I0512 06:11:17.705918 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0512 06:11:17.706043 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0512 06:11:17.706110 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0512 06:11:17.712708 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0512 06:11:17.713062 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0512 06:11:17.713157 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0512 06:11:17.713159 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0512 06:11:17.715437 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0512 06:11:17.736221 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0512 06:11:17.744801 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0512 06:11:17.745491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0512 06:11:17.748502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0512 06:11:17.752936 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0512 06:11:17.756719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0512 06:11:17.758704 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0512 06:11:17.760571 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0512 06:11:17.760589 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0512 06:11:17.760618 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0512 06:11:17.762625 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0512 06:11:17.764772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0512 06:11:17.766710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0512 06:11:17.771500 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0512 06:11:17.771529 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0512 06:11:17.771849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0512 06:11:17.774363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0512 06:11:17.776981 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0512 06:11:17.779786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0512 06:11:17.801161 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0512 06:11:17.802515 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0512 06:11:17.804794 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0512 06:11:17.804923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0512 06:11:17.814582 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0512 06:11:17.817180 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0512 06:11:17.821864 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:17.823120 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:17.824089 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:17.824287 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:17.824760 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:17.825202 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:17.825582 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:17.825819 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:17.831377 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0512 06:11:18.024147 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 E0512 06:13:26.031891 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out I0512 06:15:29.582558 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-12 06:15:29.582529062 +0000 UTC m=+251.917543647 I0512 06:15:29.582878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:15:29.583037 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-12 06:15:29.583023053 +0000 UTC m=+251.918037668 I0512 06:15:29.601793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:15:29.601897 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-12 06:15:29.601884719 +0000 UTC m=+251.936899314 I0512 06:15:30.223097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:15:30.260471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qtz8g" condition "Approved" to 2026-05-12 06:15:30.260456498 +0000 UTC m=+252.595471103 I0512 06:15:30.286261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qtz8g" condition "Ready" to 2026-05-12 06:15:30.286246579 +0000 UTC m=+252.621261164 I0512 06:15:30.326820 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:15:30.326809193 +0000 UTC m=+252.661823778 I0512 06:15:30.346003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:24:04.768247 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:24:04.768358 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-12 06:24:04.768345275 +0000 UTC m=+767.103359900 I0512 06:24:04.768314 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-12 06:24:04.768292254 +0000 UTC m=+767.103306879 I0512 06:24:04.785581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:24:04.785667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:24:04.785687 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-12 06:24:04.785679645 +0000 UTC m=+767.120694230 I0512 06:24:05.453605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:24:05.465360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-qzwm2" condition "Approved" to 2026-05-12 06:24:05.465330852 +0000 UTC m=+767.800345477 I0512 06:24:05.490342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-qzwm2" condition "Ready" to 2026-05-12 06:24:05.490329194 +0000 UTC m=+767.825343779 I0512 06:24:05.517140 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:24:05.517129317 +0000 UTC m=+767.852143912 I0512 06:24:05.556376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:24:05.619499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:25:43.191208 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-12 06:25:43.19118855 +0000 UTC m=+865.526203175 I0512 06:25:43.191288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:25:43.191321 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-12 06:25:43.191310703 +0000 UTC m=+865.526325328 I0512 06:25:43.207471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:25:43.207668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:25:43.207710 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-12 06:25:43.207698991 +0000 UTC m=+865.542713616 I0512 06:25:43.409991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:25:43.420842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nlmdj" condition "Approved" to 2026-05-12 06:25:43.420830552 +0000 UTC m=+865.755845147 I0512 06:25:43.441917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nlmdj" condition "Ready" to 2026-05-12 06:25:43.441906796 +0000 UTC m=+865.776921391 I0512 06:25:43.471355 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:25:43.471335687 +0000 UTC m=+865.806350302 I0512 06:25:43.506089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:25:43.506687 