I0421 17:18:30.855706 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0421 17:18:30.855873 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0421 17:18:30.855959 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0421 17:18:30.863152 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0421 17:18:30.863789 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0421 17:18:30.863924 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0421 17:18:30.863955 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0421 17:18:30.867274 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0421 17:18:30.888512 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0421 17:18:30.893799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0421 17:18:30.897328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0421 17:18:30.899721 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0421 17:18:30.903932 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0421 17:18:30.907222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0421 17:18:30.910066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0421 17:18:30.912670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0421 17:18:30.915158 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0421 17:18:30.915240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0421 17:18:30.917106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0421 17:18:30.918936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0421 17:18:30.920879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0421 17:18:30.922605 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0421 17:18:30.931009 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0421 17:18:30.931121 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0421 17:18:30.931445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0421 17:18:30.935686 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0421 17:18:30.938114 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0421 17:18:30.938166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0421 17:18:30.940879 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0421 17:18:30.943690 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0421 17:18:30.946499 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0421 17:18:30.948692 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0421 17:18:30.948742 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0421 17:18:30.959395 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:30.959467 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:30.960646 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:30.969939 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:30.991516 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:31.006216 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:31.023293 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:31.043305 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:31.045623 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:18:31.060962 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0421 17:19:09.896599 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-21 17:19:09.896585705 +0000 UTC m=+39.081365884 I0421 17:19:10.662894 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-21 17:19:10.662880336 +0000 UTC m=+39.847660515 I0421 17:19:10.663107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:19:10.663352 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:19:10.663337986 +0000 UTC m=+39.848118185 E0421 17:19:10.744811 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:19:10.744917 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-21 17:19:10.744905489 +0000 UTC m=+39.929685688 E0421 17:19:10.744955 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:19:10.749717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:19:10.749827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:19:10.749853 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-21 17:19:10.74984317 +0000 UTC m=+39.934623379 E0421 17:19:10.807540 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0421 17:19:10.807929 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:19:10.807992 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:19:10.808041 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0421 17:19:10.942334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:19:10.943343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-smvzr" condition "Approved" to 2026-04-21 17:19:10.943327138 +0000 UTC m=+40.128107307 I0421 17:19:10.974753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-smvzr" condition "Ready" to 2026-04-21 17:19:10.974739664 +0000 UTC m=+40.159519853 I0421 17:19:11.022575 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:19:11.022561058 +0000 UTC m=+40.207341237 I0421 17:19:11.066427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:19:11.066773 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:19:11.066764592 +0000 UTC m=+40.251544771 I0421 17:19:11.192269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:19:11.202118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:19:15.808553 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:19:15.808532102 +0000 UTC m=+44.993312301 I0421 17:20:34.704209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:20:34.704212 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-21 17:20:34.703753798 +0000 UTC m=+123.888534067 I0421 17:20:34.704256 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 17:20:34.70424599 +0000 UTC m=+123.889026169 I0421 17:20:34.781816 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-21 17:20:34.781796335 +0000 UTC m=+123.966576534 I0421 17:20:34.785957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:20:34.786050 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:20:34.786086 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-21 17:20:34.786078221 +0000 UTC m=+123.970858430 I0421 17:20:36.503492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gmmpb" condition "Approved" to 2026-04-21 17:20:36.503474024 +0000 UTC m=+125.688254223 I0421 17:20:36.504160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:20:36.824968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gmmpb" condition "Ready" to 2026-04-21 17:20:36.824949078 +0000 UTC m=+126.009729287 I0421 17:20:37.475581 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:20:37.475565487 +0000 UTC m=+126.660345666 I0421 17:20:37.561090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:42.585678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-134.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:27:42.585679 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-134.nip.io-tls" condition "Ready" to 2026-04-21 17:27:42.585631812 +0000 UTC m=+551.770412021 I0421 17:27:42.585733 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-134.nip.io-tls" condition "Issuing" to 2026-04-21 17:27:42.585723895 +0000 UTC m=+551.770504104 I0421 17:27:42.606465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-134.