m=+14.967683068 E0427 02:46:22.971175 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0427 02:46:22.971233 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 02:46:22.971262 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 02:46:22.971297 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0427 02:46:22.992759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:23.012249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-htzl5" condition "Approved" to 2026-04-27 02:46:23.012236989 +0000 UTC m=+15.009312929 I0427 02:46:23.024914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-htzl5" condition "Ready" to 2026-04-27 02:46:23.024903537 +0000 UTC m=+15.021979487 I0427 02:46:23.055316 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:46:23.055307026 +0000 UTC m=+15.052382956 I0427 02:46:23.073517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:23.124425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:27.971630 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:46:27.971617538 +0000 UTC m=+19.968693498 I0427 02:46:30.771936 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 02:46:30.771918705 +0000 UTC m=+22.768994665 I0427 02:46:30.771950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:46:30.772093 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-27 02:46:30.77208423 +0000 UTC m=+22.769160170 I0427 02:46:30.791498 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-27 02:46:30.791487075 +0000 UTC m=+22.788563005 I0427 02:46:30.812500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:30.812855 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-27 02:46:30.812574134 +0000 UTC m=+22.809650094 I0427 02:46:30.959349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:30.985851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mgn8l" condition "Approved" to 2026-04-27 02:46:30.985837974 +0000 UTC m=+22.982913914 I0427 02:46:31.027800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mgn8l" condition "Ready" to 2026-04-27 02:46:31.027789465 +0000 UTC m=+23.024865415 I0427 02:46:31.065126 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:46:31.065109577 +0000 UTC m=+23.062185517 I0427 02:46:31.087836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:31.088180 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:46:31.08816871 +0000 UTC m=+23.085244650 I0427 02:46:31.115772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:34.993206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:46:34.993243 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-27 02:46:34.993222864 +0000 UTC m=+26.990298834 I0427 02:46:34.993263 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-27 02:46:34.993252114 +0000 UTC m=+26.990328074 I0427 02:46:35.029021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:35.029131 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-27 02:46:35.02911988 +0000 UTC m=+27.026195840 I0427 02:46:35.043287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:35.043370 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-27 02:46:35.043358198 +0000 UTC m=+27.040434168 I0427 02:46:35.060079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-p9d64" condition "Approved" to 2026-04-27 02:46:35.060062586 +0000 UTC m=+27.057138546 I0427 02:46:35.066819 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-27 02:46:35.066805173 +0000 UTC m=+27.063881113 I0427 02:46:35.074958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:35.090674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-p9d64" condition "Ready" to 2026-04-27 02:46:35.090663282 +0000 UTC m=+27.087739212 I0427 02:46:35.115386 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:46:35.115365857 +0000 UTC m=+27.112441827 I0427 02:46:35.139011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:35.812508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:46:35.812550 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-27 02:46:35.81254185 +0000 UTC m=+27.809617790 I0427 02:46:35.812501 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-27 02:46:35.812483129 +0000 UTC m=+27.809559089 I0427 02:46:35.993556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:35.993644 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-27 02:46:35.993635243 +0000 UTC m=+27.990711173 I0427 02:46:36.093241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:36.123414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-7qzv4" condition "Approved" to 2026-04-27 02:46:36.123400542 +0000 UTC m=+28.120476482 I0427 02:46:36.142603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-7qzv4" condition "Ready" to 2026-04-27 02:46:36.14259025 +0000 UTC m=+28.139666190 I0427 02:46:36.171292 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:46:36.171275724 +0000 UTC m=+28.168351684 I0427 02:46:36.193109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:46:36.645282 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-27 02:46:36.645270269 +0000 UTC m=+28.642346199 I0427 02:46:37.349920 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-27 02:46:37.349906733 +0000 UTC m=+29.346982693 I0427 02:50:58.378563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:50:58.378628 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-27 02:50:58.378616259 +0000 UTC m=+290.375692179 I0427 02:50:58.379000 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-27 02:50:58.378995061 +0000 UTC m=+290.376071001 E0427 02:50:58.394281 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:50:58.394376 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-27 02:50:58.39436303 +0000 UTC m=+290.391438990 I0427 02:50:58.394421 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:50:58.394430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:50:58.394552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:50:58.394599 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-27 02:50:58.394587637 +0000 UTC m=+290.391663607 E0427 02:50:58.404680 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0427 02:50:58.408487 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 02:50:58.408532 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 02:50:58.408587 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0427 02:50:58.410603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:50:58.410623 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-27 02:50:58.410617637 +0000 UTC m=+290.407693567 I0427 02:50:58.410815 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-27 02:50:58.410811933 +0000 UTC m=+290.407887853 I0427 