I0410 13:58:15.065744       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0410 13:58:15.066101       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0410 13:58:15.066285       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0410 13:58:15.074398       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0410 13:58:15.074936       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0410 13:58:15.075112       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0410 13:58:15.075103       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0410 13:58:15.077620       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0410 13:58:15.093565       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0410 13:58:15.098607       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0410 13:58:15.102774       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0410 13:58:15.109406       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0410 13:58:15.113672       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0410 13:58:15.117369       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0410 13:58:15.120144       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0410 13:58:15.122156       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0410 13:58:15.123938       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0410 13:58:15.123965       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0410 13:58:15.123975       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0410 13:58:15.123982       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0410 13:58:15.124031       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0410 13:58:15.126016       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0410 13:58:15.133046       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0410 13:58:15.133184       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0410 13:58:15.135761       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0410 13:58:15.138204       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0410 13:58:15.140747       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0410 13:58:15.143157       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0410 13:58:15.144895       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0410 13:58:15.144952       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0410 13:58:15.147024       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0410 13:58:15.148755       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0410 13:58:15.152271       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0410 13:58:15.157073       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.157078       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.158346       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.178166       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.190122       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.206227       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.221392       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.241525       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.252289       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:15.282755       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0410 13:58:29.997979       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-10 13:58:29.997962576 +0000 UTC m=+14.972826707
I0410 13:58:30.689062       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-10 13:58:30.689042207 +0000 UTC m=+15.663906408
I0410 13:58:30.689300       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 13:58:30.689401       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 13:58:30.689390738 +0000 UTC m=+15.664254869
E0410 13:58:30.702801       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0410 13:58:30.702882       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-10 13:58:30.702874133 +0000 UTC m=+15.677738234
E0410 13:58:30.702906       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0410 13:58:30.705564       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 13:58:30.705627       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 13:58:30.705643       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 13:58:30.70563695 +0000 UTC m=+15.680501061
E0410 13:58:30.713809       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0410 13:58:30.713891       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0410 13:58:30.713922       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0410 13:58:30.713951       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0410 13:58:30.743381       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pb5pk" condition "Approved" to 2026-04-10 13:58:30.74336648 +0000 UTC m=+15.718230621
I0410 13:58:30.755707       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pb5pk" condition "Ready" to 2026-04-10 13:58:30.755697209 +0000 UTC m=+15.730561310
I0410 13:58:30.780449       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:58:30.78043819 +0000 UTC m=+15.755302301
I0410 13:58:30.802232       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 13:58:30.847648       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 13:58:35.714185       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:58:35.714160465 +0000 UTC m=+20.689024576
I0410 13:58:56.189287       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 13:58:56.189349       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 13:58:56.189335733 +0000 UTC m=+41.164199874
I0410 13:58:56.189569       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-10 13:58:56.18953868 +0000 UTC m=+41.164402831
I0410 13:58:56.261056       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-10 13:58:56.261038064 +0000 UTC m=+41.235902205
I0410 13:58:56.263529       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0410 13:58:56.263864       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-10 13:58:56.263850793 +0000 UTC m=+41.238714924
I0410 13:58:56.676572       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0410 13:58:56.952276       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kcwgs" condition "Approved" to 2026-04-10 13:58:56.952265176 +0000 UTC m=+41.927129287
I0410 13:58:56.996911       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kcwgs" condition "Ready" to 2026-04-10 13:58:56.99689646 +0000 UTC m=+41.971760571
I0410 13:58:57.075795       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:58:57.075772768 +0000 UTC m=+42.050636869
I0410 13:58:57.111976       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0410 13:58:57.112609       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:58:57.112596944 +0000 UTC m=+42.087461075
I0410 13:58:57.155466       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0410 13:58:57.190314       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:03:23.203645       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Ready" to 2026-04-10 14:03:23.203598997 +0000 UTC m=+308.178463128
I0410 14:03:23.203794       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-75.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:03:23.203889       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Issuing" to 2026-04-10 14:03:23.203878826 +0000 UTC m=+308.178742957
I0410 14:03:23.223322       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:03:23.223404       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-75.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:03:23.223425       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Issuing" to 2026-04-10 14:03:23.223417469 +0000 UTC m=+308.198281650