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-134.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:42.606616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-134.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:27:42.606883 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-134.nip.io-tls" condition "Issuing" to 2026-04-21 17:27:42.606869422 +0000 UTC m=+551.791649631 I0421 17:27:43.248812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-134.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-134.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:43.258547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-134.nip.io-tls-n4bvp" condition "Approved" to 2026-04-21 17:27:43.25853116 +0000 UTC m=+552.443311339 I0421 17:27:43.290536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-134.nip.io-tls-n4bvp" condition "Ready" to 2026-04-21 17:27:43.290525102 +0000 UTC m=+552.475305281 I0421 17:27:43.330953 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-134.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:27:43.330941225 +0000 UTC m=+552.515721404 I0421 17:27:43.389501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-134.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-134.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:27:43.389941 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-134.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:27:43.389933277 +0000 UTC m=+552.574713456 I0421 17:27:43.437708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-134.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-134.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:52.755056 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-21 17:28:52.75503054 +0000 UTC m=+621.939810739 I0421 17:28:52.755710 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:28:52.755740 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:28:52.755733106 +0000 UTC m=+621.940513315 E0421 17:28:52.800790 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:28:52.800860 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-21 17:28:52.800847954 +0000 UTC m=+621.985628153 E0421 17:28:52.801099 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0421 17:28:52.804715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:52.804885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:28:52.804952 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-21 17:28:52.804913566 +0000 UTC m=+621.989693765 E0421 17:28:52.837353 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0421 17:28:52.837430 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:28:52.837458 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0421 17:28:52.837478 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0421 17:28:52.910006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jf7f4" condition "Approved" to 2026-04-21 17:28:52.909987725 +0000 UTC m=+622.094767934 I0421 17:28:53.045215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jf7f4" condition "Ready" to 2026-04-21 17:28:53.045198225 +0000 UTC m=+622.229978434 I0421 17:28:53.117225 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:53.11721055 +0000 UTC m=+622.301990729 I0421 17:28:53.134822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:53.135171 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:53.135159194 +0000 UTC m=+622.319939403 I0421 17:28:53.183176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:28:57.838705 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:28:57.838688902 +0000 UTC m=+627.023469111 I0421 17:29:39.871636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:29:39.872000 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:29:39.871984893 +0000 UTC m=+669.056765152 I0421 17:29:39.872388 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-21 17:29:39.872373522 +0000 UTC m=+669.057153751 I0421 17:29:39.872946 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:29:39.872936464 +0000 UTC m=+669.057716663 I0421 17:29:39.873103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:29:39.873183 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-21 17:29:39.87317153 +0000 UTC m=+669.057951709 I0421 17:29:39.873231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:29:39.873257 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:29:39.873250571 +0000 UTC m=+669.058030770 I0421 17:29:39.873362 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-21 17:29:39.873356544 +0000 UTC m=+669.058136723 I0421 17:29:39.945766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:39.945842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:29:39.945870 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-21 17:29:39.945862199 +0000 UTC m=+669.130642378 I0421 17:29:39.946231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:39.946253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:29:39.946266 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-21 17:29:39.946263568 +0000 UTC m=+669.131043727 I0421 17:29:39.949950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:39.949997 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-21 17:29:39.949993103 +0000 UTC m=+669.134773272 I0421 17:29:40.293656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:40.353095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:40.354262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tv656" condition "Approved" to 2026-04-21 17:29:40.353865633 +0000 UTC m=+669.538645812 I0421 17:29:40.393045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wdxxx" condition "Approved" to 2026-04-21 17:29:40.393037137 +0000 UTC m=+669.577817306 I0421 17:29:40.394954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tv656" condition "Ready" to 2026-04-21 17:29:40.39494801 +0000 UTC m=+669.579728169 I0421 17:29:40.420467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wdxxx" condition "Ready" to 2026-04-21 17:29:40.420455105 +0000 UTC m=+669.605235274 I0421 17:29:40.445299 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:29:40.445285125 +0000 UTC m=+669.630065324 I0421 17:29:40.485294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:40.485808 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:29:40.485797859 +0000 UTC m=+669.670578048 I0421 17:29:40.595382 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:29:40.59535761 +0000 UTC m=+669.780137819 I0421 17:29:40.605621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:40.680093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:40.773156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7xvwp" condition "Approved" to 2026-04-21 17:29:40.773143161 +0000 UTC m=+669.957923340 I0421 17:29:40.805693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7xvwp" condition "Ready" to 2026-04-21 17:29:40.805680734 +0000 UTC m=+669.990460913 I0421 17:29:41.982758 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:29:41.982743435 +0000 UTC m=+671.167523614 I0421 17:29:42.216073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:42.216514 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:29:42.216503439 +0000 UTC m=+671.401283638 I0421 17:29:42.265606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0421 17:29:42.272290 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-96pqc\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0421 17:29:51.338300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:29:51.338349 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" condition "Issuing" to 2026-04-21 17:29:51.338337701 +0000 UTC m=+680.523117900 I0421 17:29:51.338447 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" condition "Ready" to 2026-04-21 17:29:51.338439543 +0000 UTC m=+680.523219712 I0421 17:29:51.366061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9nhms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:51.366169 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" condition "Ready" to 2026-04-21 17:29:51.366160309 +0000 UTC m=+680.550940488 I0421 17:29:51.482630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9nhms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:51.514648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9nhms-4hkpv" condition "Approved" to 2026-04-21 17:29:51.514628998 +0000 UTC m=+680.699409177 I0421 17:29:51.542665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9nhms-4hkpv" condition "Ready" to 2026-04-21 17:29:51.542643869 +0000 UTC m=+680.727424068 I0421 17:29:51.576317 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:29:51.576298599 +0000 UTC m=+680.761078778 I0421 17:29:51.601291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9nhms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:29:51.601591 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:29:51.601583559 +0000 UTC m=+680.786363728 I0421 17:29:51.623828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9nhms-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9nhms-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:30:33.949042 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-21 17:30:33.948367126 +0000 UTC m=+723.133147305 I0421 17:30:33.949046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:30:33.949187 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:30:33.949177755 +0000 UTC m=+723.133957934 I0421 17:30:33.967313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:30:33.967382 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:30:33.967417 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-21 17:30:33.967409375 +0000 UTC m=+723.152189554 I0421 17:30:34.131713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gjq5k" condition "Approved" to 2026-04-21 17:30:34.131692622 +0000 UTC m=+723.316472821 I0421 17:30:34.150330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gjq5k" condition "Ready" to 2026-04-21 17:30:34.150319572 +0000 UTC m=+723.335099741 I0421 17:30:34.177603 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:30:34.177587417 +0000 UTC m=+723.362367606 I0421 17:30:34.202162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:30:34.202514 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:30:34.202505619 +0000 UTC m=+723.387285798 I0421 17:30:34.219731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:30:34.220301 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:30:34.220288651 +0000 UTC m=+723.405068830 I0421 17:30:34.220465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:33:47.123618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:33:47.123649 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:33:47.12362989 +0000 UTC m=+916.308410079 I0421 17:33:47.123667 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-21 17:33:47.123656181 +0000 UTC m=+916.308436360 I0421 17:33:47.198281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:33:47.198385 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-21 17:33:47.198377377 +0000 UTC m=+916.383157566 I0421 17:33:47.414487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:33:47.501811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9t9lg" condition "Approved" to 2026-04-21 17:33:47.501798093 +0000 UTC m=+916.686578272 I0421 17:33:47.559846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9t9lg" condition "Ready" to 2026-04-21 17:33:47.559826332 +0000 UTC m=+916.744606531 I0421 17:33:47.782515 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:33:47.782486556 +0000 UTC m=+916.967266765 I0421 17:33:47.862032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:33:47.862489 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:33:47.862482061 +0000 UTC m=+917.047262240 I0421 17:33:47.936185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:18.031242 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-21 17:36:18.031186557 +0000 UTC m=+1067.215966786 I0421 17:36:18.031262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:36:18.031530 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-21 17:36:18.031482424 +0000 UTC m=+1067.216262623 I0421 17:36:18.051364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:18.051492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:36:18.051524 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-21 17:36:18.051515076 +0000 UTC m=+1067.236295285 I0421 17:36:18.303818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:18.318053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qkk5s" condition "Approved" to 2026-04-21 17:36:18.318039039 +0000 UTC m=+1067.502819218 I0421 17:36:18.344955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qkk5s" condition "Ready" to 2026-04-21 17:36:18.344941727 +0000 UTC m=+1067.529721906 I0421 17:36:18.378544 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:36:18.378529944 +0000 UTC m=+1067.563310113 I0421 17:36:18.404393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:18.404608 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:36:18.404602002 +0000 UTC m=+1067.589382171 I0421 17:36:18.430690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:36:18.435041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:37:32.064327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:37:32.064357 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-21 17:37:32.064337674 +0000 UTC m=+1141.249117883 I0421 17:37:32.064359 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-21 17:37:32.064351564 +0000 UTC m=+1141.249131723 I0421 17:37:32.084492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:37:32.084580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:37:32.084598 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-21 17:37:32.084590511 +0000 UTC m=+1141.269370690 I0421 17:37:32.373170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-55pmt" condition "Approved" to 2026-04-21 17:37:32.373153685 +0000 UTC m=+1141.557933894 I0421 17:37:32.405718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-55pmt" condition "Ready" to 2026-04-21 17:37:32.405691809 +0000 UTC m=+1141.590472008 I0421 17:37:32.441076 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:37:32.441063678 +0000 UTC m=+1141.625843847 I0421 17:37:32.466091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:37:32.466539 