I0519 17:58:54.052746 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0519 17:58:54.052857 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0519 17:58:54.053062 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0519 17:58:54.056366 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0519 17:58:54.056875 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0519 17:58:54.056962 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0519 17:58:54.056960 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0519 17:58:54.059584 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0519 17:58:54.077854 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0519 17:58:54.081106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0519 17:58:54.087274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0519 17:58:54.090549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0519 17:58:54.092933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0519 17:58:54.095272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0519 17:58:54.097566 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0519 17:58:54.097643 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0519 17:58:54.100124 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0519 17:58:54.105780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0519 17:58:54.109868 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0519 17:58:54.112457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0519 17:58:54.116612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0519 17:58:54.119378 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0519 17:58:54.122175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0519 17:58:54.124754 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0519 17:58:54.124780 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0519 17:58:54.124913 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0519 17:58:54.127173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0519 17:58:54.128753 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0519 17:58:54.128769 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0519 17:58:54.128806 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0519 17:58:54.132422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0519 17:58:54.134949 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0519 17:58:54.135167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0519 17:58:54.137788 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.138022 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.138051 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.156824 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.172373 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.206259 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.226390 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.228206 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.242159 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:58:54.264611 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0519 17:59:10.981762 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-19 17:59:10.981733196 +0000 UTC m=+16.964089228 I0519 17:59:11.804163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 17:59:11.804210 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-19 17:59:11.804202946 +0000 UTC m=+17.786558978 I0519 17:59:11.804251 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-19 17:59:11.804229287 +0000 UTC m=+17.786585319 E0519 17:59:11.886843 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 17:59:11.886973 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-19 17:59:11.886959406 +0000 UTC m=+17.869315468 E0519 17:59:11.887018 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 17:59:11.891345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:11.891544 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-19 17:59:11.891509708 +0000 UTC m=+17.873865770 E0519 17:59:12.741537 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0519 17:59:12.741775 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 17:59:12.741846 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 17:59:12.741928 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0519 17:59:12.865900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:13.089723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6c2bg" condition "Approved" to 2026-05-19 17:59:13.089704901 +0000 UTC m=+19.072061023 I0519 17:59:13.243249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6c2bg" condition "Ready" to 2026-05-19 17:59:13.243232861 +0000 UTC m=+19.225588893 I0519 17:59:13.571397 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:59:13.571376104 +0000 UTC m=+19.553732156 I0519 17:59:13.991398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:13.991714 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:59:13.99170774 +0000 UTC m=+19.974063772 I0519 17:59:14.244071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:17.742190 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:59:17.742177282 +0000 UTC m=+23.724533334 I0519 17:59:41.913429 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-19 17:59:41.913411713 +0000 UTC m=+47.895767755 I0519 17:59:41.913748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 17:59:41.913860 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-19 17:59:41.913852003 +0000 UTC m=+47.896208045 I0519 17:59:41.921613 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-19 17:59:41.921601758 +0000 UTC m=+47.903957790 I0519 17:59:41.937589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:41.937671 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-19 17:59:41.937664429 +0000 UTC m=+47.920020451 I0519 17:59:42.212263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:42.248761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2g7wx" condition "Approved" to 2026-05-19 17:59:42.24873396 +0000 UTC m=+48.231090022 I0519 17:59:42.279082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2g7wx" condition "Ready" to 2026-05-19 17:59:42.279066623 +0000 UTC m=+48.261422685 I0519 17:59:42.305874 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:59:42.305858935 +0000 UTC m=+48.288214997 I0519 17:59:42.325098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:42.325587 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 17:59:42.325578339 +0000 UTC m=+48.307934391 I0519 17:59:42.333427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 17:59:42.342988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:18.812152 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-05-19 18:05:18.812112168 +0000 UTC m=+384.794468230 I0519 18:05:18.812753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:05:18.812790 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-05-19 18:05:18.812782343 +0000 UTC m=+384.795138415 I0519 18:05:18.838295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:18.838373 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-05-19 18:05:18.838364375 +0000 UTC m=+384.820720437 I0519 18:05:18.990239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:19.026010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-gzffw" condition "Approved" to 2026-05-19 18:05:19.025990038 +0000 UTC m=+385.008346080 I0519 18:05:19.059222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-gzffw" condition "Ready" to 2026-05-19 18:05:19.059203892 +0000 UTC m=+385.041559924 I0519 18:05:19.093083 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:05:19.093070442 +0000 UTC m=+385.075426474 I0519 18:05:19.112542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:19.113004 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:05:19.112994305 +0000 UTC m=+385.095350367 I0519 18:05:19.129255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:05:19.129605 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:05:19.129595411 +0000 UTC m=+385.111951473 I0519 18:06:25.801485 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-19 18:06:25.801472527 +0000 UTC m=+451.783828559 I0519 18:06:25.801606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:06:25.801682 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 18:06:25.801644921 +0000 UTC m=+451.784000983 E0519 18:06:25.814136 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 18:06:25.814314 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-19 18:06:25.814297278 +0000 UTC m=+451.796653330 E0519 18:06:25.814392 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0519 18:06:25.816620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:06:25.816698 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:06:25.816717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-19 18:06:25.816710484 +0000 UTC m=+451.799066516 E0519 18:06:25.824998 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0519 18:06:25.825083 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 18:06:25.825109 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0519 18:06:25.825138 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0519 18:06:25.860771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kdqgk" condition "Approved" to 2026-05-19 18:06:25.860753562 +0000 UTC m=+451.843109594 I0519 18:06:25.892298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kdqgk" condition "Ready" to 2026-05-19 18:06:25.892282018 +0000 UTC m=+451.874638070 I0519 18:06:25.918504 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:06:25.918489702 +0000 UTC m=+451.900845734 I0519 18:06:25.937908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:06:25.938378 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:06:25.938369433 +0000 UTC m=+451.920725495 I0519 18:06:25.955869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:06:30.825810 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:06:30.825800123 +0000 UTC m=+456.808156145 I0519 18:07:09.387230 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-19 18:07:09.387203084 +0000 UTC m=+495.369559136 I0519 18:07:09.387838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:07:09.387907 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-19 18:07:09.3878955 +0000 UTC m=+495.370251552 I0519 18:07:09.387919 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 18:07:09.38791403 +0000 UTC m=+495.370270052 I0519 18:07:09.388508 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 18:07:09.388503223 +0000 UTC m=+495.370859245 I0519 18:07:09.390986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:07:09.391129 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-19 18:07:09.391065091 +0000 UTC m=+495.373421123 I0519 18:07:09.391428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:07:09.391473 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-19 18:07:09.39145611 +0000 UTC m=+495.373812132 I0519 18:07:09.450171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:09.450288 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-19 18:07:09.450279275 +0000 UTC m=+495.432635297 I0519 18:07:09.468525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:09.468709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:09.468857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:07:09.468904 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-19 18:07:09.468893047 +0000 UTC m=+495.451249089 I0519 18:07:09.468881 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-19 18:07:09.468866797 +0000 UTC m=+495.451222899 I0519 18:07:09.600518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:09.633881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dcg82" condition "Approved" to 2026-05-19 18:07:09.63386257 +0000 UTC m=+495.616218602 I0519 18:07:09.672325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dcg82" condition "Ready" to 2026-05-19 18:07:09.672252461 +0000 UTC m=+495.654608493 I0519 18:07:09.685866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:09.734773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vw2rs" condition "Approved" to 2026-05-19 18:07:09.734756939 +0000 UTC m=+495.717112961 I0519 18:07:09.742454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:07:09.742492 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-19 18:07:09.742484685 +0000 UTC m=+495.724840707 I0519 18:07:09.753208 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:07:09.753197548 +0000 UTC m=+495.735553570 I0519 18:07:09.758674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vw2rs" condition "Ready" to 2026-05-19 18:07:09.758657442 +0000 UTC m=+495.741013504 I0519 18:07:09.770451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:09.770742 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:07:09.770733915 +0000 UTC m=+495.753089937 I0519 18:07:09.783327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:09.797889 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:07:09.797877562 +0000 UTC m=+495.780233594 I0519 18:07:09.916304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:09.916665 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:07:09.916660806 +0000 UTC m=+495.899016828 E0519 18:07:10.013210 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-4jkd9\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0519 18:07:10.070897 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rrdpk" condition "Approved" to 2026-05-19 18:07:10.070877394 +0000 UTC m=+496.053233416 I0519 18:07:10.426191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rrdpk" condition "Ready" to 2026-05-19 18:07:10.426178015 +0000 UTC m=+496.408534047 I0519 18:07:10.673053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:11.019487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:11.072427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tzb84" condition "Approved" to 2026-05-19 18:07:11.072404086 +0000 UTC m=+497.054760138 I0519 18:07:11.216889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:11.476491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tzb84" condition "Ready" to 2026-05-19 18:07:11.476477223 +0000 UTC m=+497.458833245 I0519 18:07:11.718411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:12.346073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:12.347304 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:07:12.34729477 +0000 UTC m=+498.329650792 I0519 18:07:12.358433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:12.393915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:12.394523 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:07:12.39450706 +0000 UTC m=+498.376863132 I0519 18:07:12.638089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:12.674623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:39.327106 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" condition "Ready" to 2026-05-19 18:07:39.327083256 +0000 UTC m=+525.309439318 I0519 18:07:39.327142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:07:39.327199 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" condition "Issuing" to 2026-05-19 18:07:39.32719247 +0000 UTC m=+525.309548502 I0519 18:07:39.346786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-47fhg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:39.346870 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" condition "Ready" to 2026-05-19 18:07:39.346859136 +0000 UTC m=+525.329215178 I0519 18:07:39.776466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-47fhg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:39.833666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-47fhg-rf9hr" condition "Approved" to 2026-05-19 18:07:39.833646838 +0000 UTC m=+525.816002890 I0519 18:07:39.866812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-47fhg-rf9hr" condition "Ready" to 2026-05-19 18:07:39.86679595 +0000 UTC m=+525.849152002 I0519 18:07:40.904604 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:07:40.904586756 +0000 UTC m=+526.886942778 I0519 18:07:41.609510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-47fhg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:07:41.609870 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:07:41.609863686 +0000 UTC m=+527.592219718 I0519 18:07:41.670120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-47fhg-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-47fhg-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:08:20.492394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:08:20.492453 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-19 18:08:20.492440639 +0000 UTC m=+566.474796691 I0519 18:08:20.492392 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-19 18:08:20.492340457 +0000 UTC m=+566.474696519 I0519 18:08:20.509160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:08:20.509258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:08:20.509280 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-19 18:08:20.509273612 +0000 UTC m=+566.491629644 I0519 18:08:20.620027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:08:20.638009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zm9hz" condition "Approved" to 2026-05-19 18:08:20.637993281 +0000 UTC m=+566.620349303 I0519 18:08:20.670956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zm9hz" condition "Ready" to 2026-05-19 18:08:20.670944581 +0000 UTC m=+566.653300613 I0519 18:08:20.705736 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:08:20.705723352 +0000 UTC m=+566.688079384 I0519 18:08:20.737731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:08:20.820763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:11:47.021323 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 18:11:47.021288874 +0000 UTC m=+773.003644906 I0519 18:11:47.021629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:11:47.021705 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-19 18:11:47.021697323 +0000 UTC m=+773.004053355 I0519 18:11:47.052805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:11:47.052874 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-19 18:11:47.052867759 +0000 UTC m=+773.035223781 I0519 18:11:47.532239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:11:47.600432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hp79l" condition "Approved" to 2026-05-19 18:11:47.60042081 +0000 UTC m=+773.582776852 I0519 18:11:47.671756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hp79l" condition "Ready" to 2026-05-19 18:11:47.671745187 +0000 UTC m=+773.654101219 I0519 18:11:47.740704 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:11:47.740686088 +0000 UTC m=+773.723042160 I0519 18:11:47.864453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:14:09.997943 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-19 18:14:09.997869118 +0000 UTC m=+915.980225220 I0519 18:14:09.998064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:14:09.998220 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-19 18:14:09.998159144 +0000 UTC m=+915.980515236 I0519 18:14:10.014938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:14:10.015111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:14:10.015166 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-19 18:14:10.015156664 +0000 UTC m=+915.997512706 I0519 18:14:10.185851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:14:10.197783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rglzc" condition "Approved" to 2026-05-19 18:14:10.197768412 +0000 UTC m=+916.180124444 I0519 18:14:10.220040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rglzc" condition "Ready" to 2026-05-19 18:14:10.220029542 +0000 UTC m=+916.202385564 I0519 18:14:10.243315 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:14:10.243302384 +0000 UTC m=+916.225658416 I0519 18:14:10.266945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:14:10.334399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:15:17.616840 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-19 18:15:17.616805999 +0000 UTC m=+983.599162011 I0519 18:15:17.617197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:15:17.617260 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-19 18:15:17.617245978 +0000 UTC m=+983.599602050 I0519 18:15:17.636421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:15:17.636501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:15:17.636516 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-19 18:15:17.636511468 +0000 UTC m=+983.618867490 I0519 18:15:17.909513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-m5gkb" condition "Approved" to 2026-05-19 18:15:17.909498962 +0000 UTC m=+983.891855014 I0519 18:15:17.909703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:15:17.935132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-m5gkb" condition "Ready" to 2026-05-19 18:15:17.935119125 +0000 UTC m=+983.917475177 I0519 18:15:17.973144 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:15:17.973131142 +0000 UTC m=+983.955487164 I0519 18:15:18.025253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:15:18.105988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:18:35.723085 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-19 18:18:35.722898421 +0000 UTC m=+1181.705254483 I0519 18:18:35.723329 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:18:35.723387 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-19 18:18:35.723379812 +0000 UTC m=+1181.705735834 I0519 18:18:35.750623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:18:35.751005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:18:35.751033 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-19 18:18:35.751024622 +0000 UTC m=+1181.733380674 I0519 18:18:36.175192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wm7gr" condition "Approved" to 2026-05-19 18:18:36.175180954 +0000 UTC m=+1182.157536996 I0519 18:18:36.208550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wm7gr" condition "Ready" to 2026-05-19 18:18:36.208537914 +0000 UTC m=+1182.190893976 I0519 18:18:36.244881 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:18:36.244865793 +0000 UTC m=+1182.227221815 I0519 