I0410 14:03:23.640814       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:03:23.648856       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-75.nip.io-tls-zmmmz" condition "Approved" to 2026-04-10 14:03:23.64883876 +0000 UTC m=+308.623702881
I0410 14:03:23.673275       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-75.nip.io-tls-zmmmz" condition "Ready" to 2026-04-10 14:03:23.673262076 +0000 UTC m=+308.648126187
I0410 14:03:23.709180       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:03:23.709167913 +0000 UTC m=+308.684032024
I0410 14:03:23.734930       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:03:23.735427       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-75.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:03:23.735418657 +0000 UTC m=+308.710282778
I0410 14:03:23.741738       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:03:23.756748       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-75.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-75.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:04:31.274193       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:04:31.274168       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 14:04:31.274116292 +0000 UTC m=+376.248980423
I0410 14:04:31.274243       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-10 14:04:31.274232606 +0000 UTC m=+376.249096747
E0410 14:04:31.293841       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0410 14:04:31.293881       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-10 14:04:31.293873093 +0000 UTC m=+376.268737214
E0410 14:04:31.293939       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0410 14:04:31.312702       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:04:31.312778       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 14:04:31.312772288 +0000 UTC m=+376.287636389
E0410 14:04:31.326597       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0410 14:04:31.327382       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0410 14:04:31.327470       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0410 14:04:31.327526       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0410 14:04:31.336618       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:04:31.336775       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 14:04:31.336762382 +0000 UTC m=+376.311626513
I0410 14:04:31.337690       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:04:31.341327       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bz6ck" condition "Approved" to 2026-04-10 14:04:31.341315025 +0000 UTC m=+376.316179136
I0410 14:04:31.346473       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 14:04:31.346467047 +0000 UTC m=+376.321331158
I0410 14:04:31.353739       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:04:31.354418       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bz6ck" condition "Ready" to 2026-04-10 14:04:31.354412187 +0000 UTC m=+376.329276288
I0410 14:04:31.379858       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:04:31.379842407 +0000 UTC m=+376.354706538
I0410 14:04:31.396613       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:04:31.396875       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:04:31.396869122 +0000 UTC m=+376.371733233
I0410 14:04:31.413205       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:04:36.327938       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:04:36.327923351 +0000 UTC m=+381.302787482
I0410 14:05:13.189220       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:05:13.189288       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-10 14:05:13.18928096 +0000 UTC m=+418.164145071
I0410 14:05:13.189375       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 14:05:13.189362662 +0000 UTC m=+418.164226773
I0410 14:05:13.192394       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:05:13.193481       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-10 14:05:13.193476442 +0000 UTC m=+418.168340563
I0410 14:05:13.193500       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 14:05:13.193489412 +0000 UTC m=+418.168353563
I0410 14:05:13.193383       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-10 14:05:13.193372629 +0000 UTC m=+418.168236740
I0410 14:05:13.192928       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:05:13.194040       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 14:05:13.194034239 +0000 UTC m=+418.168898360
I0410 14:05:13.234458       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:13.234539       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:05:13.234545       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:13.234564       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 14:05:13.234557085 +0000 UTC m=+418.209421196
I0410 14:05:13.234687       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:05:13.234718       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 14:05:13.23471162 +0000 UTC m=+418.209575731
I0410 14:05:13.235044       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:13.235088       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:05:13.235111       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-10 14:05:13.235107212 +0000 UTC m=+418.209971323
I0410 14:05:13.434366       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:13.463840       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-92nzg" condition "Approved" to 2026-04-10 14:05:13.463810819 +0000 UTC m=+418.438674930
I0410 14:05:13.496079       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-727xp" condition "Approved" to 2026-04-10 14:05:13.496064934 +0000 UTC m=+418.470929065
I0410 14:05:13.498417       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-92nzg" condition "Ready" to 2026-04-10 14:05:13.498407518 +0000 UTC m=+418.473271639
I0410 14:05:13.546182       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-727xp" condition "Ready" to 2026-04-10 14:05:13.546169201 +0000 UTC m=+418.521033302
I0410 14:05:13.861741       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:05:13.861725089 +0000 UTC m=+418.836589200
I0410 14:05:13.954939       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vw56c" condition "Approved" to 2026-04-10 14:05:13.954894811 +0000 UTC m=+418.929758962
I0410 14:05:13.955782       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:13.956574       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:05:13.956566084 +0000 UTC m=+418.931430195
I0410 14:05:13.959644       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:13.975491       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vw56c" condition "Ready" to 2026-04-10 14:05:13.975478149 +0000 UTC m=+418.950342270
I0410 14:05:13.977343       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:14.283373       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:05:14.283355008 +0000 UTC m=+419.258219139
I0410 14:05:14.531944       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:14.779562       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:14.931640       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:15.133267       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:26.655841       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" condition "Ready" to 2026-04-10 14:05:26.655813108 +0000 UTC m=+431.630677219
I0410 14:05:26.656019       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:05:26.656044       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" condition "Issuing" to 2026-04-10 14:05:26.656039345 +0000 UTC m=+431.630903456
