I0721 20:57:45.089094 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0721 20:57:45.089280 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0721 20:57:45.089544 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0721 20:57:45.094500 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0721 20:57:45.094942 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0721 20:57:45.095058 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0721 20:57:45.095129 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0721 20:57:45.099684 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0721 20:57:45.112790 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0721 20:57:45.119382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0721 20:57:45.122470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0721 20:57:45.126532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0721 20:57:45.128814 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0721 20:57:45.128847 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0721 20:57:45.128952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0721 20:57:45.131405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0721 20:57:45.133756 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0721 20:57:45.139202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0721 20:57:45.142739 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0721 20:57:45.142774 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0721 20:57:45.142799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0721 20:57:45.146129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0721 20:57:45.147940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0721 20:57:45.149508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0721 20:57:45.151111 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0721 20:57:45.152896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0721 20:57:45.154695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0721 20:57:45.156394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0721 20:57:45.161614 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0721 20:57:45.164158 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0721 20:57:45.164185 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0721 20:57:45.164201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0721 20:57:45.166614 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0721 20:57:45.169032 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.169340 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.169506 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.190872 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.210303 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.229683 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.243732 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.262234 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.264197 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:45.278551 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 20:57:56.954693 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-21 20:57:56.954678312 +0000 UTC m=+11.896729766 I0721 20:57:57.697685 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-21 20:57:57.697667794 +0000 UTC m=+12.639719298 I0721 20:57:57.698100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:57:57.698145 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-21 20:57:57.698137555 +0000 UTC m=+12.640188999 I0721 20:57:57.710388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:57:57.710820 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-21 20:57:57.710810006 +0000 UTC m=+12.652861440 E0721 20:57:57.714188 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 20:57:57.714260 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-21 20:57:57.71425076 +0000 UTC m=+12.656302214 E0721 20:57:57.714293 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 20:57:57.723847 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0721 20:57:57.723956 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 20:57:57.724031 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 20:57:57.724090 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0721 20:57:57.728381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:57:57.753727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5bdkj" condition "Approved" to 2026-07-21 20:57:57.753714107 +0000 UTC m=+12.695765581 I0721 20:57:57.766318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5bdkj" condition "Ready" to 2026-07-21 20:57:57.766307966 +0000 UTC m=+12.708359410 I0721 20:57:57.788347 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:57:57.788335965 +0000 UTC m=+12.730387409 I0721 20:57:57.806178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:57:57.850241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:58:02.724779 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:58:02.724765932 +0000 UTC m=+17.666817396 I0721 20:58:20.310617 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 20:58:20.310650 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-21 20:58:20.310643552 +0000 UTC m=+35.252694996 I0721 20:58:20.311036 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-21 20:58:20.311030651 +0000 UTC m=+35.253082085 I0721 20:58:20.320379 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-21 20:58:20.320364231 +0000 UTC m=+35.262415685 I0721 20:58:20.331025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:58:20.331111 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-21 20:58:20.331103593 +0000 UTC m=+35.273155027 I0721 20:58:20.469631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 20:58:20.506077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gtphz" condition "Approved" to 2026-07-21 20:58:20.50606091 +0000 UTC m=+35.448112704 I0721 20:58:20.536591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gtphz" condition "Ready" to 2026-07-21 20:58:20.536578597 +0000 UTC m=+35.478630041 I0721 20:58:20.567765 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 20:58:20.567749261 +0000 UTC m=+35.509800695 I0721 20:58:20.590289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:02:30.085997 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready" to 2026-07-21 21:02:30.085963469 +0000 UTC m=+285.028014913 I0721 21:02:30.086612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:02:30.086656 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-07-21 21:02:30.086650975 +0000 UTC m=+285.028702419 I0721 21:02:30.103595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:02:30.103689 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:02:30.103732 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Issuing" to 2026-07-21 21:02:30.103721223 +0000 UTC m=+285.045772707 I0721 21:02:30.348742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-k6nrl" condition "Approved" to 2026-07-21 21:02:30.348731788 +0000 UTC m=+285.290783232 I0721 21:02:30.372328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-72.nip.io-tls-k6nrl" condition "Ready" to 2026-07-21 21:02:30.372316305 +0000 UTC m=+285.314367749 I0721 21:02:30.397570 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:02:30.397553983 +0000 UTC m=+285.339605457 I0721 