I0425 08:48:02.520430 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0425 08:48:02.520646 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0425 08:48:02.520763 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0425 08:48:02.525484 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0425 08:48:02.525947 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0425 08:48:02.526030 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0425 08:48:02.526116 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0425 08:48:02.528669 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0425 08:48:02.543669 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0425 08:48:02.548566 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0425 08:48:02.555233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0425 08:48:02.563317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0425 08:48:02.565562 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0425 08:48:02.567651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0425 08:48:02.569570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0425 08:48:02.571243 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0425 08:48:02.574727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0425 08:48:02.578404 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0425 08:48:02.578445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0425 08:48:02.582248 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0425 08:48:02.582328 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0425 08:48:02.584376 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0425 08:48:02.586258 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0425 08:48:02.587972 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0425 08:48:02.587988 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0425 08:48:02.587994 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0425 08:48:02.587999 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0425 08:48:02.588142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0425 08:48:02.590209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0425 08:48:02.592239 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0425 08:48:02.594610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0425 08:48:02.599629 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0425 08:48:02.604449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0425 08:48:02.608361 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.608883 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.609556 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.609686 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.610275 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.610366 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.610387 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.610739 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.610914 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:02.733239 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 08:48:38.205903 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-25 08:48:38.205890344 +0000 UTC m=+35.720416615 I0425 08:48:39.054137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:39.054188 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-25 08:48:39.054181216 +0000 UTC m=+36.568707507 I0425 08:48:39.054766 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 08:48:39.054748261 +0000 UTC m=+36.569274572 E0425 08:48:39.119670 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 08:48:39.119732 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-25 08:48:39.119726248 +0000 UTC m=+36.634252519 E0425 08:48:39.119750 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 08:48:39.122736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:39.122801 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 08:48:39.122793953 +0000 UTC m=+36.637320214 E0425 08:48:39.137646 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0425 08:48:39.138058 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 08:48:39.138103 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 08:48:39.138154 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0425 08:48:39.144146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:39.145325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b2vvh" condition "Approved" to 2026-04-25 08:48:39.145314409 +0000 UTC m=+36.659840690 I0425 08:48:39.150743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:39.150796 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 08:48:39.150790571 +0000 UTC m=+36.665316842 I0425 08:48:39.157833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b2vvh" condition "Ready" to 2026-04-25 08:48:39.157825407 +0000 UTC m=+36.672351688 I0425 08:48:39.161122 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 08:48:39.161111288 +0000 UTC m=+36.675637569 I0425 08:48:39.167669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:39.178747 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:39.178734818 +0000 UTC m=+36.693261109 I0425 08:48:39.194172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:39.194510 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:39.194500336 +0000 UTC m=+36.709026627 I0425 08:48:39.212333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:43.927156 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-25 08:48:43.927140929 +0000 UTC m=+41.441667240 I0425 08:48:43.927645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:43.927669 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-25 08:48:43.927665054 +0000 UTC m=+41.442191335 I0425 08:48:43.954269 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-25 08:48:43.954254673 +0000 UTC m=+41.468780984 I0425 08:48:43.962034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:43.962159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:43.962188 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-25 