I0410 14:05:26.671642       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:26.671738       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" condition "Ready" to 2026-04-10 14:05:26.671732109 +0000 UTC m=+431.646596220
I0410 14:05:27.387575       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:27.563902       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gr8q2-lwmqv" condition "Approved" to 2026-04-10 14:05:27.563875674 +0000 UTC m=+432.538739795
I0410 14:05:27.786390       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gr8q2-lwmqv" condition "Ready" to 2026-04-10 14:05:27.786378855 +0000 UTC m=+432.761242966
I0410 14:05:27.827958       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:05:27.827946044 +0000 UTC m=+432.802810145
I0410 14:05:27.846995       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:05:27.896957       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gr8q2-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:06:01.650851       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 14:06:01.650838371 +0000 UTC m=+466.625702482
I0410 14:06:01.651232       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:06:01.651253       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 14:06:01.651248694 +0000 UTC m=+466.626112795
I0410 14:06:01.667171       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:06:01.667523       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 14:06:01.667515176 +0000 UTC m=+466.642379287
I0410 14:06:01.889828       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:06:01.927296       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xmwx4" condition "Approved" to 2026-04-10 14:06:01.927279281 +0000 UTC m=+466.902143392
I0410 14:06:01.947912       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xmwx4" condition "Ready" to 2026-04-10 14:06:01.94790351 +0000 UTC m=+466.922767611
I0410 14:06:01.985701       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:06:01.985684899 +0000 UTC m=+466.960549040
I0410 14:06:02.013407       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:09:19.872555       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 14:09:19.872504741 +0000 UTC m=+664.847368872
I0410 14:09:19.872565       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:09:19.872681       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-10 14:09:19.872672256 +0000 UTC m=+664.847536367
I0410 14:09:19.888921       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:09:19.889022       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:09:19.889051       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-10 14:09:19.889042662 +0000 UTC m=+664.863906773
I0410 14:09:20.039733       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:09:20.047293       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-n96d8" condition "Approved" to 2026-04-10 14:09:20.047273646 +0000 UTC m=+665.022137767
I0410 14:09:20.066028       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-n96d8" condition "Ready" to 2026-04-10 14:09:20.066017287 +0000 UTC m=+665.040881388
I0410 14:09:20.091101       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:09:20.091081756 +0000 UTC m=+665.065945897
I0410 14:09:20.111339       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:09:20.111881       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:09:20.111871371 +0000 UTC m=+665.086735492
I0410 14:09:20.125921       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:09:20.133420       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:11:39.011575       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-10 14:11:39.011526609 +0000 UTC m=+803.986390740
I0410 14:11:39.011915       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:11:39.012026       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-10 14:11:39.012010554 +0000 UTC m=+803.986874755
I0410 14:11:39.030153       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:11:39.030244       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-10 14:11:39.030236578 +0000 UTC m=+804.005100679
I0410 14:11:39.159675       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:11:39.188949       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-z2n67" condition "Approved" to 2026-04-10 14:11:39.188937688 +0000 UTC m=+804.163801799
I0410 14:11:39.206484       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-z2n67" condition "Ready" to 2026-04-10 14:11:39.20647156 +0000 UTC m=+804.181335671
I0410 14:11:39.235287       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:11:39.235271477 +0000 UTC m=+804.210135578
I0410 14:11:39.254548       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:11:39.254941       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:11:39.254934257 +0000 UTC m=+804.229798368
I0410 14:11:39.275362       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:12:54.339186       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-10 14:12:54.339155781 +0000 UTC m=+879.314019892
I0410 14:12:54.339217       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:12:54.339293       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-10 14:12:54.339284595 +0000 UTC m=+879.314148706
I0410 14:12:54.359746       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:12:54.359850       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:12:54.359884       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-10 14:12:54.359875654 +0000 UTC m=+879.334739765
I0410 14:12:54.523239       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zktp2" condition "Approved" to 2026-04-10 14:12:54.52322371 +0000 UTC m=+879.498087841
I0410 14:12:54.538178       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zktp2" condition "Ready" to 2026-04-10 14:12:54.53816909 +0000 UTC m=+879.513033191
I0410 14:12:54.563266       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:12:54.563251611 +0000 UTC m=+879.538115722
I0410 14:12:54.584825       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:16:02.456373       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:16:02.456445       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-10 14:16:02.456436687 +0000 UTC m=+1067.431300818
I0410 14:16:02.456689       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-10 14:16:02.456677825 +0000 UTC m=+1067.431541956
I0410 14:16:02.471961       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:16:02.472122       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:16:02.472167       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-10 14:16:02.472159743 +0000 UTC m=+1067.447023854
I0410 14:16:02.722935       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:16:02.730665       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gkmpz" condition "Approved" to 2026-04-10 14:16:02.730640997 +0000 UTC m=+1067.705505148
I0410 14:16:02.751080       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gkmpz" condition "Ready" to 2026-04-10 14:16:02.751067081 +0000 UTC m=+1067.725931212
I0410 14:16:02.782318       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:16:02.782309145 +0000 UTC m=+1067.757173246
I0410 14:16:02.806138       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:16:02.806725       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:16:02.806716954 +0000 UTC m=+1067.781581065
I0410 14:16:02.824075       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:16:02.824396       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:16:02.824388831 +0000 UTC m=+1067.799252942