21:02:30.425295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:02:30.425759 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:02:30.425752563 +0000 UTC m=+285.367804017 I0721 21:02:30.443046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:02:30.443369 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:02:30.443360233 +0000 UTC m=+285.385411677 I0721 21:02:30.446018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:37.101771 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-21 21:03:37.10172391 +0000 UTC m=+352.043775384 I0721 21:03:37.101979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:03:37.102036 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-21 21:03:37.102024657 +0000 UTC m=+352.044076131 E0721 21:03:37.112471 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 21:03:37.112533 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-21 21:03:37.112522855 +0000 UTC m=+352.054574329 E0721 21:03:37.112596 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 21:03:37.114906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:37.114976 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:03:37.114993 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-21 21:03:37.114988286 +0000 UTC m=+352.057039730 E0721 21:03:37.126086 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0721 21:03:37.126528 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 21:03:37.126600 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 21:03:37.126683 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0721 21:03:37.149484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:37.152371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5ffb8" condition "Approved" to 2026-07-21 21:03:37.152355622 +0000 UTC m=+352.094407056 I0721 21:03:37.164646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5ffb8" condition "Ready" to 2026-07-21 21:03:37.164634834 +0000 UTC m=+352.106686278 I0721 21:03:37.186209 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:03:37.186192982 +0000 UTC m=+352.128244426 I0721 21:03:37.206442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:37.258107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:03:42.126946 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:03:42.126932057 +0000 UTC m=+357.068983521 I0721 21:04:21.814948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:04:21.815021 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-21 21:04:21.815012067 +0000 UTC m=+396.757063501 I0721 21:04:21.815056 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-21 21:04:21.815032147 +0000 UTC m=+396.757083591 I0721 21:04:21.821325 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-21 21:04:21.821309412 +0000 UTC m=+396.763360846 I0721 21:04:21.826020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:04:21.826107 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-21 21:04:21.826097478 +0000 UTC m=+396.768148922 I0721 21:04:21.826462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:04:21.826484 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-21 21:04:21.826479647 +0000 UTC m=+396.768531101 I0721 21:04:21.826676 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-21 21:04:21.826671332 +0000 UTC m=+396.768722776 I0721 21:04:21.842097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:21.842187 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-21 21:04:21.842178812 +0000 UTC m=+396.784230246 I0721 21:04:21.856119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:21.856138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:21.856196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:04:21.856217 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-21 21:04:21.856208986 +0000 UTC m=+396.798260430 I0721 21:04:21.856221 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-21 21:04:21.856215446 +0000 UTC m=+396.798266880 I0721 21:04:22.005280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:22.043204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8zlmq" condition "Approved" to 2026-07-21 21:04:22.043188864 +0000 UTC m=+396.985240338 I0721 21:04:22.066508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8zlmq" condition "Ready" to 2026-07-21 21:04:22.066491584 +0000 UTC m=+397.008543038 I0721 21:04:22.100688 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:22.10067403 +0000 UTC m=+397.042725474 I0721 21:04:22.131501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:22.132020 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:22.132011128 +0000 UTC m=+397.074062562 I0721 21:04:22.148309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:22.175204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:22.270940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:22.296768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6l5nw" condition "Approved" to 2026-07-21 21:04:22.296742261 +0000 UTC m=+397.238793715 I0721 21:04:22.315447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xnl4g" condition "Approved" to 2026-07-21 21:04:22.315421988 +0000 UTC m=+397.257473462 I0721 21:04:22.318756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6l5nw" condition "Ready" to 2026-07-21 21:04:22.318740489 +0000 UTC m=+397.260791933 I0721 21:04:22.570817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xnl4g" condition "Ready" to 2026-07-21 21:04:22.57079166 +0000 UTC m=+397.512843134 I0721 21:04:22.912090 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:22.912076196 +0000 UTC m=+397.854127640 I0721 21:04:23.013473 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:23.013460877 +0000 UTC m=+397.955512321 I0721 21:04:23.117773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:23.118213 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:23.118205772 +0000 UTC m=+398.060257216 I0721 21:04:23.210459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:23.211024 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:23.211013844 +0000 UTC m=+398.153065298 I0721 21:04:23.561104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:23.666984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:23.710473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:30.547301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" condition "Ready" to 2026-07-21 21:04:30.54725655 +0000 UTC m=+405.489308034 I0721 21:04:30.547325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:04:30.547493 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" condition "Issuing" to 2026-07-21 21:04:30.547478416 +0000 UTC m=+405.489529840 I0721 21:04:30.560342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:30.560435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:04:30.560456 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" condition "Issuing" to 2026-07-21 21:04:30.560449963 +0000 UTC m=+405.502501397 I0721 21:04:30.831213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:30.842395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6c2j2-r2ktp" condition "Approved" to 2026-07-21 21:04:30.842379516 +0000 UTC m=+405.784430950 I0721 21:04:30.860570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6c2j2-r2ktp" condition "Ready" to 2026-07-21 21:04:30.86055859 +0000 UTC m=+405.802610034 I0721 21:04:30.888239 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:30.888222418 +0000 UTC m=+405.830273852 