08:48:43.962179533 +0000 UTC m=+41.476705814 I0425 08:48:44.139542 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:44.139525423 +0000 UTC m=+41.654051694 I0425 08:48:44.142101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6m5w" condition "Approved" to 2026-04-25 08:48:44.142079914 +0000 UTC m=+41.656606225 I0425 08:48:44.194658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6m5w" condition "Ready" to 2026-04-25 08:48:44.194640066 +0000 UTC m=+41.709166337 I0425 08:48:44.261380 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:44.261361601 +0000 UTC m=+41.775887882 I0425 08:48:44.299518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:44.299899 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:44.299893341 +0000 UTC m=+41.814419642 I0425 08:48:44.339068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:50.622915 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-25 08:48:50.622817472 +0000 UTC m=+48.137343773 I0425 08:48:50.623509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:50.623540 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 08:48:50.623533753 +0000 UTC m=+48.138060054 I0425 08:48:50.641954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:50.642113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:50.642157 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 08:48:50.642145589 +0000 UTC m=+48.156671900 I0425 08:48:50.688654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-44xzf" condition "Approved" to 2026-04-25 08:48:50.688632832 +0000 UTC m=+48.203159143 I0425 08:48:50.723042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-44xzf" condition "Ready" to 2026-04-25 08:48:50.723030398 +0000 UTC m=+48.237556669 I0425 08:48:50.766514 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:50.766453706 +0000 UTC m=+48.280980007 I0425 08:48:50.790398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:50.790636 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:50.790629117 +0000 UTC m=+48.305155398 I0425 08:48:50.795226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:50.808151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:50.808397 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:50.808389082 +0000 UTC m=+48.322915383 I0425 08:48:51.385526 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:51.385570 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-25 08:48:51.385559036 +0000 UTC m=+48.900085347 I0425 08:48:51.385665 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-25 08:48:51.385650569 +0000 UTC m=+48.900176840 I0425 08:48:51.414706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:51.414780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:48:51.414797 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-25 08:48:51.414791098 +0000 UTC m=+48.929317379 I0425 08:48:51.473694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-rjskd" condition "Approved" to 2026-04-25 08:48:51.473675375 +0000 UTC m=+48.988201686 I0425 08:48:51.489144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-rjskd" condition "Ready" to 2026-04-25 08:48:51.489134075 +0000 UTC m=+49.003660346 I0425 08:48:51.527396 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:48:51.527380938 +0000 UTC m=+49.041907209 I0425 08:48:51.555462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:48:52.155553 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-25 08:48:52.155536641 +0000 UTC m=+49.670062942 I0425 08:48:52.853315 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-25 08:48:52.853299638 +0000 UTC m=+50.367825949 I0425 08:51:19.891919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:51:19.892023 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-25 08:51:19.891980394 +0000 UTC m=+197.406506695 I0425 08:51:19.892135 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-25 08:51:19.892109028 +0000 UTC m=+197.406635329 E0425 08:51:19.910163 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 08:51:19.910297 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-25 08:51:19.910287272 +0000 UTC m=+197.424813553 I0425 08:51:19.910320 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 08:51:19.913569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:51:19.913688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:51:19.913727 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-25 08:51:19.913718584 +0000 UTC m=+197.428244895 E0425 08:51:19.923623 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0425 08:51:19.923744 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 08:51:19.923785 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0425 08:51:19.923834 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0425 08:51:19.925867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:51:19.925911 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-25 08:51:19.925902506 +0000 UTC m=+197.440428817 I0425 08:51:19.925953 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-25 08:51:19.925940617 +0000 UTC m=+197.440466928 I0425 08:51:19.948909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:51:19.949005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:51:19.949032 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-25 08:51:19.94902276 +0000 UTC m=+197.463549071 I0425 08:51:20.140220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-4lb64" condition "Approved" to 2026-04-25 08:51:20.140207227 +0000 UTC m=+197.654733508 I0425 08:51:20.163468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-4lb64" condition "Ready" to 2026-04-25 08:51:20.163456503 +0000 UTC m=+197.677982794 I0425 08:51:20.214118 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:51:20.214103975 +0000 UTC m=+197.728630256 I0425 08:51:20.242694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dgtrm" condition "Approved" to 2026-04-25 08:51:20.24267643 +0000 UTC m=+197.757202701 I0425 