I0410 14:22:10.562477       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-10 14:22:10.562446584 +0000 UTC m=+1435.537310695
I0410 14:22:10.562541       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:22:10.562586       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-10 14:22:10.562582208 +0000 UTC m=+1435.537446319
I0410 14:22:10.580625       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:22:10.580716       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-10 14:22:10.580708619 +0000 UTC m=+1435.555572730
I0410 14:22:10.914232       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:22:10.952353       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7sm6h" condition "Approved" to 2026-04-10 14:22:10.952336391 +0000 UTC m=+1435.927200502
I0410 14:22:10.971654       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7sm6h" condition "Ready" to 2026-04-10 14:22:10.971642319 +0000 UTC m=+1435.946506420
I0410 14:22:10.999134       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:22:10.999123045 +0000 UTC m=+1435.973987146
I0410 14:22:11.020978       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:22:11.021916       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:22:11.021905763 +0000 UTC m=+1435.996769904
I0410 14:22:11.044840       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:23:33.467949       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-10 14:23:33.467908761 +0000 UTC m=+1518.442772872
I0410 14:23:33.468539       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:23:33.468591       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-10 14:23:33.468582222 +0000 UTC m=+1518.443446343
I0410 14:23:33.485082       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:23:33.485167       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:23:33.485194       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-10 14:23:33.485186486 +0000 UTC m=+1518.460050597
I0410 14:23:33.764323       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-gvbsx" condition "Approved" to 2026-04-10 14:23:33.764307472 +0000 UTC m=+1518.739171603
I0410 14:23:33.789061       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-gvbsx" condition "Ready" to 2026-04-10 14:23:33.789048051 +0000 UTC m=+1518.763912192
I0410 14:23:33.828641       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:23:33.828624228 +0000 UTC m=+1518.803488349
I0410 14:23:33.857194       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:23:33.899277       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:32.817380       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:24:32.817427       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-10 14:24:32.817417541 +0000 UTC m=+1577.792281672
I0410 14:24:32.817681       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-10 14:24:32.817673299 +0000 UTC m=+1577.792537400
I0410 14:24:32.841267       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:32.841360       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-10 14:24:32.841352135 +0000 UTC m=+1577.816216266
I0410 14:24:32.858818       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:32.862078       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-fxscf" condition "Approved" to 2026-04-10 14:24:32.862071808 +0000 UTC m=+1577.836935909
I0410 14:24:32.862480       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:32.862541       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-10 14:24:32.862533832 +0000 UTC m=+1577.837397953
I0410 14:24:32.887493       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-fxscf" condition "Ready" to 2026-04-10 14:24:32.887482998 +0000 UTC m=+1577.862347099
I0410 14:24:32.920750       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:24:32.920737566 +0000 UTC m=+1577.895601677
I0410 14:24:32.945168       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:32.992925       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:33.459062       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-10 14:24:33.459047899 +0000 UTC m=+1578.433912010
I0410 14:24:33.459160       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:24:33.459209       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-10 14:24:33.459197484 +0000 UTC m=+1578.434061625
I0410 14:24:33.475175       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:33.475251       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-10 14:24:33.475245479 +0000 UTC m=+1578.450109580
I0410 14:24:33.500194       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:33.557197       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-8pl5x" condition "Approved" to 2026-04-10 14:24:33.557188661 +0000 UTC m=+1578.532052762
I0410 14:24:33.572722       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-8pl5x" condition "Ready" to 2026-04-10 14:24:33.572712141 +0000 UTC m=+1578.547576252
I0410 14:24:33.600453       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:24:33.600440684 +0000 UTC m=+1578.575304805
I0410 14:24:33.618033       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:33.618201       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:24:33.618194284 +0000 UTC m=+1578.593058385
I0410 14:24:33.636720       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:24:33.636999       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:24:33.636988736 +0000 UTC m=+1578.611852857
I0410 14:24:34.113670       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-10 14:24:34.113655407 +0000 UTC m=+1579.088519548
I0410 14:24:34.809037       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-10 14:24:34.80902381 +0000 UTC m=+1579.783887921
I0410 14:25:03.173481       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-10 14:25:03.173459863 +0000 UTC m=+1608.148323994
I0410 14:25:03.172105       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:25:03.179108       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-10 14:25:03.17908985 +0000 UTC m=+1608.153954001
I0410 14:25:03.195166       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:25:03.195232       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:25:03.195250       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-10 14:25:03.195243929 +0000 UTC m=+1608.170108050
I0410 14:25:04.558733       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-6xb8c" condition "Approved" to 2026-04-10 14:25:04.558721786 +0000 UTC m=+1609.533585907
I0410 14:25:04.581225       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-6xb8c" condition "Ready" to 2026-04-10 14:25:04.581207814 +0000 UTC m=+1609.556071945
I0410 14:25:04.624385       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:25:04.624371354 +0000 UTC m=+1609.599235465
I0410 14:25:04.650684       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:25:04.652174       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:25:04.652166091 +0000 UTC m=+1609.627030192
I0410 14:25:04.674110       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:27:32.983577       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-10 14:27:32.983546253 +0000 UTC m=+1757.958410374
I0410 14:27:32.983781       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:27:32.983860       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-10 14:27:32.983850803 +0000 UTC m=+1757.958714934
I0410 14:27:32.999747       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:27:32.999805       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:27:32.999820       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-10 14:27:32.999814556 +0000 UTC m=+1757.974678667