02:50:58.424652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:50:58.424733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:50:58.424760 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-27 02:50:58.424749878 +0000 UTC m=+290.421825828 I0427 02:50:58.724034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:50:58.745223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2tdlm" condition "Approved" to 2026-04-27 02:50:58.745200253 +0000 UTC m=+290.742276223 I0427 02:50:58.765691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2tdlm" condition "Ready" to 2026-04-27 02:50:58.765676671 +0000 UTC m=+290.762752631 I0427 02:50:58.965279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gbqg9" condition "Approved" to 2026-04-27 02:50:58.965262047 +0000 UTC m=+290.962337977 I0427 02:50:58.986926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gbqg9" condition "Ready" to 2026-04-27 02:50:58.986914162 +0000 UTC m=+290.983990102 I0427 02:50:59.032782 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:50:59.032770022 +0000 UTC m=+291.029845962 I0427 02:50:59.056425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:50:59.058247 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:50:59.057619807 +0000 UTC m=+291.054695777 I0427 02:50:59.070636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:50:59.084663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:51:03.405662 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:51:03.405646909 +0000 UTC m=+295.402722869 I0427 02:51:04.854663 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-2tdlm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:51:04.854651953 +0000 UTC m=+296.851727893 I0427 02:51:09.125915 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:51:09.125895861 +0000 UTC m=+301.122971831 I0427 02:51:10.256020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:51:10.256452 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:51:10.256444633 +0000 UTC m=+302.253520573 I0427 02:51:17.476972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:42.316766 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:56:42.316816 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Issuing" to 2026-04-27 02:56:42.316791801 +0000 UTC m=+634.313867741 I0427 02:56:42.316879 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-04-27 02:56:42.316861794 +0000 UTC m=+634.313937734 I0427 02:56:42.341256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:42.341686 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-04-27 02:56:42.341675503 +0000 UTC m=+634.338751453 I0427 02:56:42.493702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:56:42.522096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-vr9cl" condition "Approved" to 2026-04-27 02:56:42.522081191 +0000 UTC m=+634.519157151 I0427 02:56:42.540161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-vr9cl" condition "Ready" to 2026-04-27 02:56:42.540140825 +0000 UTC m=+634.537216795 I0427 02:56:42.571581 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:56:42.571570145 +0000 UTC m=+634.568646085 I0427 02:56:42.592375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:19.884057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 02:59:19.884139 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-27 02:59:19.884133955 +0000 UTC m=+791.881209895 I0427 02:59:19.884059 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 02:59:19.884007221 +0000 UTC m=+791.881083161 I0427 02:59:19.902636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:19.902911 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-27 02:59:19.902763816 +0000 UTC m=+791.899839756 I0427 02:59:20.050297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:20.089514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5mcz7" condition "Approved" to 2026-04-27 02:59:20.089481034 +0000 UTC m=+792.086556994 I0427 02:59:20.107196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5mcz7" condition "Ready" to 2026-04-27 02:59:20.107180475 +0000 UTC m=+792.104256415 I0427 02:59:20.136395 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:20.136381261 +0000 UTC m=+792.133457201 I0427 02:59:20.155466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:20.155803 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 02:59:20.155792916 +0000 UTC m=+792.152868856 I0427 02:59:20.167291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 02:59:20.181219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:01.598853 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-27 03:00:01.598832583 +0000 UTC m=+833.595908523 I0427 03:00:01.599119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:00:01.599170 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 03:00:01.599157593 +0000 UTC m=+833.596233523 I0427 03:00:01.618556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:01.618884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:00:01.618919 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-27 03:00:01.618909099 +0000 UTC m=+833.615985029 I0427 03:00:01.902143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t2l88" condition "Approved" to 2026-04-27 03:00:01.902128246 +0000 UTC m=+833.899204196 I0427 03:00:01.920887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-t2l88" condition "Ready" to 2026-04-27 03:00:01.92087203 +0000 UTC m=+833.917947970 I0427 03:00:01.950164 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:01.950151058 +0000 UTC m=+833.947226998 I0427 03:00:01.974836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:01.975281 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:01.975271434 +0000 UTC m=+833.972347374 I0427 03:00:01.993379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:01.993691 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:01.993682648 +0000 UTC m=+833.990758578 I0427 03:00:32.538745 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-27 03:00:32.538712816 +0000 UTC m=+864.535788766 I0427 03:00:32.538862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:00:32.539284 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-27 03:00:32.539263744 +0000 UTC m=+864.536339684 I0427 03:00:32.555746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:32.555941 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:00:32.555978 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-27 03:00:32.555966935 +0000 UTC m=+864.553042895 I0427 03:00:32.697229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6tjfp" condition "Approved" to 2026-04-27 03:00:32.697206071 +0000 UTC m=+864.694282031 I0427 