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:37:32.466530253 +0000 UTC m=+1141.651310432 I0421 17:37:32.486914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:37:32.487332 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:37:32.487322602 +0000 UTC m=+1141.672102781 I0421 17:41:14.197557 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-21 17:41:14.197500136 +0000 UTC m=+1363.382280345 I0421 17:41:14.197684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:41:14.197728 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-21 17:41:14.197717441 +0000 UTC m=+1363.382497650 I0421 17:41:14.213036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:41:14.213129 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-21 17:41:14.213121738 +0000 UTC m=+1363.397901917 I0421 17:41:14.477222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:41:14.507436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-n6n6b" condition "Approved" to 2026-04-21 17:41:14.507421612 +0000 UTC m=+1363.692201791 I0421 17:41:14.530041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-n6n6b" condition "Ready" to 2026-04-21 17:41:14.530022373 +0000 UTC m=+1363.714802582 I0421 17:41:14.565323 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:41:14.565300829 +0000 UTC m=+1363.750080998 I0421 17:41:14.585704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:41:14.586099 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:41:14.586091359 +0000 UTC m=+1363.770871538 I0421 17:41:14.607609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:09.828742 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-21 17:49:09.828706137 +0000 UTC m=+1839.013486336 I0421 17:49:09.828788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:49:09.828865 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-21 17:49:09.82885813 +0000 UTC m=+1839.013638299 I0421 17:49:09.845322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:09.845399 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-21 17:49:09.845390841 +0000 UTC m=+1839.030171030 I0421 17:49:10.321361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:10.354083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-q8hzl" condition "Approved" to 2026-04-21 17:49:10.354063951 +0000 UTC m=+1839.538844150 I0421 17:49:10.380600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-q8hzl" condition "Ready" to 2026-04-21 17:49:10.380585557 +0000 UTC m=+1839.565365726 I0421 17:49:10.415089 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:49:10.41507467 +0000 UTC m=+1839.599854879 I0421 17:49:10.441032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:49:10.494858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:42.818932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:50:42.819031 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-21 17:50:42.819021712 +0000 UTC m=+1932.003801891 I0421 17:50:42.819351 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-21 17:50:42.81932987 +0000 UTC m=+1932.004110039 I0421 17:50:42.847785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:42.848052 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-21 17:50:42.848037584 +0000 UTC m=+1932.032817763 I0421 17:50:43.002724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:43.037341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-r6k9g" condition "Approved" to 2026-04-21 17:50:43.03732385 +0000 UTC m=+1932.222104049 I0421 17:50:43.058779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-r6k9g" condition "Ready" to 2026-04-21 17:50:43.058766532 +0000 UTC m=+1932.243546691 I0421 17:50:43.096259 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:50:43.096244782 +0000 UTC m=+1932.281024961 I0421 17:50:43.119953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:43.121727 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:50:43.121718055 +0000 UTC m=+1932.306498224 I0421 17:50:43.150602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:50:43.150988 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:50:43.150978501 +0000 UTC m=+1932.335758680 I0421 17:51:59.529613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:51:59.529651 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-21 17:51:59.529627281 +0000 UTC m=+2008.714407460 I0421 17:51:59.529712 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-21 17:51:59.529700523 +0000 UTC m=+2008.714480732 I0421 17:51:59.551047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:51:59.551394 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-21 17:51:59.551382739 +0000 UTC m=+2008.736162918 I0421 17:51:59.574731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:51:59.606599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-2chxq" condition "Approved" to 2026-04-21 17:51:59.606578128 +0000 UTC m=+2008.791358327 I0421 17:51:59.631003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-2chxq" condition "Ready" to 2026-04-21 17:51:59.630990696 +0000 UTC m=+2008.815770875 I0421 17:51:59.669114 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:51:59.669091221 +0000 UTC m=+2008.853871400 I0421 17:51:59.689519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:00.331360 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-21 17:52:00.331338821 +0000 UTC m=+2009.516119000 I0421 17:52:00.331786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:52:00.331858 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-21 17:52:00.331854442 +0000 UTC m=+2009.516634621 I0421 17:52:00.349732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:00.349860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:52:00.349894 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-21 17:52:00.349886007 +0000 UTC m=+2009.534666186 I0421 17:52:00.405636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:00.421664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-9wqqn" condition "Approved" to 2026-04-21 17:52:00.421645687 +0000 UTC m=+2009.606425896 I0421 17:52:00.439375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-9wqqn" condition "Ready" to 2026-04-21 17:52:00.439361184 +0000 UTC m=+2009.624141353 I0421 17:52:00.469294 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:00.469280036 +0000 UTC m=+2009.654060215 I0421 17:52:00.496398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:00.496721 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:00.496710711 +0000 UTC m=+2009.681490890 I0421 17:52:00.519951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:00.520322 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:00.52031214 +0000 UTC m=+2009.705092319 I0421 17:52:01.088076 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-21 17:52:01.0880589 +0000 UTC m=+2010.272839079 I0421 17:52:01.763082 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-21 17:52:01.763065326 +0000 UTC m=+2010.947845535 I0421 17:52:48.755947 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-21 17:52:48.755931911 +0000 UTC m=+2057.940712090 I0421 17:52:48.756321 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:52:48.756348 