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:25:43.506677172 +0000 UTC m=+865.841691797 I0512 06:25:43.540032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:25:43.578142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:25:43.578370 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:25:43.578364383 +0000 UTC m=+865.913378968 I0512 06:27:08.604191 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-12 06:27:08.604145226 +0000 UTC m=+950.939159811 I0512 06:27:08.604549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:27:08.604878 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-12 06:27:08.604873992 +0000 UTC m=+950.939888577 I0512 06:27:08.623754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:27:08.623849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:27:08.623872 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-12 06:27:08.623865559 +0000 UTC m=+950.958880154 I0512 06:27:08.674455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-bvsr9" condition "Approved" to 2026-05-12 06:27:08.674440166 +0000 UTC m=+951.009454761 I0512 06:27:08.691961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-bvsr9" condition "Ready" to 2026-05-12 06:27:08.69195124 +0000 UTC m=+951.026965835 I0512 06:27:08.720221 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:27:08.720206025 +0000 UTC m=+951.055220610 I0512 06:27:08.742886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:27:08.743171 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:27:08.743166301 +0000 UTC m=+951.078180896 I0512 06:27:08.763704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:27:09.275016 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-12 06:27:09.275000345 +0000 UTC m=+951.610014950 I0512 06:27:09.275580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:27:09.275647 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-12 06:27:09.27563998 +0000 UTC m=+951.610654585 I0512 06:27:09.292676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:27:09.292777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:27:09.292801 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-12 06:27:09.292794616 +0000 UTC m=+951.627809211 I0512 06:27:09.341217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:27:09.346773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qv2hx" condition "Approved" to 2026-05-12 06:27:09.346763739 +0000 UTC m=+951.681778324 I0512 06:27:09.363048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qv2hx" condition "Ready" to 2026-05-12 06:27:09.363035005 +0000 UTC m=+951.698049600 I0512 06:27:09.397095 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:27:09.39708454 +0000 UTC m=+951.732099135 I0512 06:27:09.418352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:27:09.419529 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:27:09.419516664 +0000 UTC m=+951.754531289 I0512 06:27:09.444882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:27:09.938964 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-12 06:27:09.93895319 +0000 UTC m=+952.273967785 I0512 06:27:10.545748 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-12 06:27:10.54573838 +0000 UTC m=+952.880752965 I0512 06:28:02.561149 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-12 06:28:02.561134641 +0000 UTC m=+1004.896149236 I0512 06:28:02.561635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:28:02.561659 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-12 06:28:02.561654972 +0000 UTC m=+1004.896669567 I0512 06:28:02.609035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:28:02.609122 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-12 06:28:02.609114739 +0000 UTC m=+1004.944129334 I0512 06:28:06.033153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:28:06.140761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-lslhz" condition "Approved" to 2026-05-12 06:28:06.140748424 +0000 UTC m=+1008.475763019 I0512 06:28:06.187596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-lslhz" condition "Ready" to 2026-05-12 06:28:06.187585416 +0000 UTC m=+1008.522600001 I0512 06:28:06.275131 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:28:06.275114504 +0000 UTC m=+1008.610129099 I0512 06:28:06.302963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:28:06.305107 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:28:06.304967405 +0000 UTC m=+1008.639982020 I0512 06:28:06.310774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:28:06.344552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:28:06.345571 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:28:06.345558968 +0000 UTC m=+1008.680573583 I0512 06:30:57.448372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:30:57.448412 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-12 06:30:57.448388673 +0000 UTC m=+1179.783403298 I0512 06:30:57.448468 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-12 06:30:57.448458945 +0000 UTC m=+1179.783473570 I0512 06:30:57.473121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:30:57.473260 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:30:57.473289 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-12 06:30:57.473279433 +0000 UTC m=+1179.808294048 I0512 06:30:57.626155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:30:57.678522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-k99w7" condition "Approved" to 2026-05-12 06:30:57.678506348 +0000 UTC m=+1180.013520953 I0512 06:30:57.838803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-k99w7" condition "Ready" to 2026-05-12 06:30:57.838786362 +0000 UTC m=+1180.173800967 I0512 06:30:58.268472 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:30:58.268448375 +0000 UTC m=+1180.603463000 I0512 06:30:58.769445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:30:58.770099 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:30:58.770090155 +0000 UTC m=+1181.105104770 I0512 06:30:59.514722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:30:59.604564 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-12 06:30:59.604549971 +0000 UTC m=+1181.939564576 I0512 06:30:59.604683 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:30:59.604726 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-12 06:30:59.604716644 +0000 UTC m=+1181.939731239 I0512 06:30:59.621208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:30:59.621290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:30:59.621310 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-12 06:30:59.621305358 +0000 UTC m=+1181.956319943 I0512 