I0721 21:04:30.905664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:04:30.905996 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:04:30.905988972 +0000 UTC m=+405.848040406 I0721 21:04:30.924394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6c2j2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:05:00.031160 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-21 21:05:00.031103985 +0000 UTC m=+434.973155459 I0721 21:05:00.031152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:05:00.031382 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-21 21:05:00.031364032 +0000 UTC m=+434.973415506 I0721 21:05:00.051909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:05:00.051984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:05:00.052003 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-21 21:05:00.051997348 +0000 UTC m=+434.994048802 I0721 21:05:00.215280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4t7qj" condition "Approved" to 2026-07-21 21:05:00.215266684 +0000 UTC m=+435.157318118 I0721 21:05:00.233903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4t7qj" condition "Ready" to 2026-07-21 21:05:00.233889131 +0000 UTC m=+435.175940585 I0721 21:05:00.260550 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:05:00.260540363 +0000 UTC m=+435.202591807 I0721 21:05:00.283140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:05:00.283450 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:05:00.283444553 +0000 UTC m=+435.225495987 I0721 21:05:00.290872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:05:00.301069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:05:00.302728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:05:00.303100 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:05:00.303091834 +0000 UTC m=+435.245143268 I0721 21:08:22.113962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:08:22.113989 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-21 21:08:22.113974848 +0000 UTC m=+637.056026312 I0721 21:08:22.114065 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-21 21:08:22.11405383 +0000 UTC m=+637.056105344 I0721 21:08:22.138106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:08:22.138222 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-21 21:08:22.138210881 +0000 UTC m=+637.080262355 I0721 21:08:22.451321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:08:22.486927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vsmj6" condition "Approved" to 2026-07-21 21:08:22.486914496 +0000 UTC m=+637.428965970 I0721 21:08:22.506653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vsmj6" condition "Ready" to 2026-07-21 21:08:22.506644918 +0000 UTC m=+637.448696352 I0721 21:08:22.531650 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:08:22.531638869 +0000 UTC m=+637.473690313 I0721 21:08:22.555643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:11:00.273262 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-21 21:11:00.273239476 +0000 UTC m=+795.215290920 I0721 21:11:00.273590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:11:00.273635 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-21 21:11:00.273631046 +0000 UTC m=+795.215682480 I0721 21:11:00.292230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:11:00.292359 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-21 21:11:00.292350663 +0000 UTC m=+795.234402107 I0721 21:11:00.429297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:11:00.470527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bbxxf" condition "Approved" to 2026-07-21 21:11:00.470511686 +0000 UTC m=+795.412563130 I0721 21:11:00.495340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bbxxf" condition "Ready" to 2026-07-21 21:11:00.495327912 +0000 UTC m=+795.437379356 I0721 21:11:00.531364 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:11:00.531352463 +0000 UTC m=+795.473403907 I0721 21:11:00.559336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:11:00.564979 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:11:00.564958184 +0000 UTC m=+795.507009618 I0721 21:11:00.570211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:11:00.587682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:12:02.493399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:12:02.493437 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-21 21:12:02.493430215 +0000 UTC m=+857.435481649 I0721 21:12:02.493940 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-21 21:12:02.493934418 +0000 UTC m=+857.435985852 I0721 21:12:02.513655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:12:02.513714 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-21 21:12:02.513708341 +0000 UTC m=+857.455759775 I0721 21:12:02.705869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:12:02.736666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6xm96" condition "Approved" to 2026-07-21 21:12:02.736647602 +0000 UTC m=+857.678699066 I0721 21:12:02.757100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6xm96" condition "Ready" to 2026-07-21 21:12:02.757085543 +0000 UTC m=+857.699136987 I0721 21:12:02.792291 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:12:02.792279333 +0000 UTC m=+857.734330777 I0721 21:12:02.831583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:12:02.895166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:15:18.805015 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:15:18.805096 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-21 21:15:18.805087202 +0000 UTC m=+1053.747138646 I0721 21:15:18.805066 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-21 21:15:18.805047221 +0000 UTC m=+1053.747098745 I0721 21:15:18.824062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:15:18.824162 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-21 21:15:18.824151848 +0000 UTC m=+1053.766203312 I0721 21:15:18.992208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:15:19.027922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-k7zfp" condition "Approved" to 2026-07-21 21:15:19.027899163 +0000 UTC m=+1053.969950597 I0721 21:15:19.053134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-k7zfp" condition "Ready" to 2026-07-21 21:15:19.053122201 +0000 UTC m=+1053.995173635 I0721 21:15:19.092725 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:15:19.092678198 +0000 UTC m=+1054.034729632 I0721 21:15:19.127421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:15:19.127822 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:15:19.127817117 +0000 UTC m=+1054.069868551 I0721 21:15:19.133908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:15:19.141326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:15:19.141936 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:15:19.141924142 +0000 UTC m=+1054.083975616 I0721 21:23:18.117038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:23:18.117118 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-21 21:23:18.117097372 +0000 UTC m=+1533.059148806 I0721 21:23:18.117274 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-21 21:23:18.117262606 +0000 UTC m=+1533.059314040 I0721 21:23:18.132157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:23:18.132226 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-21 