I0519 15:47:37.220921 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0519 15:47:37.221070 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0519 15:47:37.221162 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0519 15:47:37.226222 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0519 15:47:37.226867 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0519 15:47:37.226944 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0519 15:47:37.226976 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0519 15:47:37.232067 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0519 15:47:37.249534 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0519 15:47:37.255864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0519 15:47:37.261285 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0519 15:47:37.261366 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0519 15:47:37.261379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0519 15:47:37.265464 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0519 15:47:37.268168 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0519 15:47:37.268204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0519 15:47:37.271011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0519 15:47:37.272751 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0519 15:47:37.274342 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0519 15:47:37.274372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0519 15:47:37.279661 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0519 15:47:37.282663 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0519 15:47:37.285351 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0519 15:47:37.285397 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0519 15:47:37.285439 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0519 15:47:37.287515 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0519 15:47:37.289479 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0519 15:47:37.291503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0519 15:47:37.293159 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0519 15:47:37.295045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0519 15:47:37.301615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0519 15:47:37.304512 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0519 15:47:37.307225 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0519 15:47:37.309202 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.310609 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.311120 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.331435 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.348141 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.366955 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.384710 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.393782 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.402148 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:37.420610 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 15:47:50.116945 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-19 15:47:50.116928797 +0000 UTC m=+12.929229638 I0519 15:47:50.872587 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-19 15:47:50.872570738 +0000 UTC m=+13.684871579 I0519 15:47:50.872894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:47:50.873015 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 15:47:50.872999651 +0000 UTC m=+13.685300492 E0519 15:47:50.886939 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 15:47:50.887058 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-19 15:47:50.887046909 +0000 UTC m=+13.699347740 E0519 15:47:50.887092 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 15:47:50.889353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:47:50.889468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:47:50.889513 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 15:47:50.889502207 +0000 UTC m=+13.701803048 E0519 15:47:50.900870 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0519 15:47:50.900981 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 15:47:50.901015 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 15:47:50.901046 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0519 15:47:50.930179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ttvht" condition "Approved" to 2026-05-19 15:47:50.930159592 +0000 UTC m=+13.742460423 I0519 15:47:50.943588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ttvht" condition "Ready" to 2026-05-19 15:47:50.94357448 +0000 UTC m=+13.755875291 I0519 15:47:50.965719 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:47:50.965698124 +0000 UTC m=+13.777998935 I0519 15:47:50.987211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:47:50.988363 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:47:50.988344406 +0000 UTC m=+13.800645227 I0519 15:47:50.995344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:47:51.006793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:47:51.006975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:47:51.007207 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:47:51.007195216 +0000 UTC m=+13.819496027 I0519 15:47:55.901492 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:47:55.901479618 +0000 UTC m=+18.713780459 I0519 15:48:16.594437 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:48:16.594476 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 15:48:16.594468101 +0000 UTC m=+39.406768912 I0519 15:48:16.594755 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-19 15:48:16.59474494 +0000 UTC m=+39.407045781 I0519 15:48:16.608602 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-19 15:48:16.608588601 +0000 UTC m=+39.420889412 I0519 15:48:16.613945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:48:16.614141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:48:16.614215 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 15:48:16.61420672 +0000 UTC m=+39.426507531 I0519 15:48:17.140092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:48:17.148561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b2x84" condition "Approved" to 2026-05-19 15:48:17.148543931 +0000 UTC m=+39.960844772 I0519 15:48:17.180533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b2x84" condition "Ready" to 2026-05-19 15:48:17.180523409 +0000 UTC m=+39.992824210 I0519 15:48:17.212912 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:48:17.21289073 +0000 UTC m=+40.025191571 I0519 15:48:17.239251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:48:17.239613 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:48:17.239606811 +0000 UTC m=+40.051907632 I0519 15:48:17.256333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:48:17.256576 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:48:17.256569762 +0000 UTC m=+40.068870573 I0519 15:54:16.333891 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Ready" to 2026-05-19 15:54:16.333878241 +0000 UTC m=+399.146179032 I0519 15:54:16.334653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-226.