06:30:59.801160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:30:59.809060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-vps4v" condition "Approved" to 2026-05-12 06:30:59.809041539 +0000 UTC m=+1182.144056134 I0512 06:30:59.827335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-vps4v" condition "Ready" to 2026-05-12 06:30:59.82732336 +0000 UTC m=+1182.162337955 I0512 06:30:59.863054 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:30:59.863036483 +0000 UTC m=+1182.198051088 I0512 06:30:59.884281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:30:59.884602 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:30:59.884594508 +0000 UTC m=+1182.219609103 I0512 06:30:59.890814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:30:59.909894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:36:45.639952 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7zpz-api" condition "Ready" to 2026-05-12 06:36:45.639906031 +0000 UTC m=+1527.974920606 I0512 06:36:45.640393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7zpz-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:36:45.640409 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7zpz-api" condition "Issuing" to 2026-05-12 06:36:45.640406142 +0000 UTC m=+1527.975420727 I0512 06:36:45.646300 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7zpz-vnc" condition "Ready" to 2026-05-12 06:36:45.646286574 +0000 UTC m=+1527.981301159 I0512 06:36:45.646946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7zpz-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:36:45.647692 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7zpz-vnc" condition "Issuing" to 2026-05-12 06:36:45.647683376 +0000 UTC m=+1527.982697971 I0512 06:36:45.664214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7zpz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7zpz-api\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:36:45.664296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7zpz-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:36:45.664317 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7zpz-api" condition "Issuing" to 2026-05-12 06:36:45.66430766 +0000 UTC m=+1527.999322245 I0512 06:36:45.666590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7zpz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7zpz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:36:45.666691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7zpz-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:36:45.666715 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7zpz-vnc" condition "Issuing" to 2026-05-12 06:36:45.666708794 +0000 UTC m=+1528.001723379 I0512 06:36:45.873272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w7zpz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7zpz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:36:45.877047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w7zpz-vnc-hbtn7" condition "Approved" to 2026-05-12 06:36:45.877035954 +0000 UTC m=+1528.212050559 I0512 06:36:45.881606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w7zpz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7zpz-api\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:36:45.889674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w7zpz-api-wt2bg" condition "Approved" to 2026-05-12 06:36:45.889655237 +0000 UTC m=+1528.224669832 I0512 06:36:45.901960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w7zpz-vnc-hbtn7" condition "Ready" to 2026-05-12 06:36:45.901950765 +0000 UTC m=+1528.236965360 I0512 06:36:45.903782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w7zpz-api-wt2bg" condition "Ready" to 2026-05-12 06:36:45.903761535 +0000 UTC m=+1528.238776150 I0512 06:36:46.060310 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w7zpz-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:36:46.060288575 +0000 UTC m=+1528.395303190 I0512 06:36:46.067210 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w7zpz-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:36:46.06719121 +0000 UTC m=+1528.402205805 I0512 06:36:46.078991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-w7zpz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7zpz-api\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:36:46.079514 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w7zpz-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:36:46.079503687 +0000 UTC m=+1528.414518272 I0512 06:36:46.087217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-w7zpz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7zpz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:36:46.087509 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w7zpz-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:36:46.087503707 +0000 UTC m=+1528.422518292 I0512 06:36:46.101096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w7zpz-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7zpz-api\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:36:46.105097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w7zpz-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7zpz-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:37:55.681195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:37:55.681305 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-12 06:37:55.681294119 +0000 UTC m=+1598.016308724 I0512 06:37:55.682032 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-12 06:37:55.682009445 +0000 UTC m=+1598.017024070 I0512 06:37:55.699237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:37:55.699352 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-12 06:37:55.699340425 +0000 UTC m=+1598.034355030 I0512 06:37:56.185329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:37:56.244011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9jbls" condition "Approved" to 2026-05-12 06:37:56.243996834 +0000 UTC m=+1598.579011429 I0512 06:37:56.274369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9jbls" condition "Ready" to 2026-05-12 06:37:56.274360436 +0000 UTC m=+1598.609375021 I0512 06:37:56.316179 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:37:56.316166256 +0000 UTC m=+1598.651180881 I0512 06:37:56.368167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:37:56.464132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:47.851871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:42:47.851906 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-12 06:42:47.851899162 +0000 UTC m=+1890.186913757 I0512 06:42:47.851859 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-12 06:42:47.85184603 +0000 UTC m=+1890.186860625 