03:00:32.720665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6tjfp" condition "Ready" to 2026-04-27 03:00:32.720650105 +0000 UTC m=+864.717726065 I0427 03:00:32.764502 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:32.764484718 +0000 UTC m=+864.761560648 I0427 03:00:32.786178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:32.787024 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:32.787011983 +0000 UTC m=+864.784087913 I0427 03:00:32.795946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:32.815340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:35.035557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:00:35.035597 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 03:00:35.035586667 +0000 UTC m=+867.032662597 I0427 03:00:35.035726 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-27 03:00:35.035695861 +0000 UTC m=+867.032771831 E0427 03:00:35.051033 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 03:00:35.051140 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-27 03:00:35.051130801 +0000 UTC m=+867.048206741 E0427 03:00:35.051335 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0427 03:00:35.052369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:35.052478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:00:35.052516 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-27 03:00:35.052506715 +0000 UTC m=+867.049582655 E0427 03:00:35.063636 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0427 03:00:35.063816 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 03:00:35.063865 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0427 03:00:35.063956 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0427 03:00:35.120952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xwtll" condition "Approved" to 2026-04-27 03:00:35.120934418 +0000 UTC m=+867.118010358 I0427 03:00:35.133795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xwtll" condition "Ready" to 2026-04-27 03:00:35.133779596 +0000 UTC m=+867.130855536 I0427 03:00:35.159216 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:35.159199124 +0000 UTC m=+867.156275074 I0427 03:00:35.172793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:00:40.064236 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:00:40.064220145 +0000 UTC m=+872.061296105 I0427 03:01:19.486194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:19.486244 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-27 03:01:19.486236265 +0000 UTC m=+911.483312205 I0427 03:01:19.486922 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-27 03:01:19.486875515 +0000 UTC m=+911.483951455 I0427 03:01:19.516803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:19.516984 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-27 03:01:19.516976631 +0000 UTC m=+911.514052561 I0427 03:01:19.886622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:19.942499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wqxj7" condition "Approved" to 2026-04-27 03:01:19.942482987 +0000 UTC m=+911.939558927 I0427 03:01:19.964051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wqxj7" condition "Ready" to 2026-04-27 03:01:19.964038042 +0000 UTC m=+911.961113982 I0427 03:01:19.999982 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:19.999953063 +0000 UTC m=+911.997028993 I0427 03:01:20.039232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:20.039490 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:20.039483918 +0000 UTC m=+912.036559848 I0427 03:01:20.064010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:20.067001 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:20.066987642 +0000 UTC m=+912.064063572 I0427 03:01:26.679610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:26.679662 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 03:01:26.679654575 +0000 UTC m=+918.676730505 I0427 03:01:26.679943 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-27 03:01:26.679937554 +0000 UTC m=+918.677013484 I0427 03:01:26.686455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:26.686497 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 03:01:26.686490002 +0000 UTC m=+918.683565932 I0427 03:01:26.686837 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-27 03:01:26.686820323 +0000 UTC m=+918.683896253 I0427 03:01:26.686915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:26.686940 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-27 03:01:26.686935186 +0000 UTC m=+918.684011116 I0427 03:01:26.687241 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 03:01:26.687236306 +0000 UTC m=+918.684312226 I0427 03:01:26.773793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:26.773952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:26.773998 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-27 03:01:26.773992302 +0000 UTC m=+918.771068232 I0427 03:01:26.777236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:26.777298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:26.777522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:26.777657 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-27 03:01:26.777644337 +0000 UTC m=+918.774720267 I0427 03:01:26.778758 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-27 03:01:26.778748553 +0000 UTC m=+918.775824513 I0427 03:01:27.084793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:27.101514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-825jk" condition "Approved" to 2026-04-27 03:01:27.101488734 +0000 UTC m=+919.098564694 I0427 03:01:27.122280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jpv6c" condition "Approved" to 2026-04-27 03:01:27.122264054 +0000 UTC m=+919.119339994 I0427 03:01:27.131211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-825jk" condition "Ready" to 2026-04-27 03:01:27.131200018 +0000 UTC m=+919.128275948 I0427 03:01:27.145254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jpv6c" condition "Ready" to 2026-04-27 03:01:27.145239834 +0000 UTC m=+919.142315764 I0427 03:01:27.165415 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:27.165401414 +0000 UTC m=+919.162477354 I0427 03:01:27.215599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:27.216555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:27.217416 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:27.217398936 +0000 UTC m=+919.214474876 I0427 03:01:27.217923 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:27.217902252 +0000 UTC m=+919.214978192 I0427 03:01:27.251566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:27.251948 