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-21 17:52:48.756343401 +0000 UTC m=+2057.941123580 I0421 17:52:48.792438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:48.792531 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-21 17:52:48.792524702 +0000 UTC m=+2057.977304871 I0421 17:52:50.144056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:50.199678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8rkkh" condition "Approved" to 2026-04-21 17:52:50.199664066 +0000 UTC m=+2059.384444245 I0421 17:52:50.228951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8rkkh" condition "Ready" to 2026-04-21 17:52:50.228938984 +0000 UTC m=+2059.413719173 I0421 17:52:50.272966 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:50.272950671 +0000 UTC m=+2059.457730860 I0421 17:52:50.297013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:50.297953 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:50.297944102 +0000 UTC m=+2059.482724281 I0421 17:52:50.326946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:52:50.331092 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:52:50.330992043 +0000 UTC m=+2059.515772252 I0421 17:55:53.367169 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-21 17:55:53.367153046 +0000 UTC m=+2242.551933255 I0421 17:55:53.368176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:55:53.368246 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-21 17:55:53.368230261 +0000 UTC m=+2242.553010470 I0421 17:55:53.388480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:53.388780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:55:53.388814 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-21 17:55:53.388807252 +0000 UTC m=+2242.573587431 I0421 17:55:53.645743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:53.652845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-jnpx6" condition "Approved" to 2026-04-21 17:55:53.652828737 +0000 UTC m=+2242.837608936 I0421 17:55:53.680067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-jnpx6" condition "Ready" to 2026-04-21 17:55:53.680053928 +0000 UTC m=+2242.864834107 I0421 17:55:53.710029 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:53.71001253 +0000 UTC m=+2242.894792709 I0421 17:55:53.742285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:53.742639 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:53.742633681 +0000 UTC m=+2242.927413850 I0421 17:55:53.764090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:53.764580 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:53.764569114 +0000 UTC m=+2242.949349293 I0421 17:55:54.998600 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-21 17:55:54.998580744 +0000 UTC m=+2244.183360953 I0421 17:55:54.998768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:55:54.998840 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-21 17:55:54.998826139 +0000 UTC m=+2244.183606348 I0421 17:55:55.018336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:55.018447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 17:55:55.018473 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-21 17:55:55.01846682 +0000 UTC m=+2244.203246989 I0421 17:55:55.516018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 17:55:55.529081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-v2zx4" condition "Approved" to 2026-04-21 17:55:55.529066947 +0000 UTC m=+2244.713847146 I0421 17:55:55.555426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-v2zx4" condition "Ready" to 2026-04-21 17:55:55.555415858 +0000 UTC m=+2244.740196027 I0421 17:55:55.591289 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 17:55:55.591272822 +0000 UTC m=+2244.776053001 I0421 17:55:55.632207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:00:22.183384 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-21 18:00:22.18335132 +0000 UTC m=+2511.368131509 I0421 18:00:22.183370 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:00:22.184305 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-21 18:00:22.184292521 +0000 UTC m=+2511.369072690 I0421 18:00:22.211452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:00:22.211577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:00:22.211604 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-21 18:00:22.211594876 +0000 UTC m=+2511.396375065 I0421 18:00:22.456671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9t87d" condition "Approved" to 2026-04-21 18:00:22.456657403 +0000 UTC m=+2511.641437582 I0421 18:00:22.482539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9t87d" condition "Ready" to 2026-04-21 18:00:22.482522135 +0000 UTC m=+2511.667302304 I0421 18:00:22.516519 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:00:22.51650331 +0000 UTC m=+2511.701283479 I0421 18:00:22.545165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:24.956027 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nxqf4-api" condition "Ready" to 2026-04-21 18:01:24.955963329 +0000 UTC m=+2574.140743568 I0421 18:01:24.956027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-nxqf4-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:01:24.956090 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nxqf4-api" condition "Issuing" to 2026-04-21 18:01:24.956084062 +0000 UTC m=+2574.140864231 I0421 18:01:24.960198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-nxqf4-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:01:24.960286 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nxqf4-vnc" condition "Issuing" to 2026-04-21 18:01:24.960272426 +0000 UTC m=+2574.145052645 I0421 18:01:24.961606 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nxqf4-vnc" condition "Ready" to 2026-04-21 18:01:24.961596696 +0000 UTC m=+2574.146376875 I0421 18:01:24.978968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-nxqf4-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:24.979364 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nxqf4-vnc" condition "Ready" to 2026-04-21 18:01:24.979350845 +0000 UTC m=+2574.164131054 I0421 18:01:24.980912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-nxqf4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:24.981062 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nxqf4-api" condition "Ready" to 2026-04-21 18:01:24.981053964 +0000 UTC m=+2574.165834143 I0421 18:01:25.228024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-nxqf4-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:25.274217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-nxqf4-vnc-sgvds" condition "Approved" to 2026-04-21 18:01:25.274196313 +0000 UTC m=+2574.458976512 I0421 18:01:25.277200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-nxqf4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:25.296295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-nxqf4-vnc-sgvds" condition "Ready" to 2026-04-21 18:01:25.29627602 +0000 UTC m=+2574.481056209 I0421 18:01:25.320053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-nxqf4-api-8qwqb" condition "Approved" to 2026-04-21 18:01:25.320036135 +0000 UTC