I0512 06:42:47.874048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:47.874191 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-12 06:42:47.874179083 +0000 UTC m=+1890.209193698 I0512 06:42:48.152971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:48.189083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-z8wkb" condition "Approved" to 2026-05-12 06:42:48.189069585 +0000 UTC m=+1890.524084180 I0512 06:42:48.207965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-z8wkb" condition "Ready" to 2026-05-12 06:42:48.207941189 +0000 UTC m=+1890.542955774 I0512 06:42:48.236736 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:42:48.236725056 +0000 UTC m=+1890.571739641 I0512 06:42:48.262596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:48.263074 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:42:48.263068819 +0000 UTC m=+1890.598083404 I0512 06:42:48.268960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:48.284134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:48.284480 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:42:48.28447172 +0000 UTC m=+1890.619486315 I0512 06:42:49.539860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:42:49.539965 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-12 06:42:49.539957534 +0000 UTC m=+1891.874972129 I0512 06:42:49.539853 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-12 06:42:49.539835861 +0000 UTC m=+1891.874850466 I0512 06:42:49.558442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:49.558541 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-12 06:42:49.558531771 +0000 UTC m=+1891.893546366 I0512 06:42:49.707489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:49.736160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-gcm69" condition "Approved" to 2026-05-12 06:42:49.736150666 +0000 UTC m=+1892.071165251 I0512 06:42:49.755287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-gcm69" condition "Ready" to 2026-05-12 06:42:49.755271516 +0000 UTC m=+1892.090286131 I0512 06:42:49.786870 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:42:49.786839086 +0000 UTC m=+1892.121853691 I0512 06:42:49.808142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:42:49.808835 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:42:49.80881963 +0000 UTC m=+1892.143834235 I0512 06:42:49.825202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:19.572959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:46:19.573044 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-12 06:46:19.573034729 +0000 UTC m=+2101.908049324 I0512 06:46:19.572917 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-12 06:46:19.572858686 +0000 UTC m=+2101.907873341 E0512 06:46:19.589093 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0512 06:46:19.589159 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-12 06:46:19.589151992 +0000 UTC m=+2101.924166587 I0512 06:46:19.589179 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0512 06:46:19.589266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:19.589386 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-12 06:46:19.589375557 +0000 UTC m=+2101.924390172 E0512 06:46:19.601298 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0512 06:46:19.601382 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0512 06:46:19.601406 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0512 06:46:19.601433 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0512 06:46:19.613268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:19.644101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-dn7vc" condition "Approved" to 2026-05-12 06:46:19.644086226 +0000 UTC m=+2101.979100821 I0512 06:46:19.664152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-dn7vc" condition "Ready" to 2026-05-12 06:46:19.664133087 +0000 UTC m=+2101.999147682 I0512 06:46:19.696176 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:19.696162357 +0000 UTC m=+2102.031176952 I0512 06:46:19.723811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:19.793216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:20.323023 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-12 06:46:20.323005999 +0000 UTC m=+2102.658020594 I0512 06:46:20.323522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:46:20.323646 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-12 06:46:20.323594182 +0000 UTC m=+2102.658608797 E0512 06:46:20.338539 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0512 06:46:20.338587 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-12 06:46:20.338579458 +0000 UTC m=+2102.673594053 I0512 06:46:20.338632 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0512 06:46:20.341029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:20.341171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:46:20.341214 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-12 06:46:20.341202367 +0000 UTC m=+2102.676216962 E0512 06:46:20.349091 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0512 06:46:20.349195 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0512 06:46:20.349236 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0512 06:46:20.349291 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0512 06:46:20.400066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-bpsvg" condition "Approved" to 2026-05-12 06:46:20.40003537 +0000 UTC m=+2102.735049995 I0512 06:46:20.416311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-bpsvg" condition "Ready" to 2026-05-12 06:46:20.416291125 +0000 UTC m=+2102.751305720 I0512 06:46:20.453712 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:20.453697066 +0000 UTC m=+2102.788711661 I0512 06:46:20.476097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:20.476311 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:20.476300974 +0000 UTC m=+2102.811315559 I0512 06:46:20.496456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:20.496628 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:20.496621802 +0000 UTC m=+2102.831636387 I0512 06:46:21.110392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:46:21.110671 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-12 06:46:21.110659315 +0000 UTC m=+2103.445673910 I0512 06:46:21.110746 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-12 06:46:21.110726716 +0000 UTC m=+2103.445741331 I0512 06:46:21.133224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:21.133396 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-12 06:46:21.133386165 +0000 UTC m=+2103.468400780 I0512 