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:54:16.334712 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Issuing" to 2026-05-19 15:54:16.334703227 +0000 UTC m=+399.147004068 I0519 15:54:16.975952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:54:16.976033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-226.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:54:16.976061 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Issuing" to 2026-05-19 15:54:16.976051663 +0000 UTC m=+399.788352504 I0519 15:54:17.534364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-226.nip.io-tls-69gs9" condition "Approved" to 2026-05-19 15:54:17.53435432 +0000 UTC m=+400.346655131 I0519 15:54:17.562560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-226.nip.io-tls-69gs9" condition "Ready" to 2026-05-19 15:54:17.562549379 +0000 UTC m=+400.374850190 I0519 15:54:17.594183 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-226.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:54:17.594169476 +0000 UTC m=+400.406470327 I0519 15:54:17.616185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-226.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-226.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:55:32.773595 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 15:55:32.773574097 +0000 UTC m=+475.585874928 I0519 15:55:32.773625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:55:32.773681 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 15:55:32.77366825 +0000 UTC m=+475.585969091 E0519 15:55:32.798864 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 15:55:32.798927 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-19 15:55:32.798917516 +0000 UTC m=+475.611218357 E0519 15:55:32.798987 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 15:55:32.802304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:55:32.802504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:55:32.802593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 15:55:32.802583442 +0000 UTC m=+475.614884273 E0519 15:55:32.814643 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0519 15:55:32.814721 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 15:55:32.814748 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 15:55:32.814784 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0519 15:55:32.961324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:55:32.961366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9jnss" condition "Approved" to 2026-05-19 15:55:32.961346469 +0000 UTC m=+475.773647300 I0519 15:55:33.027916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9jnss" condition "Ready" to 2026-05-19 15:55:33.027893938 +0000 UTC m=+475.840194769 I0519 15:55:33.115739 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:55:33.115724798 +0000 UTC m=+475.928025619 I0519 15:55:33.365927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:55:37.815602 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:55:37.815593246 +0000 UTC m=+480.627894047 I0519 15:56:17.800511 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 15:56:17.800496601 +0000 UTC m=+520.612797402 I0519 15:56:17.801213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:56:17.801283 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-19 15:56:17.801279296 +0000 UTC m=+520.613580087 I0519 15:56:17.801525 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 15:56:17.801520223 +0000 UTC m=+520.613821024 I0519 15:56:17.801700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:56:17.801718 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-19 15:56:17.801715029 +0000 UTC m=+520.614015820 I0519 15:56:17.820318 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 15:56:17.820305516 +0000 UTC m=+520.632606307 I0519 15:56:17.820623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:56:17.820645 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-19 15:56:17.820642306 +0000 UTC m=+520.632943107 I0519 15:56:17.828065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:17.828175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:56:17.828215 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-19 15:56:17.828207355 +0000 UTC m=+520.640508166 I0519 15:56:17.829000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:17.829078 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 15:56:17.829070772 +0000 UTC m=+520.641371573 I0519 15:56:17.854984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:17.855432 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 15:56:17.855416553 +0000 UTC m=+520.667717354 I0519 15:56:18.204377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:18.238529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m6mlg" condition "Approved" to 2026-05-19 15:56:18.238512949 +0000 UTC m=+521.050813750 I0519 15:56:18.263375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:18.265812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m6mlg" condition "Ready" to 2026-05-19 15:56:18.265798264 +0000 UTC m=+521.078099085 I0519 15:56:18.287893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8bl2p" condition "Approved" to 2026-05-19 15:56:18.287876784 +0000 UTC m=+521.100177605 I0519 15:56:18.297314 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:56:18.297297262 +0000 UTC m=+521.109598073 I0519 15:56:18.299661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lch28" condition "Approved" to 2026-05-19 15:56:18.299644097 +0000 UTC m=+521.111944908 I0519 15:56:18.306190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8bl2p" condition "Ready" to 2026-05-19 15:56:18.306175584 +0000 UTC m=+521.118476395 I0519 15:56:18.318137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lch28" condition "Ready" to 2026-05-19 15:56:18.318121452 +0000 UTC m=+521.130422263 I0519 15:56:18.321835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:18.322216 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:56:18.322194941 +0000 UTC m=+521.134495752 I0519 15:56:18.743323 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:56:18.743296969 +0000 UTC m=+521.555597790 I0519 15:56:18.843788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:18.893194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:18.941108 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:56:18.941095199 +0000 UTC m=+521.753396000 I0519 