18:18:36.341635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:18:36.341944 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:18:36.341936147 +0000 UTC m=+1182.324292189 I0519 18:18:36.366900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:18:36.376135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:25:58.582092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:25:58.582241 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-19 18:25:58.582224567 +0000 UTC m=+1624.564580629 I0519 18:25:58.582300 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-19 18:25:58.582275648 +0000 UTC m=+1624.564631700 I0519 18:25:59.072266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:25:59.072363 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-19 18:25:59.072355434 +0000 UTC m=+1625.054711466 I0519 18:26:02.197204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:26:06.321041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7sflh" condition "Approved" to 2026-05-19 18:26:06.321030628 +0000 UTC m=+1632.303386660 I0519 18:26:07.078869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-7sflh" condition "Ready" to 2026-05-19 18:26:07.078843753 +0000 UTC m=+1633.061199805 I0519 18:26:08.907165 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:26:08.907146444 +0000 UTC m=+1634.889502506 I0519 18:26:09.442257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:26:09.442640 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:26:09.442632801 +0000 UTC m=+1635.424988833 I0519 18:26:13.206756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:26:13.207532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:28:27.146587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:28:27.146607 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-19 18:28:27.146590664 +0000 UTC m=+1773.128946716 I0519 18:28:27.146663 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-19 18:28:27.146653476 +0000 UTC m=+1773.129009558 I0519 18:28:27.189242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:28:27.189366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:28:27.189400 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-19 18:28:27.189391985 +0000 UTC m=+1773.171748017 I0519 18:28:28.261138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-zxx5h" condition "Approved" to 2026-05-19 18:28:28.261123699 +0000 UTC m=+1774.243479751 I0519 18:28:28.503573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-zxx5h" condition "Ready" to 2026-05-19 18:28:28.503562603 +0000 UTC m=+1774.485918625 I0519 18:28:29.307877 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:28:29.307861834 +0000 UTC m=+1775.290217866 I0519 18:28:29.849434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:28:29.849863 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:28:29.84985652 +0000 UTC m=+1775.832212552 I0519 18:28:31.250314 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:28:31.250301266 +0000 UTC m=+1777.232657298 I0519 18:28:32.286184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:28:32.286621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:28:32.324453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:01.655186 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-19 18:30:01.655174186 +0000 UTC m=+1867.637530218 I0519 18:30:01.655174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:30:01.655609 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-19 18:30:01.655561145 +0000 UTC m=+1867.637917237 I0519 18:30:01.704402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:01.704530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:30:01.704569 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-19 18:30:01.704560109 +0000 UTC m=+1867.686916171 I0519 18:30:01.994216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:02.004313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-rm2zn" condition "Approved" to 2026-05-19 18:30:02.004304727 +0000 UTC m=+1867.986660759 I0519 18:30:02.171449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-rm2zn" condition "Ready" to 2026-05-19 18:30:02.171440639 +0000 UTC m=+1868.153796671 I0519 18:30:02.213367 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:30:02.213350412 +0000 UTC m=+1868.195706434 I0519 18:30:02.245032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:02.485341 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-19 18:30:02.485321238 +0000 UTC m=+1868.467677290 I0519 18:30:02.485363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:30:02.485525 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-19 18:30:02.485515032 +0000 UTC m=+1868.467871084 I0519 18:30:02.525795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:02.525916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:30:02.526059 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-19 18:30:02.526048904 +0000 UTC m=+1868.508404966 I0519 18:30:02.619707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:02.623505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-7n42l" condition "Approved" to 2026-05-19 18:30:02.6234911 +0000 UTC m=+1868.605847132 I0519 18:30:02.687605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-7n42l" condition "Ready" to 2026-05-19 18:30:02.687590128 +0000 UTC m=+1868.669946180 I0519 18:30:03.077797 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:30:03.077757542 +0000 UTC m=+1869.060113564 I0519 18:30:03.417123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:03.757545 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-19 18:30:03.757527583 +0000 UTC m=+1869.739883645 I0519 18:30:04.274067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:04.444481 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-19 18:30:04.444442617 +0000 UTC m=+1870.426798679 I0519 18:30:59.332186 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-19 18:30:59.332168825 +0000 UTC m=+1925.314524847 I0519 18:30:59.333116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:30:59.333182 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-19 18:30:59.333169968 +0000 UTC m=+1925.315526020 I0519 18:30:59.382703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:30:59.382780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:30:59.382798 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-19 18:30:59.382792646 +0000 UTC m=+1925.365148658 I0519 18:31:03.021738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:31:03.074950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-smpmz" condition "Approved" to 2026-05-19 18:31:03.074929823 +0000 UTC m=+1929.057285885 I0519 18:31:03.103113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-smpmz" condition "Ready" to 2026-05-19 18:31:03.103100614 +0000 UTC m=+1929.085456656 I0519 18:31:03.135807 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:31:03.135793828 +0000 UTC m=+1929.118149860 I0519 18:31:03.167548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:31:03.168120 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:31:03.168113964 +0000 UTC m=+1929.150469996 I0519 18:31:03.177881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:31:03.185883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:31:03.186681 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:31:03.186672085 +0000 UTC m=+1929.169028117 I0519 18:33:50.584507 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-19 