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:27.251937963 +0000 UTC m=+919.249013913 I0427 03:01:27.253246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:27.325625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:27.482155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ntg46" condition "Approved" to 2026-04-27 03:01:27.482134595 +0000 UTC m=+919.479210535 I0427 03:01:27.575234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ntg46" condition "Ready" to 2026-04-27 03:01:27.575220032 +0000 UTC m=+919.572295962 I0427 03:01:27.957919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:27.957953 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls" condition "Issuing" to 2026-04-27 03:01:27.957946489 +0000 UTC m=+919.955022419 I0427 03:01:27.958071 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls" condition "Ready" to 2026-04-27 03:01:27.958068312 +0000 UTC m=+919.955144232 I0427 03:01:28.217336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:28.217420 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls" condition "Ready" to 2026-04-27 03:01:28.21741071 +0000 UTC m=+920.214486640 I0427 03:01:28.351726 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:28.351707166 +0000 UTC m=+920.348783096 I0427 03:01:28.465501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:28.571805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:28.572195 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:28.57218867 +0000 UTC m=+920.569264600 I0427 03:01:28.833951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:28.918054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:29.093755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zwjxs-vhf6h" condition "Approved" to 2026-04-27 03:01:29.093735566 +0000 UTC m=+921.090811496 I0427 03:01:29.178507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zwjxs-vhf6h" condition "Ready" to 2026-04-27 03:01:29.178484978 +0000 UTC m=+921.175560908 I0427 03:01:29.746032 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:29.746017344 +0000 UTC m=+921.743093274 I0427 03:01:29.821528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zwjxs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:37.090284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:01:37.090325 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-27 03:01:37.090317056 +0000 UTC m=+929.087392996 I0427 03:01:37.090678 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 03:01:37.090672217 +0000 UTC m=+929.087748147 I0427 03:01:37.110114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:37.110660 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-27 03:01:37.110650442 +0000 UTC m=+929.107726392 I0427 03:01:37.232910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:37.275489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-82qsp" condition "Approved" to 2026-04-27 03:01:37.275476438 +0000 UTC m=+929.272552378 I0427 03:01:37.298927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-82qsp" condition "Ready" to 2026-04-27 03:01:37.298919183 +0000 UTC m=+929.295995113 I0427 03:01:37.336393 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:01:37.336374592 +0000 UTC m=+929.333450522 I0427 03:01:37.358035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:01:37.414233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:09.798573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:02:09.798624 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-27 03:02:09.798614614 +0000 UTC m=+961.795690554 I0427 03:02:09.799000 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-27 03:02:09.798994717 +0000 UTC m=+961.796070647 I0427 03:02:09.820903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:09.820977 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-27 03:02:09.820970834 +0000 UTC m=+961.818046764 I0427 03:02:09.922201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:09.956241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mmv8c" condition "Approved" to 2026-04-27 03:02:09.95621525 +0000 UTC m=+961.953291210 I0427 03:02:09.975860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mmv8c" condition "Ready" to 2026-04-27 03:02:09.975834854 +0000 UTC m=+961.972910814 I0427 03:02:10.016239 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:02:10.016198606 +0000 UTC m=+962.013274576 I0427 03:02:10.035336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:10.035761 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:02:10.035751647 +0000 UTC m=+962.032827577 I0427 03:02:10.053605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:10.058630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:30.150950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:02:30.150999 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-27 03:02:30.150988599 +0000 UTC m=+982.148064559 I0427 03:02:30.151377 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-27 03:02:30.151368331 +0000 UTC m=+982.148444301 I0427 03:02:30.172861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:30.172967 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-27 03:02:30.172955292 +0000 UTC m=+982.170031252 I0427 03:02:30.345563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:30.380277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-nq2tl" condition "Approved" to 2026-04-27 03:02:30.38025059 +0000 UTC m=+982.377326550 I0427 03:02:30.409852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-nq2tl" condition "Ready" to 2026-04-27 03:02:30.409832013 +0000 UTC m=+982.406907963 I0427 03:02:30.442233 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:02:30.442215344 +0000 UTC m=+982.439291284 I0427 03:02:30.462768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:02:30.522685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:22.311451 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-27 03:03:22.311416428 +0000 UTC m=+1034.308492358 I0427 03:03:22.337477 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-27 03:03:22.337434979 +0000 UTC m=+1034.334510919 I0427 03:03:22.337357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:22.338268 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-27 03:03:22.338262295 +0000 UTC m=+1034.335338225 I0427 03:03:22.358378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:22.358469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:22.358502 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-27 03:03:22.358493503 +0000 UTC m=+1034.355569433 E0427 03:03:22.371421 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0427 03:03:22.427409 