m=+2574.504816314 I0421 18:01:25.342939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-nxqf4-api-8qwqb" condition "Ready" to 2026-04-21 18:01:25.34291151 +0000 UTC m=+2574.527691719 I0421 18:01:25.348552 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nxqf4-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:01:25.348529997 +0000 UTC m=+2574.533310176 I0421 18:01:25.366944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-nxqf4-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:25.367390 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nxqf4-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:01:25.367378711 +0000 UTC m=+2574.552158890 I0421 18:01:25.376416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-nxqf4-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:25.382724 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nxqf4-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:01:25.382651555 +0000 UTC m=+2574.567431734 I0421 18:01:25.395620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-nxqf4-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:25.410255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-nxqf4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:25.410930 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nxqf4-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:01:25.410920321 +0000 UTC m=+2574.595700520 I0421 18:01:25.421340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-nxqf4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:01:25.446652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-nxqf4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nxqf4-api\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:03:41.576294 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-21 18:03:41.576280383 +0000 UTC m=+2710.761060552 I0421 18:03:41.576383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:03:41.576401 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-21 18:03:41.576396386 +0000 UTC m=+2710.761176565 I0421 18:03:41.598958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:03:41.599331 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-21 18:03:41.599321092 +0000 UTC m=+2710.784101301 I0421 18:03:42.001232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:03:42.059375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-86g7s" condition "Approved" to 2026-04-21 18:03:42.059357218 +0000 UTC m=+2711.244137427 I0421 18:03:42.108244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-86g7s" condition "Ready" to 2026-04-21 18:03:42.108231209 +0000 UTC m=+2711.293011398 I0421 18:03:42.146662 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:03:42.146617003 +0000 UTC m=+2711.331397192 I0421 18:03:42.177710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:03:42.178238 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:03:42.178228785 +0000 UTC m=+2711.363008964 I0421 18:03:42.209799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:03:42.227458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:39.121537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:07:39.121577 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-21 18:07:39.121570184 +0000 UTC m=+2948.306350353 I0421 18:07:39.121856 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-21 18:07:39.12184343 +0000 UTC m=+2948.306623609 I0421 18:07:39.141205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:39.141326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:07:39.141359 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-21 18:07:39.141349909 +0000 UTC m=+2948.326130118 I0421 18:07:39.389367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:39.403966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-8dvl8" condition "Approved" to 2026-04-21 18:07:39.403952973 +0000 UTC m=+2948.588733152 I0421 18:07:39.448708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-8dvl8" condition "Ready" to 2026-04-21 18:07:39.448698789 +0000 UTC m=+2948.633478948 I0421 18:07:39.504724 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:39.504712229 +0000 UTC m=+2948.689492398 I0421 18:07:39.528446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:39.528865 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:39.528857891 +0000 UTC m=+2948.713638070 I0421 18:07:39.539091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:39.551857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:40.794294 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-21 18:07:40.794279154 +0000 UTC m=+2949.979059343 I0421 18:07:40.794384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:07:40.794422 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-21 18:07:40.794415157 +0000 UTC m=+2949.979195326 I0421 18:07:40.814652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:40.814971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:07:40.815003 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-21 18:07:40.814996929 +0000 UTC m=+2949.999777098 I0421 18:07:40.999927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:07:41.007312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-mmrdj" condition "Approved" to 2026-04-21 18:07:41.007298233 +0000 UTC m=+2950.192078412 I0421 18:07:41.034901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-mmrdj" condition "Ready" to 2026-04-21 18:07:41.034885204 +0000 UTC m=+2950.219665383 I0421 18:07:41.074861 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:07:41.074843302 +0000 UTC m=+2950.259623471 I0421 18:07:41.203766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:02.066358 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-21 18:13:02.066204605 +0000 UTC m=+3271.250984774 I0421 18:13:02.067585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:02.067661 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-21 18:13:02.067646527 +0000 UTC m=+3271.252426726 E0421 18:13:02.230436 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:13:02.230540 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-21 18:13:02.230527499 +0000 UTC m=+3271.415307708 I0421 18:13:02.230577 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:13:02.257671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:02.257805 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-21 18:13:02.257794872 +0000 UTC m=+3271.442575061 E0421 18:13:02.622535 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0421 18:13:02.622708 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:13:02.622758 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0421 18:13:02.622827 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0421 18:13:02.801888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:03.213912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-fmfqg" condition "Approved" to 2026-04-21 18:13:03.213887009 +0000 UTC m=+3272.398667188 I0421 18:13:03.215414 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-21 18:13:03.215405154 +0000 UTC m=+3272.400185333 I0421 18:13:03.215548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:03.215602 