15:56:19.047234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:19.047626 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:56:19.047617436 +0000 UTC m=+521.859918237 I0519 15:56:19.193984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:19.194369 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:56:19.194361337 +0000 UTC m=+522.006662138 I0519 15:56:19.542157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:19.643221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:19.694526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:27.876531 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" condition "Ready" to 2026-05-19 15:56:27.876510824 +0000 UTC m=+530.688811655 I0519 15:56:27.876694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:56:27.876817 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" condition "Issuing" to 2026-05-19 15:56:27.876800533 +0000 UTC m=+530.689101374 I0519 15:56:27.894254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:27.894634 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" condition "Ready" to 2026-05-19 15:56:27.894615308 +0000 UTC m=+530.706916189 I0519 15:56:28.130254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:28.170522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sr9k6-cf5mh" condition "Approved" to 2026-05-19 15:56:28.170506727 +0000 UTC m=+530.982807558 I0519 15:56:28.195604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sr9k6-cf5mh" condition "Ready" to 2026-05-19 15:56:28.195587763 +0000 UTC m=+531.007888574 I0519 15:56:28.225664 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:56:28.225641206 +0000 UTC m=+531.037942027 I0519 15:56:28.246633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:56:28.247062 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:56:28.247048304 +0000 UTC m=+531.059349105 I0519 15:56:28.270443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sr9k6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:57:03.345908 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 15:57:03.345850236 +0000 UTC m=+566.158151057 I0519 15:57:03.346025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:57:03.346066 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-19 15:57:03.346052472 +0000 UTC m=+566.158353293 I0519 15:57:03.365866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:57:03.366000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 15:57:03.366022 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-19 15:57:03.366015505 +0000 UTC m=+566.178316326 I0519 15:57:03.909092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:57:03.918254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fbht2" condition "Approved" to 2026-05-19 15:57:03.918232117 +0000 UTC m=+566.730532978 I0519 15:57:03.938337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fbht2" condition "Ready" to 2026-05-19 15:57:03.938326154 +0000 UTC m=+566.750626955 I0519 15:57:03.973681 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:57:03.973665945 +0000 UTC m=+566.785966746 I0519 15:57:04.000392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 15:57:04.000839 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 15:57:04.000830036 +0000 UTC m=+566.813130847 I0519 15:57:04.025509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:00:29.445386 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 16:00:29.445342465 +0000 UTC m=+772.257643286 I0519 16:00:29.445730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:00:29.445828 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 16:00:29.44581639 +0000 UTC m=+772.258117231 I0519 16:00:29.464163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:00:29.464348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:00:29.464413 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 16:00:29.464374838 +0000 UTC m=+772.276675679 I0519 16:00:29.698170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zm86d" condition "Approved" to 2026-05-19 16:00:29.698156939 +0000 UTC m=+772.510457760 I0519 16:00:29.723048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zm86d" condition "Ready" to 2026-05-19 16:00:29.723034288 +0000 UTC m=+772.535335089 I0519 16:00:29.755157 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:00:29.755132425 +0000 UTC m=+772.567433236 I0519 16:00:29.774158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:00:29.774557 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:00:29.774547391 +0000 UTC m=+772.586848202 I0519 16:00:29.795151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:00:29.796303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" E0519 16:03:41.939179 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out I0519 16:04:34.672604 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-19 16:04:34.672582617 +0000 UTC m=+1017.484883458 I0519 16:04:34.672901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:04:34.673034 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-19 16:04:34.673022271 +0000 UTC m=+1017.485323112 I0519 16:04:34.688968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:04:34.689076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:04:34.689102 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-19 16:04:34.689094711 +0000 UTC m=+1017.501395522 I0519 16:04:34.926099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pl25q" condition "Approved" to 2026-05-19 16:04:34.926080554 +0000 UTC m=+1017.738381395 I0519 16:04:34.948542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pl25q" condition "Ready" to 2026-05-19 16:04:34.948524775 +0000 UTC m=+1017.760825586 I0519 16:04:34.985929 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:04:34.98591342 +0000 UTC m=+1017.798214231 I0519 16:04:35.011044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:04:35.062006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" E0519 16:05:37.028881 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out I0519 16:06:33.808022 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-19 16:06:33.808008282 +0000 UTC m=+1136.620309083 I0519 16:06:33.808178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:06:33.808248 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-19 16:06:33.80824056 +0000 UTC m=+1136.620541371 I0519 16:06:33.992867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:06:33.992999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:06:33.993041 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-19 16:06:33.993030292 +0000 UTC m=+1136.805331133 I0519 16:06:35.025930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:06:35.026786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-x4b7v" condition "Approved" to 2026-05-19 16:06:35.026768304 +0000 UTC