18:33:50.584466735 +0000 UTC m=+2096.566822767 I0519 18:33:50.585257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:33:50.585384 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-19 18:33:50.585377925 +0000 UTC m=+2096.567733977 I0519 18:33:50.828698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:33:50.828851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:33:50.828921 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-19 18:33:50.828909524 +0000 UTC m=+2096.811265586 I0519 18:33:52.105034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-5fh7w" condition "Approved" to 2026-05-19 18:33:52.105019559 +0000 UTC m=+2098.087375611 I0519 18:33:52.105942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:33:52.184568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-5fh7w" condition "Ready" to 2026-05-19 18:33:52.184549048 +0000 UTC m=+2098.166905130 I0519 18:33:52.232037 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:33:52.232021908 +0000 UTC m=+2098.214377930 I0519 18:33:52.285908 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-19 18:33:52.285891693 +0000 UTC m=+2098.268247725 I0519 18:33:52.286507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:33:52.286564 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-19 18:33:52.286553678 +0000 UTC m=+2098.268909740 I0519 18:33:52.287597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:33:52.288002 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:33:52.287995241 +0000 UTC m=+2098.270351283 I0519 18:33:52.309026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:33:52.309131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:33:52.309157 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-19 18:33:52.309149401 +0000 UTC m=+2098.291505433 I0519 18:33:52.309888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:33:52.641148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-rg248" condition "Approved" to 2026-05-19 18:33:52.641133913 +0000 UTC m=+2098.623489955 I0519 18:33:52.676257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-rg248" condition "Ready" to 2026-05-19 18:33:52.676243522 +0000 UTC m=+2098.658599574 I0519 18:33:52.842426 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:33:52.842405661 +0000 UTC m=+2098.824761713 I0519 18:33:53.069186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:33:53.069524 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:33:53.069516727 +0000 UTC m=+2099.051872749 I0519 18:33:53.494959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:38:40.446739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:38:40.446776 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-19 18:38:40.44677023 +0000 UTC m=+2386.429126262 I0519 18:38:40.446841 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-19 18:38:40.446824391 +0000 UTC m=+2386.429180453 I0519 18:38:40.478413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:38:40.478547 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-19 18:38:40.478536302 +0000 UTC m=+2386.460892364 I0519 18:38:40.609752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:38:40.647039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-fvpmd" condition "Approved" to 2026-05-19 18:38:40.647019319 +0000 UTC m=+2386.629375361 I0519 18:38:40.674552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-fvpmd" condition "Ready" to 2026-05-19 18:38:40.674537954 +0000 UTC m=+2386.656893996 I0519 18:38:40.707396 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:38:40.70738348 +0000 UTC m=+2386.689739502 I0519 18:38:40.738608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:38:40.738950 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:38:40.738944487 +0000 UTC m=+2386.721300519 I0519 18:38:40.768067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:38:40.768368 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:38:40.768360475 +0000 UTC m=+2386.750716507 I0519 18:38:40.768689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:39:50.274061 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-msn5v-vnc" condition "Ready" to 2026-05-19 18:39:50.274044168 +0000 UTC m=+2456.256400250 I0519 18:39:50.274262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-msn5v-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:39:50.274292 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-msn5v-api" condition "Ready" to 2026-05-19 18:39:50.274281303 +0000 UTC m=+2456.256637345 I0519 18:39:50.274036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-msn5v-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:39:50.274436 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-msn5v-vnc" condition "Issuing" to 2026-05-19 18:39:50.274430688 +0000 UTC m=+2456.256786720 I0519 18:39:50.274305 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-msn5v-api" condition "Issuing" to 2026-05-19 18:39:50.274294345 +0000 UTC m=+2456.256650387 I0519 18:39:50.294561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-msn5v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-msn5v-api\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:39:50.294681 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-msn5v-api" condition "Ready" to 2026-05-19 18:39:50.294673247 +0000 UTC m=+2456.277029279 I0519 18:39:50.295401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-msn5v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-msn5v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:39:50.295523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-msn5v-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:39:50.295548 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-msn5v-vnc" condition "Issuing" to 2026-05-19 18:39:50.295540427 +0000 UTC m=+2456.277896439 I0519 18:39:50.537074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-msn5v-vnc-zts9d" condition "Approved" to 2026-05-19 18:39:50.537060543 +0000 UTC m=+2456.519416565 I0519 18:39:50.540550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-msn5v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-msn5v-api\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:39:50.556532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-msn5v-vnc-zts9d" condition "Ready" to 2026-05-19 18:39:50.556521035 +0000 UTC m=+2456.538877067 I0519 18:39:50.572005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-msn5v-api-sc69b" condition "Approved" to 2026-05-19 18:39:50.571992077 +0000 UTC m=+2456.554348099 I0519 18:39:50.591556 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-msn5v-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:39:50.591544031 +0000 UTC m=+2456.573900063 I0519 18:39:50.592301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-msn5v-api-sc69b" condition "Ready" to 2026-05-19 18:39:50.592289188 +0000 UTC m=+2456.574645220 I0519 18:39:50.615457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-msn5v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-msn5v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:39:50.615965 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-msn5v-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:39:50.615953145 +0000 UTC m=+2456.598309177 I0519 18:39:50.638577 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-msn5v-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:39:50.6385648 +0000 UTC m=+2456.620920822 