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-21 18:13:03.215589478 +0000 UTC m=+3272.400369647 I0421 18:13:03.486890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-fmfqg" condition "Ready" to 2026-04-21 18:13:03.486876278 +0000 UTC m=+3272.671656487 I0421 18:13:03.492293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:03.492579 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-21 18:13:03.492539725 +0000 UTC m=+3272.677319954 E0421 18:13:03.685145 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:13:03.685210 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-21 18:13:03.685196857 +0000 UTC m=+3272.869977066 I0421 18:13:03.685292 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:13:04.031467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" E0421 18:13:04.196305 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0421 18:13:04.196441 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0421 18:13:04.196480 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0421 18:13:04.196523 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0421 18:13:04.249386 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:04.249372752 +0000 UTC m=+3273.434152911 I0421 18:13:04.250887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-6lnb6" condition "Approved" to 2026-04-21 18:13:04.250876286 +0000 UTC m=+3273.435656465 I0421 18:13:04.355660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-6lnb6" condition "Ready" to 2026-04-21 18:13:04.355643861 +0000 UTC m=+3273.540424040 I0421 18:13:04.356785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:04.357988 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:04.357977314 +0000 UTC m=+3273.542757473 I0421 18:13:04.410370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:04.417365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:04.418576 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:04.418563096 +0000 UTC m=+3273.603343265 I0421 18:13:04.507156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:04.507480 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:04.507472405 +0000 UTC m=+3273.692252584 I0421 18:13:04.526668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:04.526719 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-21 18:13:04.526711488 +0000 UTC m=+3273.711491667 I0421 18:13:04.526775 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-21 18:13:04.526752529 +0000 UTC m=+3273.711532738 I0421 18:13:04.539927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:04.619780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:04.620006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:13:04.620029 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-21 18:13:04.620021155 +0000 UTC m=+3273.804801344 I0421 18:13:04.887721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:04.962012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-d744k" condition "Approved" to 2026-04-21 18:13:04.961995834 +0000 UTC m=+3274.146776043 I0421 18:13:05.139304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-d744k" condition "Ready" to 2026-04-21 18:13:05.139283921 +0000 UTC m=+3274.324064120 I0421 18:13:07.623270 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:07.623256501 +0000 UTC m=+3276.808036710 I0421 18:13:07.636357 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-d744k" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:07.636338106 +0000 UTC m=+3276.821118285 I0421 18:13:07.669683 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:07.669667125 +0000 UTC m=+3276.854447294 I0421 18:13:07.696882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:07.697300 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:07.697290446 +0000 UTC m=+3276.882070625 I0421 18:13:07.710964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:07.721088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:13:09.197666 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:13:09.19764475 +0000 UTC m=+3278.382424949 I0421 18:15:53.443181 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-21 18:15:53.443150676 +0000 UTC m=+3442.627930855 I0421 18:15:53.443250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:15:53.443305 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-21 18:15:53.443298169 +0000 UTC m=+3442.628078338 I0421 18:15:53.462704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:53.462856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:15:53.462889 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-21 18:15:53.462880259 +0000 UTC m=+3442.647660458 I0421 18:15:53.606769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:53.617768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-l2qtn" condition "Approved" to 2026-04-21 18:15:53.617754011 +0000 UTC m=+3442.802534190 I0421 18:15:53.643855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-l2qtn" condition "Ready" to 2026-04-21 18:15:53.643840678 +0000 UTC m=+3442.828620857 I0421 18:15:53.688523 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:15:53.688509662 +0000 UTC m=+3442.873289841 I0421 18:15:53.714302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:15:53.770074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:41.121871 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-21 18:16:41.121850252 +0000 UTC m=+3490.306630451 I0421 18:16:41.145838 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-21 18:16:41.145816572 +0000 UTC m=+3490.330596771 I0421 18:16:41.145868 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:41.145902 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-21 18:16:41.145893504 +0000 UTC m=+3490.330673673 I0421 18:16:41.165172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:41.165268 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-21 18:16:41.165260089 +0000 UTC m=+3490.350040258 E0421 18:16:41.188189 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0421 18:16:41.241303 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-21 18:16:41.241288684 +0000 UTC m=+3490.426068853 I0421 18:16:41.262784 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-21 18:16:41.262765318 +0000 UTC m=+3490.447545497 I0421 18:16:41.263094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:41.263366 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-21 18:16:41.263165677 +0000 UTC m=+3490.447945856 I0421 18:16:41.283054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:41.283176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:41.283240 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-21 18:16:41.283229578 +0000 UTC m=+3490.468009767 E0421 18:16:41.386597 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0421 18:16:41.559204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9qlm4" condition "Approved" to 2026-04-21 18:16:41.559179196 +0000 UTC m=+3490.743959375 I0421 18:16:41.591239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9qlm4" condition "Ready" to 2026-04-21 18:16:41.591228972 +0000 UTC m=+3490.776009141 I0421 18:16:41.626590 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:41.626579074 +0000 