m=+1137.839069115 I0519 16:06:35.111549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-x4b7v" condition "Ready" to 2026-05-19 16:06:35.11153591 +0000 UTC m=+1137.923836721 I0519 16:06:35.559344 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:06:35.559324441 +0000 UTC m=+1138.371625262 I0519 16:06:35.613240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:06:35.613624 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:06:35.613617637 +0000 UTC m=+1138.425918458 I0519 16:06:35.633047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:06:35.634575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:10:41.738593 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-19 16:10:41.738575411 +0000 UTC m=+1384.550876222 I0519 16:10:41.739030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:10:41.739128 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-19 16:10:41.739116709 +0000 UTC m=+1384.551417540 I0519 16:10:41.759715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:10:41.759808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:10:41.759831 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-19 16:10:41.759822944 +0000 UTC m=+1384.572123765 I0519 16:10:42.048579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-m5s8k" condition "Approved" to 2026-05-19 16:10:42.048565878 +0000 UTC m=+1384.860866689 I0519 16:10:42.073060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-m5s8k" condition "Ready" to 2026-05-19 16:10:42.073042336 +0000 UTC m=+1384.885343167 I0519 16:10:42.108936 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:10:42.108910759 +0000 UTC m=+1384.921211600 I0519 16:10:42.138784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:10:42.139078 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:10:42.139071369 +0000 UTC m=+1384.951372160 I0519 16:10:42.150591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:10:42.159639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:18:11.928677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:18:11.928770 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-19 16:18:11.928745778 +0000 UTC m=+1834.741046609 I0519 16:18:11.928846 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-19 16:18:11.928825171 +0000 UTC m=+1834.741126002 I0519 16:18:12.155586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:18:12.155721 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-19 16:18:12.155712465 +0000 UTC m=+1834.968013276 I0519 16:18:12.487384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:18:12.593831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7d46l" condition "Approved" to 2026-05-19 16:18:12.593816615 +0000 UTC m=+1835.406117426 I0519 16:18:12.739505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7d46l" condition "Ready" to 2026-05-19 16:18:12.739496064 +0000 UTC m=+1835.551796865 I0519 16:18:13.592664 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:18:13.592649636 +0000 UTC m=+1836.404950447 I0519 16:18:13.796181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:19:41.331140 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-19 16:19:41.331128279 +0000 UTC m=+1924.143429090 I0519 16:19:41.331445 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:19:41.331561 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-19 16:19:41.331546523 +0000 UTC m=+1924.143847354 I0519 16:19:41.357664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:19:41.357919 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-19 16:19:41.357836606 +0000 UTC m=+1924.170137467 I0519 16:19:41.844509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:19:41.887541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mlsz5" condition "Approved" to 2026-05-19 16:19:41.887529941 +0000 UTC m=+1924.699830732 I0519 16:19:41.916813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-mlsz5" condition "Ready" to 2026-05-19 16:19:41.916791229 +0000 UTC m=+1924.729092040 I0519 16:19:41.948330 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:19:41.948311598 +0000 UTC m=+1924.760612429 I0519 16:19:41.967720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:20:40.199501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:20:40.199511 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-19 16:20:40.199492203 +0000 UTC m=+1983.011793034 I0519 16:20:40.199546 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-19 16:20:40.199537585 +0000 UTC m=+1983.011838386 I0519 16:20:40.215587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:20:40.215681 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:20:40.215706 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-19 16:20:40.215699217 +0000 UTC m=+1983.028000018 I0519 16:20:40.264313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8bxlm" condition "Approved" to 2026-05-19 16:20:40.264303649 +0000 UTC m=+1983.076604450 I0519 16:20:40.266777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:20:40.280737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8bxlm" condition "Ready" to 2026-05-19 16:20:40.280725889 +0000 UTC m=+1983.093026700 I0519 16:20:40.308898 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:20:40.308882162 +0000 UTC m=+1983.121182973 I0519 16:20:40.392337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:20:40.399874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:20:40.400118 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:20:40.400111095 +0000 UTC m=+1983.212411896 I0519 16:20:40.853654 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-19 16:20:40.853639325 +0000 UTC m=+1983.665940136 I0519 16:20:40.854109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:20:40.854129 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-19 16:20:40.854124711 +0000 UTC m=+1983.666425522 I0519 16:20:40.868208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:20:40.868313 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-19 16:20:40.86830594 +0000 UTC m=+1983.680606741 I0519 16:20:40.885166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:20:40.912376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-2jz2r" condition "Approved" to 2026-05-19 16:20:40.912362387 +0000 UTC m=+1983.724663198 I0519 16:20:40.937667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-2jz2r" condition "Ready" to 2026-05-19 16:20:40.937652759 +0000 UTC m=+1983.749953600 I0519 16:20:40.960558 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:20:40.960541045 +0000 UTC m=+1983.772841856 I0519 16:20:40.981366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:20:41.558239 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-19 16:20:41.558227196 +0000 UTC m=+1984.370528007 I0519 16:20:42.206489 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-19 