I0410 14:27:33.294571       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:27:33.302564       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-zzbcp" condition "Approved" to 2026-04-10 14:27:33.302553856 +0000 UTC m=+1758.277417967
I0410 14:27:33.326419       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-zzbcp" condition "Ready" to 2026-04-10 14:27:33.326400877 +0000 UTC m=+1758.301265018
I0410 14:27:33.353472       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:27:33.35345242 +0000 UTC m=+1758.328316541
I0410 14:27:33.376742       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:27:33.377054       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:27:33.377046574 +0000 UTC m=+1758.351910685
I0410 14:27:33.397222       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:27:34.371869       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:27:34.371915       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-10 14:27:34.371904484 +0000 UTC m=+1759.346768625
I0410 14:27:34.372072       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-10 14:27:34.372058559 +0000 UTC m=+1759.346922700
I0410 14:27:34.392111       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:27:34.392164       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:27:34.392176       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-10 14:27:34.392171592 +0000 UTC m=+1759.367035703
I0410 14:27:34.610528       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-wv6zc" condition "Approved" to 2026-04-10 14:27:34.610513793 +0000 UTC m=+1759.585377934
I0410 14:27:34.634618       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-wv6zc" condition "Ready" to 2026-04-10 14:27:34.634608482 +0000 UTC m=+1759.609472593
I0410 14:27:34.661842       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:27:34.66182591 +0000 UTC m=+1759.636690041
I0410 14:27:34.679286       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:27:34.679708       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:27:34.679699723 +0000 UTC m=+1759.654563834
I0410 14:27:34.697417       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:27:34.697860       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:27:34.697846505 +0000 UTC m=+1759.672710616
I0410 14:27:34.698476       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:29:58.313667       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ff6zw-vnc" condition "Ready" to 2026-04-10 14:29:58.313623392 +0000 UTC m=+1903.288487523
I0410 14:29:58.313993       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ff6zw-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:29:58.314071       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ff6zw-vnc" condition "Issuing" to 2026-04-10 14:29:58.314057866 +0000 UTC m=+1903.288921977
I0410 14:29:58.542603       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ff6zw-api" condition "Ready" to 2026-04-10 14:29:58.542587207 +0000 UTC m=+1903.517451308
I0410 14:29:58.542720       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ff6zw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:29:58.542754       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ff6zw-api" condition "Issuing" to 2026-04-10 14:29:58.542746842 +0000 UTC m=+1903.517610973
I0410 14:29:58.775165       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ff6zw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ff6zw-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:29:58.775266       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ff6zw-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:29:58.775286       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ff6zw-vnc" condition "Issuing" to 2026-04-10 14:29:58.77527735 +0000 UTC m=+1903.750141481
I0410 14:29:58.781147       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ff6zw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ff6zw-api\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:29:58.781219       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ff6zw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:29:58.781238       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ff6zw-api" condition "Issuing" to 2026-04-10 14:29:58.781231938 +0000 UTC m=+1903.756096049
I0410 14:29:58.963888       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ff6zw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ff6zw-api\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:29:58.973623       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ff6zw-api-gf5bh" condition "Approved" to 2026-04-10 14:29:58.97360442 +0000 UTC m=+1903.948468541
I0410 14:29:58.993552       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ff6zw-api-gf5bh" condition "Ready" to 2026-04-10 14:29:58.993543908 +0000 UTC m=+1903.968408009
I0410 14:29:59.020121       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ff6zw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:29:59.020111465 +0000 UTC m=+1903.994975576
I0410 14:29:59.043868       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ff6zw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ff6zw-api\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:29:59.044126       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ff6zw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:29:59.044118631 +0000 UTC m=+1904.018982742
I0410 14:29:59.059728       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ff6zw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ff6zw-api\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:29:59.060107       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ff6zw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:29:59.060096805 +0000 UTC m=+1904.034960946
I0410 14:29:59.120921       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ff6zw-vnc-hc5xv" condition "Approved" to 2026-04-10 14:29:59.120912011 +0000 UTC m=+1904.095776112
I0410 14:29:59.138269       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ff6zw-vnc-hc5xv" condition "Ready" to 2026-04-10 14:29:59.138249357 +0000 UTC m=+1904.113113498
I0410 14:29:59.167810       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ff6zw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:29:59.167782118 +0000 UTC m=+1904.142646229
I0410 14:29:59.184000       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ff6zw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ff6zw-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:29:59.184486       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ff6zw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:29:59.184476294 +0000 UTC m=+1904.159340405
I0410 14:29:59.204117       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ff6zw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ff6zw-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:30:40.864788       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-10 14:30:40.864772508 +0000 UTC m=+1945.839636619
I0410 14:30:40.864986       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:30:40.865031       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-10 14:30:40.865019536 +0000 UTC m=+1945.839883677
I0410 14:30:40.884228       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:30:40.884326       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-10 14:30:40.884317554 +0000 UTC m=+1945.859181665
I0410 14:30:41.317439       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:30:41.353403       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-ncvdt" condition "Approved" to 2026-04-10 14:30:41.353389075 +0000 UTC m=+1946.328253206