06:46:21.155490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:21.185787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-kg88r" condition "Approved" to 2026-05-12 06:46:21.185774033 +0000 UTC m=+2103.520788618 I0512 06:46:21.210286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-kg88r" condition "Ready" to 2026-05-12 06:46:21.210258553 +0000 UTC m=+2103.545273188 I0512 06:46:24.602448 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:24.602434137 +0000 UTC m=+2106.937448752 I0512 06:46:24.616016 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-kg88r" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:24.616006803 +0000 UTC m=+2106.951021398 I0512 06:46:24.646373 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:24.646350455 +0000 UTC m=+2106.981365080 I0512 06:46:24.669394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:24.669892 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:24.669861833 +0000 UTC m=+2107.004876428 I0512 06:46:24.699287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:46:25.350538 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:46:25.350518474 +0000 UTC m=+2107.685533089 I0512 06:50:06.084990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:50:06.085021 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-12 06:50:06.085013743 +0000 UTC m=+2328.420028338 I0512 06:50:06.085100 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-12 06:50:06.085084655 +0000 UTC m=+2328.420099250 I0512 06:50:06.106877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:06.109778 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-12 06:50:06.10976183 +0000 UTC m=+2328.444776505 I0512 06:50:06.328129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:06.449550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-r58m5" condition "Approved" to 2026-05-12 06:50:06.449537469 +0000 UTC m=+2328.784552064 I0512 06:50:06.502083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-r58m5" condition "Ready" to 2026-05-12 06:50:06.502072149 +0000 UTC m=+2328.837086744 I0512 06:50:06.591346 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:50:06.591335215 +0000 UTC m=+2328.926349800 I0512 06:50:06.634864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:06.693539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:53.010408 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-12 06:50:53.010395652 +0000 UTC m=+2375.345410237 I0512 06:50:53.029323 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-12 06:50:53.029311687 +0000 UTC m=+2375.364326272 I0512 06:50:53.029433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:50:53.029481 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-12 06:50:53.029470001 +0000 UTC m=+2375.364484616 I0512 06:50:53.043986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:53.044068 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-12 06:50:53.044061369 +0000 UTC m=+2375.379075954 E0512 06:50:53.061377 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0512 06:50:53.105088 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-12 06:50:53.10507222 +0000 UTC m=+2375.440086815 I0512 06:50:53.127442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:50:53.127472 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-12 06:50:53.127465854 +0000 UTC m=+2375.462480449 I0512 06:50:53.127468 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-12 06:50:53.127451183 +0000 UTC m=+2375.462465768 I0512 06:50:53.141370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:53.141446 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-12 06:50:53.141439178 +0000 UTC m=+2375.476453773 E0512 06:50:53.259518 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0512 06:50:53.598533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:53.852393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ffhdq" condition "Approved" to 2026-05-12 06:50:53.85238179 +0000 UTC m=+2376.187396375 I0512 06:50:54.255277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-ffhdq" condition "Ready" to 2026-05-12 06:50:54.255259096 +0000 UTC m=+2376.590273691 I0512 06:50:54.889175 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:50:54.889161626 +0000 UTC m=+2377.224176221 I0512 06:50:55.147359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:55.149002 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:50:55.148995967 +0000 UTC m=+2377.484010552 I0512 06:50:55.812480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:50:55.813737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:00.527137 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-12 06:51:00.527122365 +0000 UTC m=+2382.862136960 I0512 06:51:00.555499 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-12 06:51:00.555483462 +0000 UTC m=+2382.890498067 I0512 06:51:00.555538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:51:00.555572 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-12 06:51:00.555564634 +0000 UTC m=+2382.890579249 I0512 06:51:00.575093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:00.575155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:51:00.575170 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-12 06:51:00.575164634 +0000 UTC m=+2382.910179209 I0512 06:51:00.883510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-w6m78" condition "Approved" to 2026-05-12 06:51:00.883493456 +0000 UTC m=+2383.218508061 I0512 06:51:00.911945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-w6m78" condition "Ready" to 2026-05-12 06:51:00.911934295 +0000 UTC m=+2383.246948880 I0512 06:51:00.948303 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:51:00.948289512 +0000 UTC m=+2383.283304107 I0512 06:51:00.971708 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-12 06:51:00.971696758 +0000 UTC m=+2383.306711363 I0512 06:51:00.972062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:00.972302 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:51:00.972297551 +0000 UTC m=+2383.307312146 I0512 06:51:00.992546 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-12 06:51:00.992532397 +0000 UTC m=+2383.327546992 I0512 06:51:00.992560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:51:00.992758 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-12 06:51:00.992753182 +0000 UTC m=+2383.327767777 I0512 06:51:00.994523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:00.994780 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:51:00.994773736 +0000 UTC m=+2383.329788321 I0512 06:51:01.018257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:01.018323 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-12 06:51:01.018316266 +0000 UTC m=+2383.353330851 