I0519 18:39:50.646276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-msn5v-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-msn5v-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:39:50.662953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-msn5v-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-msn5v-api\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:41:54.631103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:41:54.631143 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-19 18:41:54.631134412 +0000 UTC m=+2580.613490444 I0519 18:41:54.631137 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-05-19 18:41:54.631115981 +0000 UTC m=+2580.613472033 I0519 18:41:54.658139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:41:54.658360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:41:54.658491 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-05-19 18:41:54.658479123 +0000 UTC m=+2580.640835185 I0519 18:41:54.824633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-9jv94" condition "Approved" to 2026-05-19 18:41:54.824620297 +0000 UTC m=+2580.806976309 I0519 18:41:54.845849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-9jv94" condition "Ready" to 2026-05-19 18:41:54.845835129 +0000 UTC m=+2580.828191161 I0519 18:41:54.936651 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:41:54.936640261 +0000 UTC m=+2580.918996293 I0519 18:41:54.960247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:41:54.960701 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:41:54.960694578 +0000 UTC m=+2580.943050610 I0519 18:41:54.996913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:41:54.997541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:41:54.997929 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:41:54.997919984 +0000 UTC m=+2580.980276016 I0519 18:45:42.742143 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-19 18:45:42.742114577 +0000 UTC m=+2808.724470609 I0519 18:45:42.742600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:45:42.742671 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-19 18:45:42.742664199 +0000 UTC m=+2808.725020231 I0519 18:45:42.762057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:45:42.762145 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-19 18:45:42.762138531 +0000 UTC m=+2808.744494563 I0519 18:45:42.973798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:45:43.007124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-ls6zn" condition "Approved" to 2026-05-19 18:45:43.007105765 +0000 UTC m=+2808.989461817 I0519 18:45:43.036033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-ls6zn" condition "Ready" to 2026-05-19 18:45:43.036022811 +0000 UTC m=+2809.018378833 I0519 18:45:43.067411 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:45:43.067400273 +0000 UTC m=+2809.049756305 I0519 18:45:43.088368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:45:44.166039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:45:44.166083 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-19 18:45:44.166064692 +0000 UTC m=+2810.148420744 I0519 18:45:44.166078 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-19 18:45:44.166071172 +0000 UTC m=+2810.148427194 I0519 18:45:44.182758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:45:44.183048 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-19 18:45:44.182857254 +0000 UTC m=+2810.165213316 I0519 18:45:44.286654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:45:44.314181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-jrzl5" condition "Approved" to 2026-05-19 18:45:44.314158485 +0000 UTC m=+2810.296514547 I0519 18:45:44.331693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-jrzl5" condition "Ready" to 2026-05-19 18:45:44.331681564 +0000 UTC m=+2810.314037596 I0519 18:45:44.373338 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:45:44.373325429 +0000 UTC m=+2810.355681451 I0519 18:45:44.394566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:45:44.395017 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:45:44.395011542 +0000 UTC m=+2810.377367564 I0519 18:45:44.420245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:45:44.420513 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:45:44.420506901 +0000 UTC m=+2810.402862933 I0519 18:45:44.424798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:11.983802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:49:11.983970 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-19 18:49:11.983890969 +0000 UTC m=+3017.966247091 I0519 18:49:11.983801 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-19 18:49:11.983752426 +0000 UTC m=+3017.966108478 I0519 18:49:12.003602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:12.003699 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-19 18:49:12.003689269 +0000 UTC m=+3017.986045331 E0519 18:49:12.007025 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 18:49:12.007115 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-19 18:49:12.007105396 +0000 UTC m=+3017.989461448 I0519 18:49:12.007145 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0519 18:49:12.019941 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0519 18:49:12.020165 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 18:49:12.020228 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0519 18:49:12.020304 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0519 18:49:12.028993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:12.061104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-jw8ll" condition "Approved" to 2026-05-19 18:49:12.061090772 +0000 UTC m=+3018.043446804 I0519 18:49:12.083493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-jw8ll" condition "Ready" to 2026-05-19 18:49:12.083479281 +0000 UTC m=+3018.065835313 I0519 18:49:12.117595 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:12.117579365 +0000 UTC m=+3018.099935397 I0519 18:49:12.143005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:12.143386 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:12.143378601 +0000 UTC m=+3018.125734643 I0519 18:49:12.148487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:12.168516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:12.686607 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-19 18:49:12.686590447 +0000 UTC m=+3018.668946479 I0519 18:49:12.687490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:49:12.687557 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-19 18:49:12.687518008 +0000 UTC m=+3018.669874040 E0519 18:49:12.702836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 18:49:12.702877 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-19 18:49:12.702867466 +0000 UTC m=+3018.685223498 I0519 18:49:12.702930 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 18:49:12.706879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:12.706965 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-19 18:49:12.706957969 +0000 UTC m=+3018.689314001 E0519 18:49:12.717033 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0519 18:49:12.717113 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0519 18:49:12.717136 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0519 18:49:12.717162 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0519 