I0410 14:30:41.374400       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-ncvdt" condition "Ready" to 2026-04-10 14:30:41.374390277 +0000 UTC m=+1946.349254408
I0410 14:30:41.402705       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:30:41.402696459 +0000 UTC m=+1946.377560570
I0410 14:30:41.423290       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:33:19.910779       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:33:19.910849       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-10 14:33:19.910842155 +0000 UTC m=+2104.885706266
I0410 14:33:19.910869       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-10 14:33:19.910853425 +0000 UTC m=+2104.885717536
I0410 14:33:19.951016       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:33:19.951092       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:33:19.951112       1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-10 14:33:19.951104144 +0000 UTC m=+2104.925968275
I0410 14:33:20.093770       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-fhqj7" condition "Approved" to 2026-04-10 14:33:20.093755071 +0000 UTC m=+2105.068619182
I0410 14:33:20.111544       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-fhqj7" condition "Ready" to 2026-04-10 14:33:20.111531811 +0000 UTC m=+2105.086395922
I0410 14:33:20.138505       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:33:20.138491581 +0000 UTC m=+2105.113355692
I0410 14:33:20.154355       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:33:20.154595       1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:33:20.154589399 +0000 UTC m=+2105.129453510
I0410 14:33:20.176147       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:33:20.181698       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:09.701891       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:37:09.701977       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-10 14:37:09.701968383 +0000 UTC m=+2334.676832494
I0410 14:37:09.702575       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-10 14:37:09.702567582 +0000 UTC m=+2334.677431713
I0410 14:37:09.905864       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:09.906030       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-10 14:37:09.906021655 +0000 UTC m=+2334.880885756
I0410 14:37:11.299147       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:11.337757       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-jnrvh" condition "Approved" to 2026-04-10 14:37:11.337738188 +0000 UTC m=+2336.312602329
I0410 14:37:11.458457       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-jnrvh" condition "Ready" to 2026-04-10 14:37:11.458446103 +0000 UTC m=+2336.433310214
I0410 14:37:11.631215       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:37:11.631268       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-10 14:37:11.631255941 +0000 UTC m=+2336.606120082
I0410 14:37:11.632261       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-10 14:37:11.632196431 +0000 UTC m=+2336.607060572
I0410 14:37:11.668870       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:37:11.668842896 +0000 UTC m=+2336.643707037
I0410 14:37:11.749539       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:11.749669       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-10 14:37:11.749658193 +0000 UTC m=+2336.724522334
I0410 14:37:11.750884       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:11.751250       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:37:11.751237573 +0000 UTC m=+2336.726101684
I0410 14:37:11.906795       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:11.907135       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:12.152354       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-2b2bv" condition "Approved" to 2026-04-10 14:37:12.152335036 +0000 UTC m=+2337.127199177
I0410 14:37:12.255738       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-2b2bv" condition "Ready" to 2026-04-10 14:37:12.255727545 +0000 UTC m=+2337.230591646
I0410 14:37:12.463006       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:37:12.462983669 +0000 UTC m=+2337.437847820
I0410 14:37:12.505321       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:12.505681       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:37:12.505673604 +0000 UTC m=+2337.480537715
I0410 14:37:12.517996       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:37:12.545930       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:46.634334       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-10 14:41:46.634280608 +0000 UTC m=+2611.609144759
I0410 14:41:46.634991       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:41:46.635021       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-10 14:41:46.635015741 +0000 UTC m=+2611.609879882
E0410 14:41:47.565755       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0410 14:41:47.565853       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-10 14:41:47.565842362 +0000 UTC m=+2612.540706503
I0410 14:41:47.565890       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0410 14:41:47.574403       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:47.574521       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-10 14:41:47.574511606 +0000 UTC m=+2612.549375717
E0410 14:41:47.881979       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
E0410 14:41:47.882107       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0410 14:41:47.882141       1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0410 14:41:47.882179       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client"
I0410 14:41:47.922834       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:48.177689       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-htwgg" condition "Approved" to 2026-04-10 14:41:48.177667971 +0000 UTC m=+2613.152532132
I0410 14:41:48.307136       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-htwgg" condition "Ready" to 2026-04-10 14:41:48.30712098 +0000 UTC m=+2613.281985111
I0410 14:41:48.721811       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-10 14:41:48.721726094 +0000 UTC m=+2613.696590225
I0410 14:41:48.722658       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:41:48.722703       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-10 14:41:48.722694425 +0000 UTC m=+2613.697558566
I0410 14:41:48.920618       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:48.920749       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:41:48.920780       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-10 14:41:48.920770416 +0000 UTC m=+2613.895634557
E0410 14:41:49.121239       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0410 14:41:49.121301       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-10 14:41:49.121290125 +0000 UTC m=+2614.096154266
I0410 14:41:49.121376       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0410 14:41:49.122861       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:41:49.122666688 +0000 UTC m=+2614.097530829
E0410 14:41:49.624750       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
E0410 14:41:49.624829       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0410 14:41:49.625105       1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0410 14:41:49.625143       1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server"