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-27 03:03:22.427384035 +0000 UTC m=+1034.424460005 I0427 03:03:22.446989 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-27 03:03:22.446965623 +0000 UTC m=+1034.444041563 I0427 03:03:22.447100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:22.447165 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-27 03:03:22.447153379 +0000 UTC m=+1034.444229309 I0427 03:03:22.466822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:22.466920 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-27 03:03:22.466909932 +0000 UTC m=+1034.463985862 E0427 03:03:22.596013 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0427 03:03:22.660309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:22.698678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rdbpt" condition "Approved" to 2026-04-27 03:03:22.69865824 +0000 UTC m=+1034.695734190 I0427 03:03:22.721412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rdbpt" condition "Ready" to 2026-04-27 03:03:22.721396488 +0000 UTC m=+1034.718472428 I0427 03:03:22.806891 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:22.806872483 +0000 UTC m=+1034.803948403 I0427 03:03:22.816071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:22.816091 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-27 03:03:22.816071383 +0000 UTC m=+1034.813147313 I0427 03:03:22.816136 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-27 03:03:22.816119865 +0000 UTC m=+1034.813195795 I0427 03:03:22.851119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:22.851620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:22.851708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:22.851731 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-27 03:03:22.851725668 +0000 UTC m=+1034.848801598 I0427 03:03:22.851431 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:22.851423708 +0000 UTC m=+1034.848499638 I0427 03:03:22.910557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:23.547249 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-27 03:03:23.547224062 +0000 UTC m=+1035.544300012 I0427 03:03:23.568507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:23.568559 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-27 03:03:23.568549834 +0000 UTC m=+1035.565625774 I0427 03:03:23.568972 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-27 03:03:23.568965987 +0000 UTC m=+1035.566041927 I0427 03:03:23.595941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:23.596254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:23.596345 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-27 03:03:23.59633662 +0000 UTC m=+1035.593412560 I0427 03:03:23.788569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:23.814462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-kd96h" condition "Approved" to 2026-04-27 03:03:23.814423988 +0000 UTC m=+1035.811499918 I0427 03:03:23.838444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-kd96h" condition "Ready" to 2026-04-27 03:03:23.838430285 +0000 UTC m=+1035.835506225 I0427 03:03:23.897773 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:23.897753406 +0000 UTC m=+1035.894829366 I0427 03:03:23.969875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:23.970356 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:23.970347445 +0000 UTC m=+1035.967423395 I0427 03:03:23.997175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:23.998367 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:23.998357919 +0000 UTC m=+1035.995433859 I0427 03:03:24.085031 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-27 03:03:24.085010692 +0000 UTC m=+1036.082086612 I0427 03:03:24.135707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:24.135749 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-27 03:03:24.135740922 +0000 UTC m=+1036.132816852 I0427 03:03:24.136038 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-27 03:03:24.136034031 +0000 UTC m=+1036.133109951 I0427 03:03:24.154824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:24.154923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:24.154944 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-27 03:03:24.154938727 +0000 UTC m=+1036.152014647 I0427 03:03:24.688582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-5c86s" condition "Approved" to 2026-04-27 03:03:24.688564505 +0000 UTC m=+1036.685640435 I0427 03:03:24.697821 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-27 03:03:24.697804666 +0000 UTC m=+1036.694880606 I0427 03:03:24.717218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:24.717257 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-27 03:03:24.71724874 +0000 UTC m=+1036.714324680 I0427 03:03:24.718695 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-27 03:03:24.718686475 +0000 UTC m=+1036.715762415 I0427 03:03:24.719435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-5c86s" condition "Ready" to 2026-04-27 03:03:24.719416948 +0000 UTC m=+1036.716492908 I0427 03:03:24.738779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:24.738872 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-27 03:03:24.738864511 +0000 UTC m=+1036.735940441 I0427 03:03:24.766353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-jclzq" condition "Approved" to 2026-04-27 03:03:24.766330028 +0000 UTC m=+1036.763405988 I0427 03:03:24.786178 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:24.786159453 +0000 UTC m=+1036.783235393 I0427 03:03:24.804231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-jclzq" condition "Ready" to 2026-04-27 03:03:24.804214852 +0000 UTC m=+1036.801290782 I0427 03:03:25.034967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:25.035406 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:25.035396763 +0000 UTC m=+1037.032472693 I0427 03:03:25.426708 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:25.426687993 +0000 UTC m=+1037.423763923 I0427 03:03:25.516811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:25.528960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:25.675606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:25.676251 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:25.676245293 +0000 UTC m=+1037.673321223 I0427 03:03:25.980063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-lcm4k" condition "Approved" to 2026-04-27 03:03:25.980046704 +0000 UTC m=+1037.977122654 I0427 03:03:26.022150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:26.140470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-lcm4k" condition "Ready" to 