18:49:12.729657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:12.755611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-b4vkp" condition "Approved" to 2026-05-19 18:49:12.755595713 +0000 UTC m=+3018.737951745 I0519 18:49:12.773879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-b4vkp" condition "Ready" to 2026-05-19 18:49:12.773865989 +0000 UTC m=+3018.756222021 I0519 18:49:12.805649 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:12.80563504 +0000 UTC m=+3018.787991072 I0519 18:49:12.827447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:12.827623 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:12.827615539 +0000 UTC m=+3018.809971561 I0519 18:49:12.852135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:13.438579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:49:13.438632 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-19 18:49:13.438612084 +0000 UTC m=+3019.420968136 I0519 18:49:13.438638 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-19 18:49:13.438625015 +0000 UTC m=+3019.420981047 I0519 18:49:13.457455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:13.457733 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-19 18:49:13.457723458 +0000 UTC m=+3019.440079500 I0519 18:49:13.477020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:13.477255 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-19 18:49:13.477247142 +0000 UTC m=+3019.459603174 I0519 18:49:13.485245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-h4k56" condition "Approved" to 2026-05-19 18:49:13.485234753 +0000 UTC m=+3019.467590775 I0519 18:49:13.503547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-h4k56" condition "Ready" to 2026-05-19 18:49:13.503533468 +0000 UTC m=+3019.485889500 I0519 18:49:17.020939 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:17.020909364 +0000 UTC m=+3023.003265386 I0519 18:49:17.039366 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-h4k56" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:17.039349512 +0000 UTC m=+3023.021705544 I0519 18:49:17.076163 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:17.076147248 +0000 UTC m=+3023.058503270 I0519 18:49:17.096975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:17.098264 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:17.098252349 +0000 UTC m=+3023.080608381 I0519 18:49:17.099500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:17.120212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:49:17.717838 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:49:17.717828 +0000 UTC m=+3023.700184262 I0519 18:51:47.295072 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-19 18:51:47.295035694 +0000 UTC m=+3173.277391726 I0519 18:51:47.295286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:51:47.295356 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-19 18:51:47.295347751 +0000 UTC m=+3173.277703783 I0519 18:51:47.312376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:51:47.312455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:51:47.312474 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-19 18:51:47.31246833 +0000 UTC m=+3173.294824362 I0519 18:51:47.564923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2fg78" condition "Approved" to 2026-05-19 18:51:47.56491124 +0000 UTC m=+3173.547267262 I0519 18:51:47.590024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2fg78" condition "Ready" to 2026-05-19 18:51:47.59001612 +0000 UTC m=+3173.572372142 I0519 18:51:47.627426 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:51:47.627409779 +0000 UTC m=+3173.609765831 I0519 18:51:47.653365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:51:47.653919 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:51:47.65390928 +0000 UTC m=+3173.636265332 I0519 18:51:47.676662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:51:47.688802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:34.158399 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-19 18:52:34.158383675 +0000 UTC m=+3220.140739687 I0519 18:52:34.181909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:52:34.181953 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-19 18:52:34.18194274 +0000 UTC m=+3220.164298772 I0519 18:52:34.182292 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-19 18:52:34.18195002 +0000 UTC m=+3220.164306102 I0519 18:52:34.194219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:34.194316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:52:34.194345 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-19 18:52:34.194336951 +0000 UTC m=+3220.176693003 E0519 18:52:34.211856 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0519 18:52:34.262860 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-19 18:52:34.262844807 +0000 UTC m=+3220.245200839 I0519 18:52:34.283277 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-19 18:52:34.28326727 +0000 UTC m=+3220.265623302 I0519 18:52:34.283498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:52:34.283526 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-19 18:52:34.283521246 +0000 UTC m=+3220.265877278 I0519 18:52:34.298248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:34.298365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:52:34.298396 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-19 18:52:34.298387333 +0000 UTC m=+3220.280743395 E0519 18:52:34.356521 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0519 18:52:34.558257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-pz8fx" condition "Approved" to 2026-05-19 18:52:34.558244061 +0000 UTC m=+3220.540600103 I0519 18:52:34.589766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-pz8fx" condition "Ready" to 2026-05-19 18:52:34.589754057 +0000 UTC m=+3220.572110089 I0519 18:52:34.618658 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:52:34.618638873 +0000 UTC m=+3220.600994925 I0519 18:52:34.637213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:35.051918 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-19 18:52:35.051902588 +0000 UTC m=+3221.034258620 I0519 18:52:35.073189 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:52:35.073236 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-19 18:52:35.073222871 +0000 UTC m=+3221.055578893 I0519 18:52:35.073572 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-19 18:52:35.073566999 +0000 UTC m=+3221.055923031 I0519 18:52:35.090346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:35.091257 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-19 18:52:35.091240471 +0000 UTC m=+3221.073596523 I0519 18:52:35.225745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:35.290685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-k4fpp" condition "Approved" to 2026-05-19 18:52:35.290671118 +0000 UTC m=+3221.273027150 I0519 18:52:35.328424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-k4fpp" condition "Ready" to 2026-05-19 18:52:35.328414124 +0000 UTC m=+3221.310770146 I0519 18:52:35.362519 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:52:35.362504878 +0000 UTC m=+3221.344860910 I0519 18:52:35.383877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:35.384209 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:52:35.38420156 +0000 UTC m=+3221.366557582 I0519 18:52:35.423637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:35.515109 