16:20:42.206474251 +0000 UTC m=+1985.018775092 I0519 16:21:27.981942 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-19 16:21:27.981892257 +0000 UTC m=+2030.794193058 I0519 16:21:27.986527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:21:27.986630 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-19 16:21:27.986617917 +0000 UTC m=+2030.798918738 I0519 16:21:28.013679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:21:28.013763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:21:28.013782 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-19 16:21:28.013777038 +0000 UTC m=+2030.826077829 I0519 16:21:32.844320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-9mtkl" condition "Approved" to 2026-05-19 16:21:32.844310953 +0000 UTC m=+2035.656611754 I0519 16:21:32.864057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-9mtkl" condition "Ready" to 2026-05-19 16:21:32.864045378 +0000 UTC m=+2035.676346199 I0519 16:21:32.895907 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:21:32.895895838 +0000 UTC m=+2035.708196649 I0519 16:21:32.915785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:21:32.916469 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:21:32.916462101 +0000 UTC m=+2035.728762912 I0519 16:21:32.941075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:02.188549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:24:02.188626 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-19 16:24:02.188617156 +0000 UTC m=+2185.000917997 I0519 16:24:02.188784 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-19 16:24:02.188763741 +0000 UTC m=+2185.001064582 I0519 16:24:02.205357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:02.205448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:24:02.205479 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-19 16:24:02.205470531 +0000 UTC m=+2185.017771362 I0519 16:24:02.491400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:02.492112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-hsjzg" condition "Approved" to 2026-05-19 16:24:02.492101247 +0000 UTC m=+2185.304402058 I0519 16:24:02.512808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-hsjzg" condition "Ready" to 2026-05-19 16:24:02.512799103 +0000 UTC m=+2185.325099904 I0519 16:24:02.540410 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:24:02.540398058 +0000 UTC m=+2185.352698889 I0519 16:24:02.560970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:02.561513 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:24:02.561503828 +0000 UTC m=+2185.373804649 I0519 16:24:02.566382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:02.585957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:03.699477 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-19 16:24:03.699465841 +0000 UTC m=+2186.511766642 I0519 16:24:03.699529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:24:03.699568 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-19 16:24:03.699556564 +0000 UTC m=+2186.511857395 I0519 16:24:03.716883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:03.716977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:24:03.717007 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-19 16:24:03.716997227 +0000 UTC m=+2186.529298068 I0519 16:24:03.900082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:03.908502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4nblx" condition "Approved" to 2026-05-19 16:24:03.908489218 +0000 UTC m=+2186.720790039 I0519 16:24:03.925615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4nblx" condition "Ready" to 2026-05-19 16:24:03.92560413 +0000 UTC m=+2186.737904941 I0519 16:24:03.953497 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:24:03.953481174 +0000 UTC m=+2186.765781985 I0519 16:24:03.978402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:03.978706 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:24:03.978698933 +0000 UTC m=+2186.790999734 I0519 16:24:03.995147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:24:03.998171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:27:11.890859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:27:11.890902 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-19 16:27:11.890893003 +0000 UTC m=+2374.703193804 I0519 16:27:11.890991 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-19 16:27:11.890977326 +0000 UTC m=+2374.703278157 I0519 16:27:11.907818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:27:11.907901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:27:11.907917 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-19 16:27:11.907911416 +0000 UTC m=+2374.720212217 I0519 16:27:12.316680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-qcrhx" condition "Approved" to 2026-05-19 16:27:12.316657847 +0000 UTC m=+2375.128958648 I0519 16:27:12.345186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-qcrhx" condition "Ready" to 2026-05-19 16:27:12.3451716 +0000 UTC m=+2375.157472421 I0519 16:27:12.378964 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:27:12.378951507 +0000 UTC m=+2375.191252298 I0519 16:27:12.399929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:27:12.400200 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:27:12.400194812 +0000 UTC m=+2375.212495603 I0519 16:27:12.434314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:27:12.434781 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:27:12.434772744 +0000 UTC m=+2375.247073555 I0519 16:28:10.285358 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lqv5v-api" condition "Ready" to 2026-05-19 16:28:10.285304578 +0000 UTC m=+2433.097605399 I0519 16:28:10.286242 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lqv5v-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:28:10.286296 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lqv5v-api" condition "Issuing" to 2026-05-19 16:28:10.286291769 +0000 UTC m=+2433.098592570 I0519 16:28:10.286528 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lqv5v-vnc" condition "Ready" to 2026-05-19 16:28:10.286523606 +0000 UTC m=+2433.098824407 I0519 16:28:10.290481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lqv5v-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:28:10.290525 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lqv5v-vnc" condition "Issuing" to 2026-05-19 16:28:10.290513991 +0000 UTC m=+2433.102814792 I0519 16:28:10.324778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-lqv5v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lqv5v-api\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:28:10.324933 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lqv5v-api" condition "Ready" to 2026-05-19 16:28:10.324921328 +0000 UTC