I0410 14:41:49.628635       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:50.483898       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:41:50.483943       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-10 14:41:50.483933253 +0000 UTC m=+2615.458797384
I0410 14:41:50.484964       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-10 14:41:50.484953696 +0000 UTC m=+2615.459817827
I0410 14:41:50.498483       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:50.498974       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-2tl4g" condition "Approved" to 2026-04-10 14:41:50.498962977 +0000 UTC m=+2615.473827088
I0410 14:41:50.785384       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:50.785492       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:41:50.785512       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-10 14:41:50.785504146 +0000 UTC m=+2615.760368257
I0410 14:41:51.066486       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-2tl4g" condition "Ready" to 2026-04-10 14:41:51.06647781 +0000 UTC m=+2616.041341911
I0410 14:41:52.120027       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:41:52.120008187 +0000 UTC m=+2617.094872318
I0410 14:41:52.882734       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:41:52.882720251 +0000 UTC m=+2617.857584362
I0410 14:41:53.383328       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:53.383660       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:41:53.383650826 +0000 UTC m=+2618.358514967
I0410 14:41:53.761214       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-tfpcp" condition "Approved" to 2026-04-10 14:41:53.761204363 +0000 UTC m=+2618.736068464
I0410 14:41:54.201267       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-tfpcp" condition "Ready" to 2026-04-10 14:41:54.201248719 +0000 UTC m=+2619.176112860
I0410 14:41:54.522194       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:41:54.573614       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:41:54.573596532 +0000 UTC m=+2619.548460673
I0410 14:41:54.625916       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:41:54.62590253 +0000 UTC m=+2619.600766671
I0410 14:41:54.718072       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:47:11.328386       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-10 14:47:11.328335915 +0000 UTC m=+2936.303200066
I0410 14:47:11.328991       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:47:11.329016       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-10 14:47:11.329010696 +0000 UTC m=+2936.303874807
I0410 14:47:11.547266       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:47:11.547334       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:47:11.547351       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-10 14:47:11.547344461 +0000 UTC m=+2936.522208562
I0410 14:47:12.682753       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-rplp6" condition "Approved" to 2026-04-10 14:47:12.682740253 +0000 UTC m=+2937.657604354
I0410 14:47:12.706363       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-rplp6" condition "Ready" to 2026-04-10 14:47:12.706349616 +0000 UTC m=+2937.681213757
I0410 14:47:12.743998       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:47:12.743971731 +0000 UTC m=+2937.718835872
I0410 14:47:12.776989       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:47:12.777869       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:47:12.779034       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:47:12.779019274 +0000 UTC m=+2937.753883375
I0410 14:47:12.815679       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:47:12.816102       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:47:12.816093292 +0000 UTC m=+2937.790957403
I0410 14:48:02.456105       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-10 14:48:02.456074986 +0000 UTC m=+2987.430939097
I0410 14:48:02.475658       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:48:02.475699       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-10 14:48:02.475689924 +0000 UTC m=+2987.450554065
I0410 14:48:02.476254       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-10 14:48:02.47621447 +0000 UTC m=+2987.451078611
I0410 14:48:02.498118       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:02.498204       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-10 14:48:02.498197202 +0000 UTC m=+2987.473061303
E0410 14:48:02.508191       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers"
I0410 14:48:02.561471       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-10 14:48:02.561451184 +0000 UTC m=+2987.536315285
I0410 14:48:02.581137       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:48:02.581152       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-10 14:48:02.581134924 +0000 UTC m=+2987.555999045
I0410 14:48:02.581192       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-10 14:48:02.581184426 +0000 UTC m=+2987.556048557
I0410 14:48:02.596933       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:02.597006       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-10 14:48:02.596997683 +0000 UTC m=+2987.571861794
E0410 14:48:02.742447       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert"
I0410 14:48:03.180850       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:03.218566       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-g2ngv" condition "Approved" to 2026-04-10 14:48:03.218548095 +0000 UTC m=+2988.193412196
I0410 14:48:03.245962       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-g2ngv" condition "Ready" to 2026-04-10 14:48:03.245943418 +0000 UTC m=+2988.220807529
I0410 14:48:03.297819       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:48:03.297802211 +0000 UTC m=+2988.272666312
I0410 14:48:03.331595       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:03.332040       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:48:03.332032728 +0000 UTC m=+2988.306896849
I0410 14:48:03.340585       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:03.370488       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:03.504306       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-10 14:48:03.504287813 +0000 UTC m=+2988.479151954
I0410 14:48:03.524556       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-10 14:48:03.52454474 +0000 UTC m=+2988.499408871
I0410 14:48:03.526133       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:48:03.526161       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-10 14:48:03.526156821 +0000 UTC m=+2988.501020932
I0410 14:48:03.548492       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:03.548549       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:48:03.548587       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-10 14:48:03.548580707 +0000 UTC m=+2988.523444818
I0410 14:48:03.856687       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:03.880571       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-x8nr6" condition "Approved" to 2026-04-10 14:48:03.88055893 +0000 UTC m=+2988.855423051
I0410 14:48:03.902698       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-x8nr6" condition "Ready" to 2026-04-10 14:48:03.902686456 +0000 UTC m=+2988.877550577
I0410 14:48:03.942939       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:48:03.942925064 +0000 UTC m=+2988.917789175
I0410 14:48:03.966356       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:03.966883       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:48:03.966875048 +0000 UTC m=+2988.941739149