08:51:20.254774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:51:20.261922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dgtrm" condition "Ready" to 2026-04-25 08:51:20.261910091 +0000 UTC m=+197.776436402 I0425 08:51:20.308689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:51:24.924115 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:51:24.924100627 +0000 UTC m=+202.438626908 I0425 08:51:24.939141 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-dgtrm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:51:24.939127076 +0000 UTC m=+202.453653357 I0425 08:51:24.972219 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:51:24.972200778 +0000 UTC m=+202.486727059 I0425 08:51:24.995794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:51:24.996154 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:51:24.996143582 +0000 UTC m=+202.510669863 I0425 08:51:25.012858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:51:25.019296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:55:42.200772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:55:42.200759 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-04-25 08:55:42.200716644 +0000 UTC m=+459.715242945 I0425 08:55:42.200818 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-04-25 08:55:42.200813587 +0000 UTC m=+459.715339868 I0425 08:55:42.218054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:55:42.218177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:55:42.218209 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-04-25 08:55:42.218199771 +0000 UTC m=+459.732726082 I0425 08:55:42.548998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-kb7fj" condition "Approved" to 2026-04-25 08:55:42.548984348 +0000 UTC m=+460.063510649 I0425 08:55:42.564747 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-kb7fj" condition "Ready" to 2026-04-25 08:55:42.564736755 +0000 UTC m=+460.079263026 I0425 08:55:42.589368 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:55:42.589358498 +0000 UTC m=+460.103884769 I0425 08:55:42.616708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:45.411538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:57:45.411692 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 08:57:45.4116482 +0000 UTC m=+582.926174541 I0425 08:57:45.411881 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-25 08:57:45.411857065 +0000 UTC m=+582.926383406 I0425 08:57:45.433579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:45.433669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:57:45.433693 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 08:57:45.433684571 +0000 UTC m=+582.948210872 I0425 08:57:45.585513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:45.595420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5vvnx" condition "Approved" to 2026-04-25 08:57:45.595408427 +0000 UTC m=+583.109934698 I0425 08:57:45.616040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5vvnx" condition "Ready" to 2026-04-25 08:57:45.616028168 +0000 UTC m=+583.130554449 I0425 08:57:45.646972 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:57:45.64695991 +0000 UTC m=+583.161486191 I0425 08:57:45.666015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:45.666478 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:57:45.66647001 +0000 UTC m=+583.180996291 I0425 08:57:45.673561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:57:45.686912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:37.337767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:58:37.337815 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-25 08:58:37.337801894 +0000 UTC m=+634.852328175 I0425 08:58:37.337815 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 08:58:37.337803514 +0000 UTC m=+634.852329775 I0425 08:58:37.358250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:37.358316 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-25 08:58:37.358310771 +0000 UTC m=+634.872837042 I0425 08:58:37.570179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:37.598798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-x45js" condition "Approved" to 2026-04-25 08:58:37.598780967 +0000 UTC m=+635.113307278 I0425 08:58:37.614647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-x45js" condition "Ready" to 2026-04-25 08:58:37.614634714 +0000 UTC m=+635.129160995 I0425 08:58:37.647653 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:37.647637713 +0000 UTC m=+635.162164004 I0425 08:58:37.674732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:37.675002 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:58:37.674993645 +0000 UTC m=+635.189519926 I0425 08:58:37.688080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:58:37.700123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:00.381449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:00.381806 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-25 08:59:00.381720202 +0000 UTC m=+657.896246513 I0425 08:59:00.382611 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-25 08:59:00.382605207 +0000 UTC m=+657.897131478 E0425 08:59:00.401806 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 08:59:00.401895 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-25 08:59:00.401885186 +0000 UTC m=+657.916411487 E0425 08:59:00.401926 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 08:59:00.405895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:00.405966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:00.405982 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-25 08:59:00.405976022 +0000 UTC m=+657.920502303 E0425 08:59:00.412552 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0425 08:59:00.412642 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 08:59:00.412673 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 08:59:00.412752 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0425 08:59:00.452229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-v4lnf" condition "Approved" to 2026-04-25 08:59:00.452192629 +0000 UTC m=+657.966718940 I0425 08:59:00.467028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-v4lnf" condition "Ready" to 2026-04-25 08:59:00.467016961 +0000 UTC m=+657.981543242 I0425 08:59:00.488137 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:00.488126262 +0000 UTC m=+658.002652543 I0425 08:59:00.517292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:00.519729 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:00.519719732 +0000 UTC m=+658.034246013 I0425 08:59:00.549283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:00.558675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:00.558974 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:00.55896583 +0000 UTC m=+658.073492111 I0425 08:59:02.566049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:02.566083 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-25 08:59:02.566076267 +0000 UTC m=+660.080602538 I0425 08:59:02.566454 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-25 08:59:02.566449618 +0000 UTC m=+660.080975889 I0425 08:59:02.587697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:02.587778 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-25 08:59:02.587772776 +0000 UTC m=+660.102299047 I0425 08:59:02.662429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:02.690505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ckwm8" condition "Approved" to 2026-04-25 08:59:02.690494782 +0000 UTC m=+660.205021073 I0425 08:59:02.705675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ckwm8" condition "Ready" to 2026-04-25 08:59:02.705666963 +0000 UTC m=+660.220193224 I0425 08:59:02.731406 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:02.731391556 +0000 UTC m=+660.245917827 I0425 08:59:02.756968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:05.413694 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:05.413679525 +0000 UTC m=+662.928205826 I0425 08:59:49.449984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:49.450018 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-25 08:59:49.450010981 +0000 UTC m=+706.964537262 I0425 08:59:49.450625 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-25 08:59:49.450607158 +0000 UTC m=+706.965133449 I0425 08:59:49.488870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:49.488942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:49.488964 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-25 08:59:49.488956997 +0000 UTC m=+707.003483278 I0425 08:59:49.680496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wtmwj" condition "Approved" to 2026-04-25 08:59:49.68048466 +0000 UTC m=+707.195010951 I0425 08:59:49.714773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wtmwj" condition "Ready" to 2026-04-25 08:59:49.714761591 +0000 UTC m=+707.229287882 I0425 08:59:49.772814 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:49.772805813 +0000 UTC m=+707.287332084 I0425 08:59:49.798069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:49.798420 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:49.798413886 +0000 UTC m=+707.312940167 I0425 08:59:49.806893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:49.817415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.251571 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-25 08:59:51.251547342 +0000 UTC m=+708.766073653 I0425 08:59:51.251678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:51.251730 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-25 08:59:51.251721676 +0000 UTC m=+708.766247937 I0425 08:59:51.251790 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-25 08:59:51.251771818 +0000 UTC m=+708.766298099 I0425 08:59:51.251810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:51.252103 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-25 08:59:51.252096768 +0000 UTC m=+708.766623049 I0425 08:59:51.278158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 08:59:51.278201 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-25 08:59:51.278192785 +0000 UTC m=+708.792719046 I0425 08:59:51.279530 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-25 08:59:51.279504572 +0000 UTC m=+708.794030883 I0425 08:59:51.317269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.317394 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-25 08:59:51.317385927 +0000 UTC m=+708.831912208 I0425 08:59:51.325236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.325287 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-25 08:59:51.325280733 +0000 UTC m=+708.839807004 I0425 08:59:51.340454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.340526 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-25 08:59:51.340517209 +0000 UTC m=+708.855043490 I0425 08:59:51.443772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.481288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dxnbx" condition "Approved" to 2026-04-25 08:59:51.481278238 +0000 UTC m=+708.995804509 I0425 08:59:51.497557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.503614 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dxnbx" condition "Ready" to 2026-04-25 08:59:51.503604677 +0000 UTC m=+709.018130948 I0425 08:59:51.539285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-h45zd" condition "Approved" to 2026-04-25 08:59:51.539273258 +0000 UTC m=+709.053799529 I0425 08:59:51.562108 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:51.562093261 +0000 UTC m=+709.076619532 I0425 08:59:51.573472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.577463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-h45zd" condition "Ready" to 2026-04-25 08:59:51.577452992 +0000 UTC m=+709.091979263 I0425 08:59:51.615438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.615872 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:51.61586339 +0000 UTC m=+709.130389681 I0425 