2026-04-27 03:03:26.140458013 +0000 UTC m=+1038.137533943 I0427 03:03:26.630296 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:26.630279481 +0000 UTC m=+1038.627355411 I0427 03:03:26.780278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:26.780591 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:26.780585381 +0000 UTC m=+1038.777661301 I0427 03:03:26.972621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:49.737616 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-27 03:03:49.737596969 +0000 UTC m=+1061.734672899 I0427 03:03:49.738071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:49.738089 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-27 03:03:49.738086265 +0000 UTC m=+1061.735162195 I0427 03:03:49.757112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:49.757287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:49.757409 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-27 03:03:49.757396924 +0000 UTC m=+1061.754472884 I0427 03:03:49.900049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-gdmrh" condition "Approved" to 2026-04-27 03:03:49.900030052 +0000 UTC m=+1061.897106012 I0427 03:03:49.931397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-gdmrh" condition "Ready" to 2026-04-27 03:03:49.931380551 +0000 UTC m=+1061.928456491 I0427 03:03:49.960914 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:49.960900252 +0000 UTC m=+1061.957976202 I0427 03:03:49.997335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:49.997819 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:49.997811156 +0000 UTC m=+1061.994887086 I0427 03:03:50.001177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:50.022051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:50.022469 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:50.022459733 +0000 UTC m=+1062.019535673 I0427 03:03:51.131011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:51.131074 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-27 03:03:51.131062345 +0000 UTC m=+1063.128138305 I0427 03:03:51.131152 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-27 03:03:51.131126147 +0000 UTC m=+1063.128202087 I0427 03:03:51.149343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:51.149611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:03:51.149691 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-27 03:03:51.149678422 +0000 UTC m=+1063.146754362 I0427 03:03:51.352050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:51.371583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-bknr5" condition "Approved" to 2026-04-27 03:03:51.37156139 +0000 UTC m=+1063.368637320 I0427 03:03:51.420163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-bknr5" condition "Ready" to 2026-04-27 03:03:51.420152842 +0000 UTC m=+1063.417228772 I0427 03:03:51.457568 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:51.457550092 +0000 UTC m=+1063.454626032 I0427 03:03:51.481173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:51.481963 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:51.481951581 +0000 UTC m=+1063.479027521 I0427 03:03:51.502009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:03:51.502573 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:03:51.502563691 +0000 UTC m=+1063.499639631 I0427 03:03:51.507250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:05:00.524398 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-27 03:05:00.524377198 +0000 UTC m=+1132.521453128 I0427 03:05:00.523787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:05:00.524761 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-27 03:05:00.52474563 +0000 UTC m=+1132.521821570 I0427 03:05:00.549674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:05:00.549881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:05:00.549921 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-27 03:05:00.549901301 +0000 UTC m=+1132.546977241 I0427 03:05:00.867247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-xcsls" condition "Approved" to 2026-04-27 03:05:00.867220418 +0000 UTC m=+1132.864296358 I0427 03:05:00.888381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-xcsls" condition "Ready" to 2026-04-27 03:05:00.888368103 +0000 UTC m=+1132.885444033 I0427 03:05:00.957708 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:05:00.957687004 +0000 UTC m=+1132.954762944 I0427 03:05:00.982285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:05:00.982653 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:05:00.982643159 +0000 UTC m=+1132.979719099 I0427 03:05:01.013431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:13.850157 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:06:13.850170 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-27 03:06:13.850161809 +0000 UTC m=+1205.847237729 I0427 03:06:13.850191 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-27 03:06:13.85018603 +0000 UTC m=+1205.847261980 I0427 03:06:13.865062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:13.865197 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-27 03:06:13.865185652 +0000 UTC m=+1205.862261592 I0427 03:06:14.229083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:14.262786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-z6s4b" condition "Approved" to 2026-04-27 03:06:14.262769024 +0000 UTC m=+1206.259844994 I0427 03:06:14.283654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-z6s4b" condition "Ready" to 2026-04-27 03:06:14.283640951 +0000 UTC m=+1206.280716891 I0427 03:06:14.322015 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:06:14.321796962 +0000 UTC m=+1206.318872902 I0427 03:06:14.351886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:15.370490 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-27 03:06:15.370471964 +0000 UTC m=+1207.367547904 I0427 03:06:15.371029 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:06:15.371052 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-27 03:06:15.371048613 +0000 UTC m=+1207.368124563 I0427 03:06:15.389220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:15.389342 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-27 03:06:15.389331828 +0000 UTC m=+1207.386407768 I0427 03:06:15.521369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:15.549516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-mmqrw" condition "Approved" to 2026-04-27 03:06:15.549496738 +0000 UTC m=+1207.546572698 I0427 03:06:15.567551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-mmqrw" condition "Ready" to 2026-04-27 