m=+2433.137222139 I0519 16:28:10.325305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lqv5v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lqv5v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:28:10.325430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lqv5v-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:28:10.325460 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lqv5v-vnc" condition "Issuing" to 2026-05-19 16:28:10.325451324 +0000 UTC m=+2433.137752135 I0519 16:28:10.560519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-lqv5v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lqv5v-api\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:28:10.603551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lqv5v-api-h5c42" condition "Approved" to 2026-05-19 16:28:10.603537077 +0000 UTC m=+2433.415837878 I0519 16:28:10.631781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lqv5v-vnc-wmd4l" condition "Approved" to 2026-05-19 16:28:10.63177034 +0000 UTC m=+2433.444071151 I0519 16:28:10.639781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lqv5v-api-h5c42" condition "Ready" to 2026-05-19 16:28:10.639769431 +0000 UTC m=+2433.452070242 I0519 16:28:10.667918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lqv5v-vnc-wmd4l" condition "Ready" to 2026-05-19 16:28:10.667906771 +0000 UTC m=+2433.480207582 I0519 16:28:10.720455 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lqv5v-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:28:10.720435785 +0000 UTC m=+2433.532736616 I0519 16:28:10.735952 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lqv5v-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:28:10.735943541 +0000 UTC m=+2433.548244342 I0519 16:28:10.770641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-lqv5v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lqv5v-api\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:28:10.771102 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lqv5v-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:28:10.771092511 +0000 UTC m=+2433.583393342 I0519 16:28:10.786309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-lqv5v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lqv5v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:28:10.786740 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lqv5v-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:28:10.78672969 +0000 UTC m=+2433.599030521 I0519 16:28:10.802453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-lqv5v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lqv5v-api\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:28:10.822600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-lqv5v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lqv5v-api\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:28:10.823371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-lqv5v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lqv5v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:30:19.237232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:30:19.237284 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-19 16:30:19.237275539 +0000 UTC m=+2562.049576380 I0519 16:30:19.237777 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-19 16:30:19.237768565 +0000 UTC m=+2562.050069396 I0519 16:30:19.263021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:30:19.263292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:30:19.263324 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-19 16:30:19.263314974 +0000 UTC m=+2562.075615805 I0519 16:30:19.412943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-j6qsp" condition "Approved" to 2026-05-19 16:30:19.412929326 +0000 UTC m=+2562.225230127 I0519 16:30:19.446149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-j6qsp" condition "Ready" to 2026-05-19 16:30:19.446133735 +0000 UTC m=+2562.258434536 I0519 16:30:19.484552 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:30:19.484535677 +0000 UTC m=+2562.296836478 I0519 16:30:19.508168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:30:19.508615 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:30:19.508606701 +0000 UTC m=+2562.320907502 I0519 16:30:19.512629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:30:19.527029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:30:19.527534 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:30:19.527518252 +0000 UTC m=+2562.339819073 I0519 16:34:01.305791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:34:01.305837 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-19 16:34:01.305825424 +0000 UTC m=+2784.118126235 I0519 16:34:01.305996 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-19 16:34:01.305973799 +0000 UTC m=+2784.118274600 I0519 16:34:01.331203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:01.331368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:34:01.331405 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-19 16:34:01.331395705 +0000 UTC m=+2784.143696516 I0519 16:34:01.494817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:01.507726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-p476j" condition "Approved" to 2026-05-19 16:34:01.507717613 +0000 UTC m=+2784.320018414 I0519 16:34:01.527101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-p476j" condition "Ready" to 2026-05-19 16:34:01.527089777 +0000 UTC m=+2784.339390578 I0519 16:34:01.570226 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:34:01.570205884 +0000 UTC m=+2784.382506725 I0519 16:34:01.591439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:01.592103 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:34:01.592087687 +0000 UTC m=+2784.404388498 I0519 16:34:01.614673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:01.623606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:02.775288 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-19 16:34:02.775274041 +0000 UTC m=+2785.587574852 I0519 16:34:02.775488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:34:02.775521 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-19 16:34:02.775513279 +0000 UTC m=+2785.587814090 I0519 16:34:02.791787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:02.791877 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-19 16:34:02.791868718 +0000 UTC m=+2785.604169529 I0519 16:34:03.233639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:03.275885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-m9vs2" condition "Approved" to 2026-05-19 16:34:03.275862709 +0000 UTC m=+2786.088163610 I0519 16:34:03.293281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-m9vs2" condition "Ready" to 2026-05-19 16:34:03.293271341 +0000 UTC m=+2786.105572142 