08:59:51.739630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.779816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:51.885823 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:51.885809798 +0000 UTC m=+709.400336069 I0425 08:59:51.905907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-grswm" condition "Approved" to 2026-04-25 08:59:51.905897773 +0000 UTC m=+709.420424054 I0425 08:59:52.029047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:52.029514 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:52.029508212 +0000 UTC m=+709.544034473 I0425 08:59:52.189886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-grswm" condition "Ready" to 2026-04-25 08:59:52.189875382 +0000 UTC m=+709.704401653 I0425 08:59:52.633188 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:52.633171842 +0000 UTC m=+710.147698143 I0425 08:59:52.793796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:52.844814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:52.881868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:52.952592 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:52.952574815 +0000 UTC m=+710.467101116 I0425 08:59:53.102301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 08:59:53.102598 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 08:59:53.102590359 +0000 UTC m=+710.617116640 I0425 08:59:53.276478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:00.296696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:00:00.296723 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" condition "Issuing" to 2026-04-25 09:00:00.296716655 +0000 UTC m=+717.811242926 I0425 09:00:00.296797 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" condition "Ready" to 2026-04-25 09:00:00.296781827 +0000 UTC m=+717.811308118 I0425 09:00:00.322654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j4d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:00.322736 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:00:00.322759 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" condition "Issuing" to 2026-04-25 09:00:00.322752821 +0000 UTC m=+717.837279082 I0425 09:00:00.585410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j4d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:00.594582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-j4d46-4grbf" condition "Approved" to 2026-04-25 09:00:00.594360296 +0000 UTC m=+718.108886577 I0425 09:00:00.616565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-j4d46-4grbf" condition "Ready" to 2026-04-25 09:00:00.616555951 +0000 UTC m=+718.131082222 I0425 09:00:00.664598 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:00:00.664585486 +0000 UTC m=+718.179111747 I0425 09:00:00.705280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j4d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:00.707338 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:00:00.70733037 +0000 UTC m=+718.221856641 I0425 09:00:00.751632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j4d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:00.767895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-j4d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-j4d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:16.895584 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-25 09:00:16.895571348 +0000 UTC m=+734.410097639 I0425 09:00:16.896115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:00:16.896135 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-25 09:00:16.896130585 +0000 UTC m=+734.410656866 I0425 09:00:16.917208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:16.917284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:00:16.917301 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-25 09:00:16.91729641 +0000 UTC m=+734.431822671 I0425 09:00:17.319662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:17.324791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xdzlv" condition "Approved" to 2026-04-25 09:00:17.324776205 +0000 UTC m=+734.839302476 I0425 09:00:17.348816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xdzlv" condition "Ready" to 2026-04-25 09:00:17.348807602 +0000 UTC m=+734.863333873 I0425 09:00:17.388281 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:00:17.388269922 +0000 UTC m=+734.902796193 I0425 09:00:17.414558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:17.414896 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:00:17.414889295 +0000 UTC m=+734.929415566 I0425 09:00:17.443930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:56.432346 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-25 09:00:56.432302383 +0000 UTC m=+773.946828694 I0425 09:00:56.432507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:00:56.432569 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-25 09:00:56.43255664 +0000 UTC m=+773.947082931 I0425 09:00:56.458927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:56.459030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:00:56.459053 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-25 09:00:56.459048057 +0000 UTC m=+773.973574328 I0425 09:00:56.709825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:56.720353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qzqdn" condition "Approved" to 2026-04-25 09:00:56.720332984 +0000 UTC m=+774.234859295 I0425 09:00:56.740937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qzqdn" condition "Ready" to 2026-04-25 09:00:56.740925744 +0000 UTC m=+774.255452015 I0425 09:00:56.778716 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:00:56.778687194 +0000 UTC m=+774.293213465 I0425 09:00:56.801235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:56.801771 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:00:56.801753704 +0000 UTC m=+774.316280015 I0425 09:00:56.819707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:00:56.820214 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:00:56.820200472 +0000 UTC m=+774.334726783 