21:23:18.132219503 +0000 UTC m=+1533.074270937 I0721 21:23:18.579981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:23:18.611552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-cmbfb" condition "Approved" to 2026-07-21 21:23:18.611530518 +0000 UTC m=+1533.553581952 I0721 21:23:18.637158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-cmbfb" condition "Ready" to 2026-07-21 21:23:18.637145028 +0000 UTC m=+1533.579196462 I0721 21:23:18.672744 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:23:18.672733393 +0000 UTC m=+1533.614784827 I0721 21:23:18.703136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:24:51.791940 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:24:51.791995 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-21 21:24:51.791972647 +0000 UTC m=+1626.734024131 I0721 21:24:51.792022 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-21 21:24:51.792013398 +0000 UTC m=+1626.734064852 I0721 21:24:51.812002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:24:51.812216 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-21 21:24:51.812206325 +0000 UTC m=+1626.754257759 I0721 21:24:52.151190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:24:52.192919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-2mnqf" condition "Approved" to 2026-07-21 21:24:52.192891745 +0000 UTC m=+1627.134943179 I0721 21:24:52.209459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-2mnqf" condition "Ready" to 2026-07-21 21:24:52.209446132 +0000 UTC m=+1627.151497576 I0721 21:24:52.240469 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:24:52.240457625 +0000 UTC m=+1627.182509069 I0721 21:24:52.273089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:24:52.273422 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:24:52.273415295 +0000 UTC m=+1627.215466749 I0721 21:24:52.289053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:24:52.289289 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:24:52.289282524 +0000 UTC m=+1627.231333968 I0721 21:24:52.294854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:51.212437 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-21 21:25:51.212275038 +0000 UTC m=+1686.154326502 I0721 21:25:51.212841 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:25:51.212955 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-21 21:25:51.212917424 +0000 UTC m=+1686.154968868 I0721 21:25:51.240010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:51.240137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:25:51.240189 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-21 21:25:51.240181394 +0000 UTC m=+1686.182232828 I0721 21:25:51.288367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-sxmwf" condition "Approved" to 2026-07-21 21:25:51.288354339 +0000 UTC m=+1686.230405773 I0721 21:25:51.306809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-sxmwf" condition "Ready" to 2026-07-21 21:25:51.306795793 +0000 UTC m=+1686.248847237 I0721 21:25:51.335495 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:25:51.335480098 +0000 UTC m=+1686.277531522 I0721 21:25:51.362632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:51.411898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:51.940894 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-21 21:25:51.940877673 +0000 UTC m=+1686.882929107 I0721 21:25:51.940907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:25:51.941143 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-21 21:25:51.941117548 +0000 UTC m=+1686.883168992 I0721 21:25:51.963010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:51.963104 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-21 21:25:51.963094009 +0000 UTC m=+1686.905145453 I0721 21:25:51.984557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:51.984638 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-21 21:25:51.984632119 +0000 UTC m=+1686.926683553 I0721 21:25:51.993645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-ss6c6" condition "Approved" to 2026-07-21 21:25:51.99363059 +0000 UTC m=+1686.935682034 I0721 21:25:52.001560 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-21 21:25:52.001545915 +0000 UTC m=+1686.943597359 I0721 21:25:52.010301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-ss6c6" condition "Ready" to 2026-07-21 21:25:52.010290059 +0000 UTC m=+1686.952341503 I0721 21:25:52.011935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:52.049246 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:25:52.049229137 +0000 UTC m=+1686.991280601 I0721 21:25:52.067778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:52.068079 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:25:52.068070599 +0000 UTC m=+1687.010122033 I0721 21:25:52.101288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:25:52.814617 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-21 21:25:52.814608735 +0000 UTC m=+1687.756660159 I0721 21:25:53.592725 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-21 21:25:53.592710407 +0000 UTC m=+1688.534761871 I0721 21:26:39.427349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:26:39.427394 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-21 21:26:39.427384696 +0000 UTC m=+1734.369436140 I0721 21:26:39.427578 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-21 21:26:39.427564101 +0000 UTC m=+1734.369615535 I0721 21:26:39.457275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:26:39.457373 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-21 21:26:39.457365256 +0000 UTC m=+1734.399416710 I0721 21:26:40.636384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:26:40.692915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-sdldp" condition "Approved" to 2026-07-21 21:26:40.692902063 +0000 UTC m=+1735.634953507 I0721 21:26:40.718941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-sdldp" condition "Ready" to 2026-07-21 21:26:40.718929514 +0000 UTC m=+1735.660980948 I0721 21:26:40.754588 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:26:40.754572993 +0000 UTC m=+1735.696624437 I0721 21:26:40.781332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:34.181847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:29:34.181912 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-21 21:29:34.181905869 +0000 UTC m=+1909.123957313 I0721 21:29:34.182357 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-21 21:29:34.182353059 +0000 UTC m=+1909.124404503 I0721 21:29:34.208265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:34.208348 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-21 21:29:34.20834117 +0000 UTC m=+1909.150392604 I0721 21:29:34.432745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:34.476428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-k64mh" condition "Approved" to 2026-07-21 21:29:34.476419671 +0000 UTC m=+1909.418471095 I0721 21:29:34.504028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-k64mh" condition "Ready" to 2026-07-21 21:29:34.504014881 +0000 UTC m=+1909.446066315 I0721 21:29:34.541585 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:29:34.541509746 +0000 UTC m=+1909.483561180 I0721 21:29:34.573554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:34.573894 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:29:34.573887354 +0000 UTC m=+1909.515938778 I0721 21:29:34.608382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:34.608891 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:29:34.608883227 +0000 UTC m=+1909.550934671 I0721 21:29:36.180187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:29:36.180224 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-21 21:29:36.180216114 +0000 UTC m=+1911.122267558 I0721 21:29:36.180757 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-21 21:29:36.180749447 +0000 UTC m=+1911.122800891 I0721 21:29:36.199307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:36.199406 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-21 21:29:36.199397287 +0000 UTC m=+1911.141448731 I0721 21:29:36.675541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:36.710191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-mt949" condition "Approved" to 2026-07-21 21:29:36.710171542 +0000 UTC m=+1911.652223006 I0721 21:29:36.732402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-mt949" condition "Ready" to 2026-07-21 21:29:36.73238865 +0000 UTC m=+1911.674440094 I0721 21:29:36.769511 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:29:36.769494024 +0000 UTC m=+1911.711545478 I0721 21:29:36.796358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:36.796710 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:29:36.796702076 +0000 UTC m=+1911.738753530 I0721 21:29:36.808440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:29:36.827737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:32:53.009893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:32:53.009971 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-21 21:32:53.009962267 +0000 UTC m=+2107.952013741 I0721 21:32:53.010189 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-21 21:32:53.010170772 +0000 UTC m=+2107.952222216 I0721 21:32:53.027771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:32:53.028038 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-21 21:32:53.0280226 +0000 UTC m=+2107.970074114 I0721 21:32:53.335789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:32:53.366689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lf77t" condition "Approved" to 2026-07-21 21:32:53.366675783 +0000 UTC m=+2108.308727217 I0721 21:32:53.385633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lf77t" condition "Ready" to 2026-07-21 21:32:53.385622738 +0000 UTC m=+2108.327674172 I0721 21:32:53.420263 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:32:53.420251957 +0000 UTC m=+2108.362303401 I0721 21:32:53.446049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:32:53.446540 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:32:53.446531733 +0000 UTC m=+2108.388583177 I0721 21:32:53.466119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:32:53.466425 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:32:53.466417511 +0000 UTC m=+2108.408468945 I0721 21:33:17.718254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-mzwhm-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:33:17.718297 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mzwhm-api" condition "Issuing" to 2026-07-21 21:33:17.718283355 +0000 UTC m=+2132.660334799 I0721 21:33:17.718404 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mzwhm-api" condition "Ready" to 2026-07-21 21:33:17.718386737 +0000 UTC m=+2132.660438181 I0721 21:33:17.722285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-mzwhm-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:33:17.722343 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mzwhm-vnc" condition "Issuing" to 2026-07-21 21:33:17.722328634 +0000 UTC m=+2132.664380098 I0721 21:33:17.722541 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mzwhm-vnc" condition "Ready" to 2026-07-21 21:33:17.722516908 +0000 UTC m=+2132.664568352 I0721 21:33:17.739905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-mzwhm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mzwhm-api\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:33:17.740003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-mzwhm-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:33:17.740025 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mzwhm-api" condition "Issuing" to 2026-07-21 21:33:17.740018558 +0000 UTC m=+2132.682070002 I0721 21:33:17.744192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-mzwhm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mzwhm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:33:17.744244 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-mzwhm-vnc" condition "Ready" to 2026-07-21 21:33:17.744239872 +0000 UTC m=+2132.686291316 I0721 21:33:17.895050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-mzwhm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mzwhm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:33:17.930168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mzwhm-vnc-sh4sj" condition "Approved" to 2026-07-21 21:33:17.930157205 +0000 UTC m=+2132.872208649 I0721 21:33:17.951370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mzwhm-vnc-sh4sj" condition "Ready" to 2026-07-21 21:33:17.951362366 +0000 UTC m=+2132.893413800 I0721 21:33:17.979702 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mzwhm-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:33:17.979689321 +0000 UTC m=+2132.921740765 I0721 21:33:17.997681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-mzwhm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mzwhm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:33:17.998103 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mzwhm-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:33:17.998065432 +0000 UTC m=+2132.940116866 I0721 21:33:18.026468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-mzwhm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mzwhm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:33:18.529843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-mzwhm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mzwhm-api\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:33:18.544777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mzwhm-api-bmc78" condition "Approved" to 2026-07-21 21:33:18.544759222 +0000 UTC m=+2133.486810656 I0721 21:33:18.569069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-mzwhm-api-bmc78" condition "Ready" to 2026-07-21 21:33:18.569058577 +0000 UTC m=+2133.511110021 I0721 21:33:18.598254 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mzwhm-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:33:18.598237344 +0000 UTC m=+2133.540288798 I0721 21:33:18.628725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-mzwhm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mzwhm-api\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:33:18.629284 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-mzwhm-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:33:18.629275296 +0000 UTC m=+2133.571326750 I0721 21:33:18.657561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-mzwhm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-mzwhm-api\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:35:32.562597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:35:32.562679 