03:06:15.567539736 +0000 UTC m=+1207.564615686 I0427 03:06:15.596877 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:06:15.596863919 +0000 UTC m=+1207.593939849 I0427 03:06:15.616738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:15.617051 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:06:15.617042774 +0000 UTC m=+1207.614118714 I0427 03:06:15.647767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:59.865894 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-27 03:06:59.865841249 +0000 UTC m=+1251.862917219 I0427 03:06:59.866476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:06:59.866512 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-27 03:06:59.86650551 +0000 UTC m=+1251.863581480 I0427 03:06:59.881383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:06:59.881669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:06:59.881708 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-27 03:06:59.881696968 +0000 UTC m=+1251.878772928 I0427 03:07:00.183702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-pj5p9" condition "Approved" to 2026-04-27 03:07:00.183688899 +0000 UTC m=+1252.180764839 I0427 03:07:00.205678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-pj5p9" condition "Ready" to 2026-04-27 03:07:00.20565791 +0000 UTC m=+1252.202733850 I0427 03:07:00.243369 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:00.243356066 +0000 UTC m=+1252.240431996 I0427 03:07:00.276143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:00.346287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:02.648317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:07:02.648355 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-27 03:07:02.648339915 +0000 UTC m=+1254.645415855 I0427 03:07:02.648383 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-27 03:07:02.648370006 +0000 UTC m=+1254.645445946 I0427 03:07:02.671485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:07:02.671723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:07:02.671751 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-27 03:07:02.671743981 +0000 UTC m=+1254.668819921 I0427 03:07:02.841651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-vbl5p" condition "Approved" to 2026-04-27 03:07:02.841634526 +0000 UTC m=+1254.838710466 I0427 03:07:02.871380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-vbl5p" condition "Ready" to 2026-04-27 03:07:02.871358511 +0000 UTC m=+1254.868434451 I0427 03:07:02.912056 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:07:02.912040121 +0000 UTC m=+1254.909116051 I0427 03:07:02.934660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:43.238661 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-27 03:09:43.238630954 +0000 UTC m=+1415.235706904 I0427 03:09:43.238893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:09:43.238925 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-27 03:09:43.238920553 +0000 UTC m=+1415.235996493 I0427 03:09:43.258961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:43.259110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:09:43.259160 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-27 03:09:43.259151459 +0000 UTC m=+1415.256227399 I0427 03:09:43.475561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:43.484257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-tg6v9" condition "Approved" to 2026-04-27 03:09:43.484240224 +0000 UTC m=+1415.481316154 I0427 03:09:43.510369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-tg6v9" condition "Ready" to 2026-04-27 03:09:43.510355836 +0000 UTC m=+1415.507431776 I0427 03:09:43.542594 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:09:43.54257858 +0000 UTC m=+1415.539654510 I0427 03:09:43.570321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:52.315638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-bzl6c-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:09:52.315669 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-bzl6c-api" condition "Issuing" to 2026-04-27 03:09:52.315662913 +0000 UTC m=+1424.312738843 I0427 03:09:52.315917 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-bzl6c-api" condition "Ready" to 2026-04-27 03:09:52.315912771 +0000 UTC m=+1424.312988701 I0427 03:09:52.316087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-bzl6c-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:09:52.316096 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-bzl6c-vnc" condition "Issuing" to 2026-04-27 03:09:52.316093157 +0000 UTC m=+1424.313169087 I0427 03:09:52.316209 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-bzl6c-vnc" condition "Ready" to 2026-04-27 03:09:52.316206141 +0000 UTC m=+1424.313282071 I0427 03:09:52.341718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-bzl6c-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-bzl6c-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:52.341789 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-bzl6c-vnc" condition "Ready" to 2026-04-27 03:09:52.341782715 +0000 UTC m=+1424.338858635 I0427 03:09:52.351613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-bzl6c-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-bzl6c-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:52.351719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-bzl6c-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:09:52.351735 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-bzl6c-api" condition "Issuing" to 2026-04-27 03:09:52.351729769 +0000 UTC m=+1424.348805699 I0427 03:09:52.726620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-bzl6c-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-bzl6c-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:52.737917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-bzl6c-api-42s5d" condition "Approved" to 2026-04-27 03:09:52.737902792 +0000 UTC m=+1424.734978722 I0427 03:09:52.755493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-bzl6c-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-bzl6c-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:52.761574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-bzl6c-api-42s5d" condition "Ready" to 2026-04-27 03:09:52.761560257 +0000 UTC m=+1424.758636197 I0427 03:09:52.782786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-bzl6c-vnc-p6vl6" condition "Approved" to 2026-04-27 03:09:52.782769195 +0000 UTC m=+1424.779845135 I0427 03:09:52.804211 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-bzl6c-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:09:52.804193169 +0000 UTC