I0519 16:34:03.327091 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:34:03.327077032 +0000 UTC m=+2786.139377833 I0519 16:34:03.356991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:03.357603 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:34:03.357594169 +0000 UTC m=+2786.169894980 I0519 16:34:03.361611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:03.378708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:34:03.379088 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:34:03.379077841 +0000 UTC m=+2786.191378642 I0519 16:36:28.450753 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-19 16:36:28.450736054 +0000 UTC m=+2931.263036885 I0519 16:36:28.450833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:36:28.450872 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-19 16:36:28.450863838 +0000 UTC m=+2931.263164649 E0519 16:36:28.465858 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 16:36:28.465909 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-19 16:36:28.465903525 +0000 UTC m=+2931.278204336 I0519 16:36:28.465927 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 16:36:28.469154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:28.469302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:36:28.469633 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-19 16:36:28.469620413 +0000 UTC m=+2931.281921254 E0519 16:36:28.478905 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0519 16:36:28.479395 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 16:36:28.479501 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0519 16:36:28.479585 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0519 16:36:28.510496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:28.523165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-25rd7" condition "Approved" to 2026-05-19 16:36:28.523148899 +0000 UTC m=+2931.335449710 I0519 16:36:28.544291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-25rd7" condition "Ready" to 2026-05-19 16:36:28.544281559 +0000 UTC m=+2931.356582360 I0519 16:36:28.581192 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:36:28.581177069 +0000 UTC m=+2931.393477870 I0519 16:36:28.604240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:29.137415 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-19 16:36:29.13740124 +0000 UTC m=+2931.949702041 I0519 16:36:29.137731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:36:29.137777 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-19 16:36:29.137767851 +0000 UTC m=+2931.950068662 E0519 16:36:29.158942 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 16:36:29.158979 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-19 16:36:29.158971353 +0000 UTC m=+2931.971272164 I0519 16:36:29.159029 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 16:36:29.169208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:29.169487 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-19 16:36:29.169472706 +0000 UTC m=+2931.981773547 E0519 16:36:29.171487 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0519 16:36:29.172215 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 16:36:29.172240 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0519 16:36:29.172477 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0519 16:36:29.187972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:29.188079 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-19 16:36:29.188070435 +0000 UTC m=+2932.000371256 I0519 16:36:29.193872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-pp4jq" condition "Approved" to 2026-05-19 16:36:29.193857299 +0000 UTC m=+2932.006158100 I0519 16:36:29.206961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-pp4jq" condition "Ready" to 2026-05-19 16:36:29.206950464 +0000 UTC m=+2932.019251275 I0519 16:36:29.229284 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:36:29.229274111 +0000 UTC m=+2932.041574922 I0519 16:36:29.252485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:29.310548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:29.892397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:36:29.892439 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-19 16:36:29.892431342 +0000 UTC m=+2932.704732153 I0519 16:36:29.892460 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-19 16:36:29.892432322 +0000 UTC m=+2932.704733133 I0519 16:36:29.913101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:29.913203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:36:29.913225 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-19 16:36:29.913218421 +0000 UTC m=+2932.725519222 I0519 16:36:29.974190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-zb79l" condition "Approved" to 2026-05-19 16:36:29.974175603 +0000 UTC m=+2932.786476404 I0519 16:36:29.992936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-zb79l" condition "Ready" to 2026-05-19 16:36:29.992921627 +0000 UTC m=+2932.805222438 I0519 16:36:33.480515 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:36:33.480503583 +0000 UTC m=+2936.292804394 I0519 16:36:33.491535 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-zb79l" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:36:33.491521952 +0000 UTC m=+2936.303822773 I0519 16:36:33.518905 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:36:33.51888858 +0000 UTC m=+2936.331189391 I0519 16:36:33.536108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:33.536361 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:36:33.536355063 +0000 UTC m=+2936.348655864 I0519 16:36:33.545311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:33.560054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:36:34.172188 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:36:34.172169147 +0000 UTC m=+2936.984469978 I0519 16:38:47.429182 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:38:47.430000 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-19 16:38:47.429983025 +0000 UTC m=+3070.242283856 I0519 16:38:47.430334 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-19 16:38:47.42921789 +0000 UTC m=+3070.241518731 I0519 16:38:47.446113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:38:47.446193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:38:47.446209 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-19 16:38:47.446202779 +0000 UTC m=+3070.258503580 I0519 16:38:47.667258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:38:47.680560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-27jgf" condition "Approved" to 2026-05-19 16:38:47.680544547 +0000 UTC m=+3070.492845378 I0519 16:38:47.700809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-27jgf" condition "Ready" to 2026-05-19 