I0512 06:51:01.226933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:01.277320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bltqq" condition "Approved" to 2026-05-12 06:51:01.277306528 +0000 UTC m=+2383.612321123 I0512 06:51:01.312005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bltqq" condition "Ready" to 2026-05-12 06:51:01.311993958 +0000 UTC m=+2383.647008553 I0512 06:51:01.367949 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:51:01.367939566 +0000 UTC m=+2383.702954171 I0512 06:51:01.410136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:01.410513 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:51:01.410504742 +0000 UTC m=+2383.745519337 I0512 06:51:01.422341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:01.451033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:01.504994 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-12 06:51:01.504979276 +0000 UTC m=+2383.839993871 I0512 06:51:01.532298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:51:01.532345 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-12 06:51:01.532336201 +0000 UTC m=+2383.867350806 I0512 06:51:01.532289 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-12 06:51:01.532208918 +0000 UTC m=+2383.867223503 I0512 06:51:01.557031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:01.557110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:51:01.557131 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-12 06:51:01.557125188 +0000 UTC m=+2383.892139763 I0512 06:51:01.710067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:01.722364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-l2jnt" condition "Approved" to 2026-05-12 06:51:01.722355812 +0000 UTC m=+2384.057370397 I0512 06:51:01.806855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-l2jnt" condition "Ready" to 2026-05-12 06:51:01.806839951 +0000 UTC m=+2384.141854546 I0512 06:51:02.043488 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:51:02.043475252 +0000 UTC m=+2384.378489847 I0512 06:51:02.141249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:51:02.820844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:54:48.123061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:54:48.123121 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-12 06:54:48.123107677 +0000 UTC m=+2610.458122302 I0512 06:54:48.123221 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-12 06:54:48.123210299 +0000 UTC m=+2610.458224894 I0512 06:54:48.143804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:54:48.143878 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-12 06:54:48.143872413 +0000 UTC m=+2610.478886998 I0512 06:54:48.322570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:54:48.361479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-6ktg8" condition "Approved" to 2026-05-12 06:54:48.361467607 +0000 UTC m=+2610.696482202 I0512 06:54:48.385325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-6ktg8" condition "Ready" to 2026-05-12 06:54:48.385314504 +0000 UTC m=+2610.720329099 I0512 06:54:48.416573 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:54:48.416563816 +0000 UTC m=+2610.751578411 I0512 06:54:48.437738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:54:50.490097 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-12 06:54:50.490081552 +0000 UTC m=+2612.825096137 I0512 06:54:50.490470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0512 06:54:50.490489 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-12 06:54:50.490483051 +0000 UTC m=+2612.825497636 I0512 06:54:50.510181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:54:50.510278 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-12 06:54:50.510271056 +0000 UTC m=+2612.845285631 I0512 06:54:50.694068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:54:50.737566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-nskjf" condition "Approved" to 2026-05-12 06:54:50.737554817 +0000 UTC m=+2613.072569402 I0512 06:54:50.875125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-nskjf" condition "Ready" to 2026-05-12 06:54:50.87511372 +0000 UTC m=+2613.210128315 I0512 06:54:50.920867 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:54:50.920852309 +0000 UTC m=+2613.255866904 I0512 06:54:50.959427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:54:50.959899 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:54:50.959889087 +0000 UTC m=+2613.294903662 I0512 06:54:50.987126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0512 06:54:50.987586 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-12 06:54:50.987573959 +0000 UTC m=+2613.322588584 E0512 06:56:48.364275 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out E0512 06:58:45.650958 1 leaderelection.go:369] Failed to update lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused E0512 06:59:00.652326 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused E0512 06:59:15.652360 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0512 06:59:16.767188 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0512 06:59:16.768497 1 leaderelection.go:308] Failed to release lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0512 06:59:16.769200 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0512 06:59:16.769233 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0512 06:59:16.769265 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0512 06:59:16.769542 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0512 06:59:16.769586 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0512 06:59:16.769618 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0512 06:59:16.769696 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0512 06:59:16.769748 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0512 06:59:16.769771 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0512 06:59:16.769793 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0512 06:59:16.769821 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0512 06:59:16.769813 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0512 06:59:16.769701 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0512 06:59:16.769919 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0512 06:59:16.769949 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0512 06:59:16.769922 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0512 06:59:16.770018 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0512 06:59:16.770079 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" E0512 06:59:16.770487 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"