m=+1424.801269109 I0427 03:09:52.807305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-bzl6c-vnc-p6vl6" condition "Ready" to 2026-04-27 03:09:52.807298087 +0000 UTC m=+1424.804374027 I0427 03:09:52.849305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-bzl6c-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-bzl6c-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:52.849810 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-bzl6c-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:09:52.849792034 +0000 UTC m=+1424.846867964 I0427 03:09:52.876883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-bzl6c-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-bzl6c-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:52.877675 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-bzl6c-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:09:52.877663881 +0000 UTC m=+1424.874739821 I0427 03:09:52.908441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-bzl6c-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-bzl6c-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:09:52.916118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-bzl6c-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-bzl6c-api\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:09.457063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:11:09.457098 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-27 03:11:09.457090389 +0000 UTC m=+1501.454166329 I0427 03:11:09.457518 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-27 03:11:09.457511052 +0000 UTC m=+1501.454586992 E0427 03:11:09.479804 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:11:09.479847 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-27 03:11:09.479839268 +0000 UTC m=+1501.476915198 I0427 03:11:09.479917 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:11:09.480673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:09.480829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:11:09.480851 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-27 03:11:09.480846979 +0000 UTC m=+1501.477922909 E0427 03:11:09.514175 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0427 03:11:09.514336 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:11:09.514403 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 03:11:09.514469 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0427 03:11:09.553957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-p6tdq" condition "Approved" to 2026-04-27 03:11:09.55394054 +0000 UTC m=+1501.551016470 I0427 03:11:09.620658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-p6tdq" condition "Ready" to 2026-04-27 03:11:09.620646088 +0000 UTC m=+1501.617722028 I0427 03:11:09.654766 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:11:09.654752186 +0000 UTC m=+1501.651828136 I0427 03:11:09.671811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:09.672092 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:11:09.672083194 +0000 UTC m=+1501.669159134 I0427 03:11:09.686298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:09.702372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:10.307013 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-27 03:11:10.306994785 +0000 UTC m=+1502.304070725 I0427 03:11:10.307347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:11:10.307404 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-27 03:11:10.307391078 +0000 UTC m=+1502.304467048 I0427 03:11:10.334209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:10.334386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:11:10.334417 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-27 03:11:10.334408702 +0000 UTC m=+1502.331484672 E0427 03:11:10.334566 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:11:10.334806 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-27 03:11:10.334788554 +0000 UTC m=+1502.331864524 I0427 03:11:10.335010 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 03:11:10.347785 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0427 03:11:10.348225 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0427 03:11:10.348278 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0427 03:11:10.348577 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0427 03:11:10.385661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-g4x7l" condition "Approved" to 2026-04-27 03:11:10.385645291 +0000 UTC m=+1502.382721231 I0427 03:11:10.418043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-g4x7l" condition "Ready" to 2026-04-27 03:11:10.418032556 +0000 UTC m=+1502.415108496 I0427 03:11:10.445645 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:11:10.445631308 +0000 UTC m=+1502.442707248 I0427 03:11:10.467570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:10.469373 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:11:10.469348798 +0000 UTC m=+1502.466424958 I0427 03:11:10.478052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:10.506751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:11.214184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:11:11.214220 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-27 03:11:11.214212225 +0000 UTC m=+1503.211288165 I0427 03:11:11.214546 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-27 03:11:11.214540675 +0000 UTC m=+1503.211616615 I0427 03:11:11.247501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:11.247658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0427 03:11:11.247686 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-27 03:11:11.247676243 +0000 UTC m=+1503.244752193 I0427 03:11:11.342759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-mxvlt" condition "Approved" to 2026-04-27 03:11:11.342743828 +0000 UTC m=+1503.339819768 I0427 03:11:11.362305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-mxvlt" condition "Ready" to 2026-04-27 03:11:11.362290626 +0000 UTC m=+1503.359366556 I0427 03:11:14.514678 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:11:14.514667369 +0000 UTC m=+1506.511743309 I0427 03:11:14.541929 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-mxvlt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:11:14.541915791 +0000 UTC m=+1506.538991731 I0427 03:11:14.578587 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:11:14.578571289 +0000 UTC m=+1506.575647229 I0427 03:11:14.600069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0427 03:11:15.348505 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-27 03:11:15.348490578 +0000 UTC m=+1507.345566508