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-07-21 21:35:32.562670345 +0000 UTC m=+2267.504721809 I0721 21:35:32.563450 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-07-21 21:35:32.563439644 +0000 UTC m=+2267.505491118 I0721 21:35:32.579680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:35:32.579779 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-07-21 21:35:32.579770715 +0000 UTC m=+2267.521822159 I0721 21:35:32.866442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:35:32.898398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-brx87" condition "Approved" to 2026-07-21 21:35:32.898386046 +0000 UTC m=+2267.840437480 I0721 21:35:32.929132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-brx87" condition "Ready" to 2026-07-21 21:35:32.92912125 +0000 UTC m=+2267.871172694 I0721 21:35:32.960403 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:35:32.960393028 +0000 UTC m=+2267.902444472 I0721 21:35:32.984489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:35:33.042885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:39:33.102391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:39:33.102503 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-21 21:39:33.102490488 +0000 UTC m=+2508.044541952 I0721 21:39:33.102392 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-21 21:39:33.102330044 +0000 UTC m=+2508.044381518 I0721 21:39:33.122710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:39:33.122838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:39:33.122878 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-21 21:39:33.122872228 +0000 UTC m=+2508.064923662 I0721 21:39:33.266301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:39:33.281567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-g29g4" condition "Approved" to 2026-07-21 21:39:33.281555739 +0000 UTC m=+2508.223607173 I0721 21:39:33.321395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-g29g4" condition "Ready" to 2026-07-21 21:39:33.321383626 +0000 UTC m=+2508.263435070 I0721 21:39:33.362501 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:39:33.362486682 +0000 UTC m=+2508.304538156 I0721 21:39:33.392781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:39:34.777203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:39:34.777239 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-21 21:39:34.777231369 +0000 UTC m=+2509.719282813 I0721 21:39:34.777555 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-21 21:39:34.777546698 +0000 UTC m=+2509.719598162 I0721 21:39:34.792918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:39:34.793188 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-21 21:39:34.793179261 +0000 UTC m=+2509.735230735 I0721 21:39:34.988507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:39:35.021101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-9c84s" condition "Approved" to 2026-07-21 21:39:35.021085079 +0000 UTC m=+2509.963136523 I0721 21:39:35.042225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-9c84s" condition "Ready" to 2026-07-21 21:39:35.042215967 +0000 UTC m=+2509.984267401 I0721 21:39:35.070791 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:39:35.070779487 +0000 UTC m=+2510.012830931 I0721 21:39:35.097707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:39:35.154721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:56.716753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:41:56.716821 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-21 21:41:56.71681412 +0000 UTC m=+2651.658865554 I0721 21:41:56.717346 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-21 21:41:56.717339933 +0000 UTC m=+2651.659391377 E0721 21:41:56.732977 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 21:41:56.733041 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-21 21:41:56.733034078 +0000 UTC m=+2651.675085512 I0721 21:41:56.733062 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 21:41:56.735813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:56.735918 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-21 21:41:56.735910568 +0000 UTC m=+2651.677962012 E0721 21:41:56.744562 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0721 21:41:56.744693 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 21:41:56.744933 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0721 21:41:56.745013 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0721 21:41:56.759955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:56.789327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-d5zs8" condition "Approved" to 2026-07-21 21:41:56.789306707 +0000 UTC m=+2651.731358171 I0721 21:41:56.808709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-d5zs8" condition "Ready" to 2026-07-21 21:41:56.808682473 +0000 UTC m=+2651.750733907 I0721 21:41:56.854326 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:41:56.854308811 +0000 UTC m=+2651.796360245 I0721 21:41:56.878482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:57.533339 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-21 21:41:57.53332199 +0000 UTC m=+2652.475373444 I0721 21:41:57.534075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:41:57.534131 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-21 21:41:57.534123819 +0000 UTC m=+2652.476175283 E0721 21:41:57.547720 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 21:41:57.547766 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-21 21:41:57.547758134 +0000 UTC m=+2652.489809568 I0721 21:41:57.547812 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 21:41:57.552336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:57.552445 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-21 21:41:57.552436359 +0000 UTC m=+2652.494487803 E0721 21:41:57.558783 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0721 21:41:57.559011 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 21:41:57.559061 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0721 21:41:57.559127 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0721 21:41:57.575693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:57.605252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-cjkwc" condition "Approved" to 2026-07-21 21:41:57.605233922 +0000 UTC m=+2652.547285386 I0721 21:41:57.622772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-cjkwc" condition "Ready" to 2026-07-21 21:41:57.622760053 +0000 UTC m=+2652.564811487 I0721 21:41:57.647639 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:41:57.647624852 +0000 UTC m=+2652.589676296 I0721 21:41:57.670827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:58.385164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:41:58.385203 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-21 21:41:58.385195906 +0000 UTC m=+2653.327247340 I0721 21:41:58.385230 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-21 21:41:58.385207836 +0000 UTC m=+2653.327259350 I0721 21:41:58.400543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:58.400721 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-21 21:41:58.400712216 +0000 UTC m=+2653.342763660 I0721 21:41:58.431430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:58.438787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:41:58.462361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-dlccs" condition "Approved" to 2026-07-21 21:41:58.462347727 +0000 UTC m=+2653.404399161 I0721 21:41:58.487971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-dlccs" condition "Ready" to 2026-07-21 21:41:58.487952505 +0000 UTC m=+2653.430003959 I0721 21:42:01.745118 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:42:01.745107075 +0000 UTC m=+2656.687158519 I0721 21:42:01.757856 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-dlccs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:42:01.757841658 +0000 UTC m=+2656.699893092 I0721 21:42:01.783406 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:42:01.783392384 +0000 UTC m=+2656.725443828 I0721 21:42:01.808309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:42:01.808631 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:42:01.808622872 +0000 UTC m=+2656.750674306 I0721 21:42:01.816129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:42:01.829096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:42:01.829391 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:42:01.829383921 +0000 UTC m=+2656.771435375 I0721 21:42:02.559767 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:42:02.559752738 +0000 UTC m=+2657.501804182 I0721 21:44:28.060731 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-21 21:44:28.060720508 +0000 UTC m=+2803.002771942 I0721 21:44:28.061723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:44:28.061894 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-21 21:44:28.061872305 +0000 UTC m=+2803.003923779 I0721 21:44:28.081761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:44:28.081851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:44:28.081866 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-21 21:44:28.081859646 +0000 UTC m=+2803.023911090 I0721 21:44:28.385003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-gwlg4" condition "Approved" to 2026-07-21 21:44:28.384988248 +0000 UTC m=+2803.327039692 I0721 21:44:28.407123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-gwlg4" condition "Ready" to 2026-07-21 21:44:28.407112711 +0000 UTC m=+2803.349164145 I0721 21:44:28.434852 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:44:28.4348157 +0000 UTC m=+2803.376867144 I0721 21:44:28.454148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:18.164650 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-21 21:45:18.164549263 +0000 UTC m=+2853.106600707 I0721 21:45:18.187450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:45:18.187491 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-21 21:45:18.187482706 +0000 UTC m=+2853.129534140 I0721 21:45:18.187988 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-21 21:45:18.187963528 +0000 UTC m=+2853.130015012 I0721 21:45:18.210068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:18.210139 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-21 21:45:18.210132682 +0000 UTC m=+2853.152184126 E0721 21:45:18.224528 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0721 21:45:18.291832 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-21 21:45:18.291812344 +0000 UTC m=+2853.233863788 I0721 21:45:18.315953 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:45:18.316010 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-21 21:45:18.316000327 +0000 UTC m=+2853.258051761 I0721 21:45:18.316851 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-21 21:45:18.316833227 +0000 UTC m=+2853.258884691 I0721 21:45:18.334696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:18.334789 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-21 21:45:18.334781637 +0000 UTC m=+2853.276833081 E0721 21:45:18.462558 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0721 21:45:18.536733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:18.575585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-dbxmw" condition "Approved" to 2026-07-21 21:45:18.575569151 +0000 UTC m=+2853.517620585 I0721 21:45:18.617507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-dbxmw" condition "Ready" to 2026-07-21 21:45:18.617494379 +0000 UTC m=+2853.559545823 I0721 21:45:18.690592 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:18.69056628 +0000 UTC m=+2853.632617714 I0721 21:45:18.727710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:18.728304 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:18.728296016 +0000 UTC m=+2853.670347450 I0721 21:45:18.778340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:19.406393 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-21 21:45:19.406368341 +0000 UTC m=+2854.348419775 I0721 21:45:19.451258 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-21 21:45:19.451243491 +0000 UTC m=+2854.393294935 I0721 21:45:19.451746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:45:19.451768 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-21 21:45:19.451764524 +0000 UTC m=+2854.393815958 I0721 21:45:19.472706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:19.472956 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-21 21:45:19.472946364 +0000 UTC m=+2854.414997828 I0721 21:45:19.690677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:19.722367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bzbkm" condition "Approved" to 2026-07-21 21:45:19.722352028 +0000 UTC m=+2854.664403462 I0721 21:45:19.763676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bzbkm" condition "Ready" to 2026-07-21 21:45:19.763660001 +0000 UTC m=+2854.705711435 I0721 21:45:19.811848 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:19.811833082 +0000 UTC m=+2854.753884516 I0721 21:45:19.850080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:19.850538 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:19.8505298 +0000 UTC m=+2854.792581234 I0721 21:45:19.862650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:19.877394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:19.877972 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:19.877965793 +0000 UTC m=+2854.820017227 I0721 21:45:20.062502 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-21 21:45:20.062473917 +0000 UTC m=+2855.004525351 I0721 21:45:20.093340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:45:20.093447 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-21 21:45:20.093435196 +0000 UTC m=+2855.035486720 I0721 21:45:20.093480 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-21 21:45:20.093450757 +0000 UTC m=+2855.035502201 I0721 21:45:20.146186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:20.146288 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-21 21:45:20.146280902 +0000 UTC m=+2855.088332336 I0721 21:45:20.597650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:20.641094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-gmt4m" condition "Approved" to 2026-07-21 21:45:20.641078214 +0000 UTC m=+2855.583129658 I0721 21:45:20.664980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-gmt4m" condition "Ready" to 2026-07-21 21:45:20.664965649 +0000 UTC m=+2855.607017083 I0721 21:45:20.704843 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:20.704831857 +0000 UTC m=+2855.646883291 I0721 21:45:20.729603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:20.730346 