UTC m=+3490.811359253 I0421 18:16:41.660436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:41.664309 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:41.66429489 +0000 UTC m=+3490.849075069 I0421 18:16:41.696770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:41.697363 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:41.697355019 +0000 UTC m=+3490.882135198 I0421 18:16:42.208501 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-21 18:16:42.208482259 +0000 UTC m=+3491.393262438 I0421 18:16:42.234275 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-21 18:16:42.234251751 +0000 UTC m=+3491.419031960 I0421 18:16:42.234345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:42.234425 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-21 18:16:42.234404474 +0000 UTC m=+3491.419184653 I0421 18:16:42.272497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:42.272635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:42.272671 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-21 18:16:42.272662022 +0000 UTC m=+3491.457442201 I0421 18:16:42.619017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2qd5k" condition "Approved" to 2026-04-21 18:16:42.619000257 +0000 UTC m=+3491.803780426 I0421 18:16:42.640320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2qd5k" condition "Ready" to 2026-04-21 18:16:42.640305527 +0000 UTC m=+3491.825085706 I0421 18:16:42.695978 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:42.695951605 +0000 UTC m=+3491.880731804 I0421 18:16:42.723436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:42.748989 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-21 18:16:42.748969792 +0000 UTC m=+3491.933749971 I0421 18:16:42.777913 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-21 18:16:42.777893587 +0000 UTC m=+3491.962673766 I0421 18:16:42.778223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:42.778270 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-21 18:16:42.778260955 +0000 UTC m=+3491.963041124 I0421 18:16:42.817321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:42.817559 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-21 18:16:42.817540707 +0000 UTC m=+3492.002320896 I0421 18:16:43.079126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:43.144147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lqr8m" condition "Approved" to 2026-04-21 18:16:43.144134078 +0000 UTC m=+3492.328914247 I0421 18:16:43.170971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lqr8m" condition "Ready" to 2026-04-21 18:16:43.170952154 +0000 UTC m=+3492.355732353 I0421 18:16:43.221592 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:43.221568446 +0000 UTC m=+3492.406348615 I0421 18:16:43.250226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:43.250589 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:43.250582662 +0000 UTC m=+3492.435362831 I0421 18:16:43.282928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:43.325108 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-21 18:16:43.325092414 +0000 UTC m=+3492.509872593 I0421 18:16:43.349271 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-21 18:16:43.349252499 +0000 UTC m=+3492.534032718 I0421 18:16:43.349595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:43.349621 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-21 18:16:43.349617557 +0000 UTC m=+3492.534397736 I0421 18:16:43.382889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:43.383000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:16:43.383023 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-21 18:16:43.383017325 +0000 UTC m=+3492.567797514 I0421 18:16:43.560738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-xbwjr" condition "Approved" to 2026-04-21 18:16:43.560721935 +0000 UTC m=+3492.745502104 I0421 18:16:43.600135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-xbwjr" condition "Ready" to 2026-04-21 18:16:43.60011994 +0000 UTC m=+3492.784900119 I0421 18:16:44.193937 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:44.193920098 +0000 UTC m=+3493.378700277 I0421 18:16:44.216414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:44.216832 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:16:44.216822824 +0000 UTC m=+3493.401602993 I0421 18:16:44.434957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:16:44.485867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:54.924888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:20:54.924976 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-21 18:20:54.92496518 +0000 UTC m=+3744.109745389 I0421 18:20:54.924892 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-21 18:20:54.924871117 +0000 UTC m=+3744.109651336 I0421 18:20:55.240832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:55.240932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:20:55.240955 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-21 18:20:55.240947827 +0000 UTC m=+3744.425727996 I0421 18:20:56.870209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-rvkzj" condition "Approved" to 2026-04-21 18:20:56.870183876 +0000 UTC m=+3746.054964085 I0421 18:20:57.416229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-rvkzj" condition "Ready" to 2026-04-21 18:20:57.416218326 +0000 UTC m=+3746.600998495 I0421 18:20:57.760517 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:57.760506433 +0000 UTC m=+3746.945286612 I0421 18:20:58.153436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:58.153852 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:58.153845218 +0000 UTC m=+3747.338625387 I0421 18:20:58.621254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:58.804954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:59.502120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0421 18:20:59.502157 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-21 18:20:59.502151414 +0000 UTC m=+3748.686931583 I0421 18:20:59.503014 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-21 18:20:59.501596102 +0000 UTC m=+3748.686376281 I0421 18:20:59.533686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:59.533845 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-21 18:20:59.533833422 +0000 UTC m=+3748.718613591 I0421 18:20:59.697402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:59.750200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-7dk54" condition "Approved" to 2026-04-21 18:20:59.750173611 +0000 UTC m=+3748.934953780 I0421 18:20:59.788391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-7dk54" condition "Ready" to 2026-04-21 18:20:59.788379778 +0000 UTC m=+3748.973159937 I0421 18:20:59.831786 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:59.831769325 +0000 UTC m=+3749.016549494 I0421 18:20:59.859163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:59.859656 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-21 18:20:59.859644895 +0000 UTC m=+3749.044425084 I0421 18:20:59.873623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0421 18:20:59.901950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"