I0410 14:48:04.004057       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:04.006086       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:04.006803       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:48:04.006788664 +0000 UTC m=+2988.981652805
I0410 14:48:04.076684       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-10 14:48:04.076645964 +0000 UTC m=+2989.051510095
I0410 14:48:04.104035       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:48:04.104074       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-10 14:48:04.104066688 +0000 UTC m=+2989.078930789
I0410 14:48:04.104475       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-10 14:48:04.10446896 +0000 UTC m=+2989.079333081
I0410 14:48:04.131160       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:04.131228       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:48:04.131265       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-10 14:48:04.131256544 +0000 UTC m=+2989.106120655
I0410 14:48:04.747742       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:04.756352       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-xwv7l" condition "Approved" to 2026-04-10 14:48:04.756337357 +0000 UTC m=+2989.731201458
I0410 14:48:04.795308       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-xwv7l" condition "Ready" to 2026-04-10 14:48:04.795290723 +0000 UTC m=+2989.770154824
I0410 14:48:04.825575       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:48:04.825550856 +0000 UTC m=+2989.800414957
I0410 14:48:04.864918       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:04.874918       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-10 14:48:04.87490151 +0000 UTC m=+2989.849765611
I0410 14:48:04.900234       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-10 14:48:04.900207027 +0000 UTC m=+2989.875071128
I0410 14:48:04.900261       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:48:04.900300       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-10 14:48:04.900290769 +0000 UTC m=+2989.875154880
I0410 14:48:04.923046       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:04.923117       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:48:04.923205       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-10 14:48:04.923128949 +0000 UTC m=+2989.897993050
I0410 14:48:05.673077       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-w9nxw" condition "Approved" to 2026-04-10 14:48:05.673061103 +0000 UTC m=+2990.647925204
I0410 14:48:05.706177       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-w9nxw" condition "Ready" to 2026-04-10 14:48:05.706159875 +0000 UTC m=+2990.681023996
I0410 14:48:05.829549       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:48:05.8295352 +0000 UTC m=+2990.804399321
I0410 14:48:05.944961       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:05.945527       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:48:05.945516162 +0000 UTC m=+2990.920380273
I0410 14:48:06.496012       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:48:06.496406       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:53:06.600371       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-10 14:53:06.600341149 +0000 UTC m=+3291.575205260
I0410 14:53:06.600380       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:53:06.600453       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-10 14:53:06.600440953 +0000 UTC m=+3291.575305094
I0410 14:53:06.650966       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:53:06.651048       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-10 14:53:06.651042656 +0000 UTC m=+3291.625906757
I0410 14:53:07.094376       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:53:07.183683       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-ljcvm" condition "Approved" to 2026-04-10 14:53:07.183672228 +0000 UTC m=+3292.158536329
I0410 14:53:07.286936       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-ljcvm" condition "Ready" to 2026-04-10 14:53:07.286923419 +0000 UTC m=+3292.261787520
I0410 14:53:08.900327       1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:53:08.900312831 +0000 UTC m=+3293.875176942
I0410 14:53:09.352528       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:53:12.831204       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0410 14:53:12.831377       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-10 14:53:12.831330142 +0000 UTC m=+3297.806194263
I0410 14:53:12.832010       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-10 14:53:12.832002884 +0000 UTC m=+3297.806867005
I0410 14:53:13.105563       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:53:13.105694       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-10 14:53:13.105686072 +0000 UTC m=+3298.080550173
I0410 14:53:14.188609       1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-10 14:53:14.18857189 +0000 UTC m=+3299.163436031
I0410 14:53:15.997354       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:53:16.000768       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:53:16.595103       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-kvzbs" condition "Approved" to 2026-04-10 14:53:16.595090387 +0000 UTC m=+3301.569954488
I0410 14:53:16.869850       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-kvzbs" condition "Ready" to 2026-04-10 14:53:16.869841199 +0000 UTC m=+3301.844705310
I0410 14:53:17.073459       1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:53:17.07344633 +0000 UTC m=+3302.048310431
I0410 14:53:17.109294       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0410 14:53:18.626212       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"
E0410 14:56:13.069394       1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out
E0410 14:56:34.714271       1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded
I0410 14:56:34.714353       1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition
E0410 14:56:43.272113       1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again
I0410 14:56:43.272300       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers"
I0410 14:56:43.272474       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned"
I0410 14:56:43.272512       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca"
I0410 14:56:43.272535       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness"
I0410 14:56:43.272558       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager"
I0410 14:56:43.272599       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers"
I0410 14:56:43.272628       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault"
I0410 14:56:43.272650       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi"
I0410 14:56:43.272674       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing"
I0410 14:56:43.272715       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager"
I0410 14:56:43.272725       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim"
I0410 14:56:43.272754       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver"
I0410 14:56:43.272740       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager"
I0410 14:56:43.272781       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics"
I0410 14:56:43.272858       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders"
I0410 14:56:43.272890       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger"
I0410 14:56:43.272895       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges"
I0410 14:56:43.272910       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme"
E0410 14:56:43.273186       1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"