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-19 18:52:35.515090372 +0000 UTC m=+3221.497446434 I0519 18:52:35.535171 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-19 18:52:35.535157477 +0000 UTC m=+3221.517513529 I0519 18:52:35.535572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:52:35.535610 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-19 18:52:35.535604577 +0000 UTC m=+3221.517960609 I0519 18:52:35.553698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:35.553786 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-19 18:52:35.55377847 +0000 UTC m=+3221.536134502 I0519 18:52:35.730160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:35.794082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-6gxwl" condition "Approved" to 2026-05-19 18:52:35.794068124 +0000 UTC m=+3221.776424156 I0519 18:52:35.844000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-6gxwl" condition "Ready" to 2026-05-19 18:52:35.843988617 +0000 UTC m=+3221.826344649 I0519 18:52:35.885370 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:52:35.885352666 +0000 UTC m=+3221.867708718 I0519 18:52:35.914364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:36.039403 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-19 18:52:36.039384753 +0000 UTC m=+3222.021740805 I0519 18:52:36.072299 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-19 18:52:36.0722885 +0000 UTC m=+3222.054644522 I0519 18:52:36.072311 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:52:36.072382 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-19 18:52:36.072378552 +0000 UTC m=+3222.054734574 I0519 18:52:36.272728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:36.272792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:52:36.272808 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-19 18:52:36.272803611 +0000 UTC m=+3222.255159633 I0519 18:52:37.020513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-5z86t" condition "Approved" to 2026-05-19 18:52:37.020496753 +0000 UTC m=+3223.002852785 I0519 18:52:37.053891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-5z86t" condition "Ready" to 2026-05-19 18:52:37.053882761 +0000 UTC m=+3223.036238783 I0519 18:52:37.174246 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:52:37.174227713 +0000 UTC m=+3223.156583755 I0519 18:52:37.266303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:52:37.266791 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:52:37.266770743 +0000 UTC m=+3223.249126775 I0519 18:52:37.467890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:56:09.742616 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-19 18:56:09.742579178 +0000 UTC m=+3435.724935240 I0519 18:56:09.742619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:56:09.742848 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-19 18:56:09.742840704 +0000 UTC m=+3435.725196736 I0519 18:56:10.286903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:56:10.287001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:56:10.287024 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-19 18:56:10.287018327 +0000 UTC m=+3436.269374359 I0519 18:56:13.151561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-scrfw" condition "Approved" to 2026-05-19 18:56:13.151537279 +0000 UTC m=+3439.133893301 I0519 18:56:13.650862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-scrfw" condition "Ready" to 2026-05-19 18:56:13.650850993 +0000 UTC m=+3439.633207015 I0519 18:56:19.911998 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:56:19.911980707 +0000 UTC m=+3445.894336739 I0519 18:56:20.931483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:56:20.931979 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:56:20.93197044 +0000 UTC m=+3446.914326472 I0519 18:56:21.590028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0519 18:56:21.590065 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-19 18:56:21.590058568 +0000 UTC m=+3447.572414600 I0519 18:56:21.590215 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-19 18:56:21.590189671 +0000 UTC m=+3447.572545803 I0519 18:56:22.366465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:56:22.370722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:56:22.370856 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-19 18:56:22.370847922 +0000 UTC m=+3448.353203954 I0519 18:56:23.720463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:56:23.762229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0519 18:56:29.197460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-wwzfs" condition "Approved" to 2026-05-19 18:56:29.197443472 +0000 UTC m=+3455.179799524 I0519 18:56:29.959138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-wwzfs" condition "Ready" to 2026-05-19 18:56:29.959126342 +0000 UTC m=+3455.941482364 I0519 18:56:33.259474 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:56:33.259456237 +0000 UTC m=+3459.241812279 E0519 18:56:40.268467 1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" E0519 18:56:40.269566 1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" I0519 18:56:41.269740 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-19 18:56:41.269721665 +0000 UTC m=+3467.252077717 E0519 18:56:48.285293 1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" E0519 18:56:50.270582 1 controller.go:167] "re-queuing item due to error processing" err="failed to apply secret openstack/magnum-registry-certs: Patch \"https://10.96.0.1:443/api/v1/namespaces/openstack/secrets/magnum-registry-certs?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" I0519 18:56:55.087530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0519 18:57:58.392493 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out I0519 18:58:03.669755 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0519 18:58:14.204004 1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again I0519 18:58:14.204906 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0519 18:58:14.204947 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0519 18:58:14.204962 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0519 18:58:14.204976 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0519 18:58:14.204989 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0519 18:58:14.205003 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0519 18:58:14.205017 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0519 18:58:14.205116 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0519 18:58:14.205149 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0519 18:58:14.205169 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0519 18:58:14.205173 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0519 18:58:14.205182 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0519 18:58:14.205195 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0519 18:58:14.205199 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0519 18:58:14.205213 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0519 18:58:14.205227 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0519 18:58:14.205231 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0519 18:58:14.205240 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" E0519 18:58:14.205407 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"