16:38:47.700794299 +0000 UTC m=+3070.513095110 I0519 16:38:47.740483 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:38:47.740455406 +0000 UTC m=+3070.552756217 I0519 16:38:47.762034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:38:47.762877 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:38:47.762865106 +0000 UTC m=+3070.575165927 I0519 16:38:47.776931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:38:47.795916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:35.477359 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-19 16:39:35.477332033 +0000 UTC m=+3118.289632864 I0519 16:39:35.500405 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-19 16:39:35.500390714 +0000 UTC m=+3118.312691535 I0519 16:39:35.500785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:39:35.500869 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-19 16:39:35.500858259 +0000 UTC m=+3118.313159090 I0519 16:39:35.521514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:35.521579 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-19 16:39:35.521571655 +0000 UTC m=+3118.333872466 E0519 16:39:35.536444 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0519 16:39:35.591847 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-19 16:39:35.591831802 +0000 UTC m=+3118.404132633 I0519 16:39:35.615158 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-19 16:39:35.615142621 +0000 UTC m=+3118.427443452 I0519 16:39:35.615228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:39:35.615283 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-19 16:39:35.615270935 +0000 UTC m=+3118.427571776 I0519 16:39:35.634495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:35.634585 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-19 16:39:35.634577567 +0000 UTC m=+3118.446878378 E0519 16:39:35.721440 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0519 16:39:35.770892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:35.812343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-zshkx" condition "Approved" to 2026-05-19 16:39:35.812324381 +0000 UTC m=+3118.624625202 I0519 16:39:35.831188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-zshkx" condition "Ready" to 2026-05-19 16:39:35.831178849 +0000 UTC m=+3118.643479650 I0519 16:39:35.871140 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:39:35.871130985 +0000 UTC m=+3118.683431796 I0519 16:39:35.889073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:36.009663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:36.374732 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-19 16:39:36.374713458 +0000 UTC m=+3119.187014299 I0519 16:39:36.393889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:39:36.393935 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-19 16:39:36.393922297 +0000 UTC m=+3119.206223138 I0519 16:39:36.394140 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-19 16:39:36.394124193 +0000 UTC m=+3119.206424994 I0519 16:39:36.423169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:36.423325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:39:36.423356 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-19 16:39:36.423348799 +0000 UTC m=+3119.235649600 I0519 16:39:36.867142 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-19 16:39:36.867118956 +0000 UTC m=+3119.679419757 I0519 16:39:36.883184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:36.892481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-mp76p" condition "Approved" to 2026-05-19 16:39:36.892466649 +0000 UTC m=+3119.704767460 I0519 16:39:36.896461 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-19 16:39:36.896443365 +0000 UTC m=+3119.708744196 I0519 16:39:36.896803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:39:36.896843 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-19 16:39:36.896835098 +0000 UTC m=+3119.709135919 I0519 16:39:36.922246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-mp76p" condition "Ready" to 2026-05-19 16:39:36.922234453 +0000 UTC m=+3119.734535264 I0519 16:39:36.923773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:36.923858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:39:36.923892 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-19 16:39:36.923886955 +0000 UTC m=+3119.736187766 I0519 16:39:36.957390 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:39:36.957376287 +0000 UTC m=+3119.769677098 I0519 16:39:36.982720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:37.157661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zr958" condition "Approved" to 2026-05-19 16:39:37.157648365 +0000 UTC m=+3119.969949176 I0519 16:39:37.176071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zr958" condition "Ready" to 2026-05-19 16:39:37.176051558 +0000 UTC m=+3119.988352369 I0519 16:39:37.242645 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:39:37.242626287 +0000 UTC m=+3120.054927098 I0519 16:39:37.338449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:37.339120 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:39:37.339108176 +0000 UTC m=+3120.151409017 I0519 16:39:37.352563 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-19 16:39:37.352548492 +0000 UTC m=+3120.164849303 I0519 16:39:37.385515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 16:39:37.385558 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-19 16:39:37.385549158 +0000 UTC m=+3120.197849979 I0519 16:39:37.385720 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-19 16:39:37.385713593 +0000 UTC m=+3120.198014404 I0519 16:39:37.687102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:37.687174 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-19 16:39:37.687166819 +0000 UTC m=+3120.499467620 I0519 16:39:37.739763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:37.791731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:38.195635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:38.236696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-89n84" condition "Approved" to 2026-05-19 16:39:38.236685647 +0000 UTC m=+3121.048986438 I0519 16:39:38.551032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-89n84" condition "Ready" to 2026-05-19 16:39:38.551018971 +0000 UTC m=+3121.363319782 I0519 16:39:38.739978 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:39:38.739960949 +0000 UTC m=+3121.552261760 I0519 16:39:38.888812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 16:39:38.889238 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 16:39:38.889231521 +0000 UTC m=+3121.701532332 I0519 16:39:39.089268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" E0519 16:41:18.941518 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out