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:20.730336792 +0000 UTC m=+2855.672388236 I0721 21:45:20.753659 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-21 21:45:20.753641174 +0000 UTC m=+2855.695692618 I0721 21:45:20.753692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:20.780094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:20.782408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:45:20.782440 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-21 21:45:20.78243325 +0000 UTC m=+2855.724484694 I0721 21:45:20.782758 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-21 21:45:20.782753487 +0000 UTC m=+2855.724804931 I0721 21:45:20.805399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:20.805475 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-21 21:45:20.805467674 +0000 UTC m=+2855.747519108 I0721 21:45:20.971642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:21.086980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-kgxdv" condition "Approved" to 2026-07-21 21:45:21.086966486 +0000 UTC m=+2856.029017930 I0721 21:45:21.162014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-kgxdv" condition "Ready" to 2026-07-21 21:45:21.162000235 +0000 UTC m=+2856.104051669 I0721 21:45:21.439913 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:21.43989991 +0000 UTC m=+2856.381951344 I0721 21:45:21.589781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:45:21.602444 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:45:21.602425064 +0000 UTC m=+2856.544476508 I0721 21:45:21.773615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:43.872995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:48:43.873044 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-21 21:48:43.873034747 +0000 UTC m=+3058.815086181 I0721 21:48:43.873622 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-21 21:48:43.873615941 +0000 UTC m=+3058.815667385 I0721 21:48:43.897236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:43.897493 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-21 21:48:43.897485216 +0000 UTC m=+3058.839536660 I0721 21:48:44.145784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:44.183513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-pk9qh" condition "Approved" to 2026-07-21 21:48:44.183498611 +0000 UTC m=+3059.125550045 I0721 21:48:44.216802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-pk9qh" condition "Ready" to 2026-07-21 21:48:44.216786768 +0000 UTC m=+3059.158838202 I0721 21:48:44.261524 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:48:44.261506105 +0000 UTC m=+3059.203557539 I0721 21:48:44.298154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:44.301217 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:48:44.301201788 +0000 UTC m=+3059.243253242 I0721 21:48:44.309885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:44.330107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:44.337283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:44.337697 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:48:44.337687264 +0000 UTC m=+3059.279738708 I0721 21:48:47.115556 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-21 21:48:47.115540948 +0000 UTC m=+3062.057592402 I0721 21:48:47.115596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:48:47.115655 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-21 21:48:47.115645051 +0000 UTC m=+3062.057696525 I0721 21:48:47.134805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:47.135002 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-21 21:48:47.134991205 +0000 UTC m=+3062.077042649 I0721 21:48:47.313934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:47.359237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-772qd" condition "Approved" to 2026-07-21 21:48:47.359226205 +0000 UTC m=+3062.301277639 I0721 21:48:47.400093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-772qd" condition "Ready" to 2026-07-21 21:48:47.400083768 +0000 UTC m=+3062.342135192 I0721 21:48:47.503198 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:48:47.503175046 +0000 UTC m=+3062.445226490 I0721 21:48:47.537562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:47.537977 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:48:47.53796898 +0000 UTC m=+3062.480020414 I0721 21:48:47.561342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:48:47.561664 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:48:47.56165638 +0000 UTC m=+3062.503707814 I0721 21:53:13.526784 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-21 21:53:13.52677028 +0000 UTC m=+3328.468821724 I0721 21:53:13.526817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:53:13.526859 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-21 21:53:13.526848251 +0000 UTC m=+3328.468899725 I0721 21:53:13.542306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:13.542453 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-21 21:53:13.542443614 +0000 UTC m=+3328.484495078 I0721 21:53:13.635750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:13.667222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-kk5kq" condition "Approved" to 2026-07-21 21:53:13.667214534 +0000 UTC m=+3328.609265958 I0721 21:53:13.686821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-kk5kq" condition "Ready" to 2026-07-21 21:53:13.686807075 +0000 UTC m=+3328.628858539 I0721 21:53:13.715133 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:53:13.715112929 +0000 UTC m=+3328.657164393 I0721 21:53:13.740500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:13.740750 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:53:13.740742498 +0000 UTC m=+3328.682793932 I0721 21:53:13.745899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:13.757593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:13.757958 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:53:13.75794922 +0000 UTC m=+3328.700000664 I0721 21:53:13.758414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:49.558653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 21:53:49.558712 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-21 21:53:49.558706407 +0000 UTC m=+3364.500757851 I0721 21:53:49.558992 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-21 21:53:49.558988095 +0000 UTC m=+3364.501039529 I0721 21:53:49.576109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:49.576246 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-21 21:53:49.576237828 +0000 UTC m=+3364.518289262 I0721 21:53:50.007215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:50.042347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jb7s7" condition "Approved" to 2026-07-21 21:53:50.04233177 +0000 UTC m=+3364.984383214 I0721 21:53:50.062869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-jb7s7" condition "Ready" to 2026-07-21 21:53:50.062856763 +0000 UTC m=+3365.004908197 I0721 21:53:50.096944 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:53:50.096930799 +0000 UTC m=+3365.038982243 I0721 21:53:50.116334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 21:53:50.116653 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 21:53:50.116644453 +0000 UTC m=+3365.058695897 I0721 21:53:50.140546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"