I0425 09:01:08.605374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:01:08.605424 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-25 09:01:08.605411727 +0000 UTC m=+786.119938008 I0425 09:01:08.605928 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-25 09:01:08.605918091 +0000 UTC m=+786.120444412 I0425 09:01:08.621188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:08.621506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:01:08.621532 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-25 09:01:08.621525368 +0000 UTC m=+786.136051649 I0425 09:01:08.948125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:01:08.954991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6b76d" condition "Approved" to 2026-04-25 09:01:08.95497763 +0000 UTC m=+786.469503901 I0425 09:01:08.969944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6b76d" condition "Ready" to 2026-04-25 09:01:08.969930227 +0000 UTC m=+786.484456498 I0425 09:01:08.997139 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:01:08.997125866 +0000 UTC m=+786.511652147 I0425 09:01:09.020366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:14.683653 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-25 09:02:14.683640415 +0000 UTC m=+852.198166696 I0425 09:02:14.683801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:02:14.683857 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-25 09:02:14.683845981 +0000 UTC m=+852.198372262 I0425 09:02:14.697968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:14.698081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:02:14.698109 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-25 09:02:14.698101093 +0000 UTC m=+852.212627374 I0425 09:02:14.886771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:14.895543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-bbgvk" condition "Approved" to 2026-04-25 09:02:14.895535464 +0000 UTC m=+852.410061735 I0425 09:02:14.918228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-bbgvk" condition "Ready" to 2026-04-25 09:02:14.91821251 +0000 UTC m=+852.432738821 I0425 09:02:14.952769 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:02:14.95275619 +0000 UTC m=+852.467282471 I0425 09:02:14.970531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:15.022733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:16.007489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:02:16.007497 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-25 09:02:16.007479002 +0000 UTC m=+853.522005313 I0425 09:02:16.007534 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-25 09:02:16.007526774 +0000 UTC m=+853.522053045 I0425 09:02:16.022071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:16.022190 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-25 09:02:16.022182888 +0000 UTC m=+853.536709159 I0425 09:02:16.171142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:16.210163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-n2xnk" condition "Approved" to 2026-04-25 09:02:16.210150186 +0000 UTC m=+853.724676467 I0425 09:02:16.226609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-n2xnk" condition "Ready" to 2026-04-25 09:02:16.226599601 +0000 UTC m=+853.741125872 I0425 09:02:16.267689 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:02:16.26767701 +0000 UTC m=+853.782203291 I0425 09:02:16.288446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:16.288718 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:02:16.288711819 +0000 UTC m=+853.803238090 I0425 09:02:16.297715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:02:16.309156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:22.827660 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-25 09:03:22.827608071 +0000 UTC m=+920.342134372 I0425 09:03:22.827422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:22.827947 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-25 09:03:22.82792962 +0000 UTC m=+920.342455931 I0425 09:03:22.846530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:22.846627 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-25 09:03:22.846617351 +0000 UTC m=+920.361143632 I0425 09:03:22.931514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:22.979455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-gmf7m" condition "Approved" to 2026-04-25 09:03:22.979440983 +0000 UTC m=+920.493967264 I0425 09:03:22.998136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-gmf7m" condition "Ready" to 2026-04-25 09:03:22.998127494 +0000 UTC m=+920.512653775 I0425 09:03:23.037545 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:23.037533194 +0000 UTC m=+920.552059465 I0425 09:03:23.068811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:23.069172 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:23.069162809 +0000 UTC m=+920.583689090 I0425 09:03:23.075678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:23.085987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:23.086263 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:03:23.086254863 +0000 UTC m=+920.600781144 I0425 09:03:23.087595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:57.447435 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-25 09:03:57.447417628 +0000 UTC m=+954.961943919 I0425 09:03:57.454048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:03:57.454110 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-25 09:03:57.454101529 +0000 UTC m=+954.968627820 I0425 09:03:57.525992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:03:57.526088 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-25 09:03:57.526081704 +0000 UTC m=+955.040607985 I0425 09:04:00.734061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:00.778386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-r8sxs" condition "Approved" to 2026-04-25 09:04:00.778377832 +0000 UTC m=+958.292904103 I0425 09:04:00.798927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-r8sxs" condition "Ready" to 2026-04-25 09:04:00.798918708 +0000 UTC m=+958.313444989 I0425 09:04:00.879586 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:00.879572581 +0000 UTC m=+958.394098862 I0425 09:04:00.905056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:00.905592 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:00.905586073 +0000 UTC m=+958.420112344 I0425 09:04:00.921179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:00.921696 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:00.921689123 +0000 UTC m=+958.436215404 I0425 09:04:03.724926 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-25 09:04:03.724905982 +0000 UTC m=+961.239432283 I0425 09:04:03.747324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:04:03.747320 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-25 09:04:03.747282718 +0000 UTC m=+961.261809009 I0425 09:04:03.747352 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-25 09:04:03.74734765 +0000 UTC m=+961.261873921 I0425 09:04:03.763738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:03.763850 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-25 09:04:03.763836669 +0000 UTC m=+961.278362980 E0425 09:04:03.779827 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0425 09:04:03.836316 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-25 09:04:03.83629719 +0000 UTC m=+961.350823471 E0425 09:04:03.844903 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0425 09:04:03.857540 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-25 09:04:03.857524705 +0000 UTC m=+961.372051006 I0425 09:04:03.857720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:04:03.860526 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-25 09:04:03.860496889 +0000 UTC m=+961.375023210 I0425 09:04:03.873029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:03.873125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:04:03.873164 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-25 09:04:03.87315327 +0000 UTC m=+961.387679581 I0425 09:04:04.173014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-54gcg" condition "Approved" to 2026-04-25 09:04:04.172998681 +0000 UTC m=+961.687524962 I0425 09:04:04.198645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-54gcg" condition "Ready" to 2026-04-25 09:04:04.19863334 +0000 UTC m=+961.713159611 I0425 09:04:04.236822 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:04.236808686 +0000 UTC m=+961.751334997 I0425 09:04:04.261978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:04.262431 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:04.262421795 +0000 UTC m=+961.776948076 I0425 09:04:04.289049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:04.289338 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:04.28933093 +0000 UTC m=+961.803857191 I0425 09:04:04.293035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:04.657888 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-25 09:04:04.657873637 +0000 UTC m=+962.172399918 I0425 09:04:04.672826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:04:04.672852 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-25 09:04:04.672847192 +0000 UTC m=+962.187373463 I0425 09:04:04.673088 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-25 09:04:04.673084089 +0000 UTC m=+962.187610360 I0425 09:04:04.700072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:04.700158 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-25 09:04:04.700148129 +0000 UTC m=+962.214674410 I0425 09:04:05.094779 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-25 09:04:05.094753437 +0000 UTC m=+962.609279748 I0425 09:04:05.124558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:04:05.124609 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-25 09:04:05.124597385 +0000 UTC m=+962.639123686 I0425 09:04:05.124800 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-25 09:04:05.124628836 +0000 UTC m=+962.639155127 I0425 09:04:05.150498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:05.150828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:04:05.150873 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-25 09:04:05.150862363 +0000 UTC m=+962.665388664 I0425 09:04:05.259571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:05.308676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bxv4p" condition "Approved" to 2026-04-25 09:04:05.308662833 +0000 UTC m=+962.823189104 I0425 09:04:05.380103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bxv4p" condition "Ready" to 2026-04-25 09:04:05.380090765 +0000 UTC m=+962.894617036 I0425 09:04:05.422884 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:05.422872562 +0000 UTC m=+962.937398833 I0425 09:04:05.459019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:05.459296 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:05.459291638 +0000 UTC m=+962.973817909 I0425 09:04:05.481361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:05.481675 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:05.481666335 +0000 UTC m=+962.996192616 I0425 09:04:05.629186 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-25 09:04:05.629171381 +0000 UTC m=+963.143697652 I0425 09:04:05.649776 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-25 09:04:05.649764448 +0000 UTC m=+963.164290729 I0425 09:04:05.650265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:04:05.650310 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-25 09:04:05.650305483 +0000 UTC m=+963.164831764 I0425 09:04:05.668565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:05.668633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:04:05.668655 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-25 09:04:05.668650915 +0000 UTC m=+963.183177196 I0425 09:04:05.749443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-k6b8r" condition "Approved" to 2026-04-25 09:04:05.749430803 +0000 UTC m=+963.263957084 I0425 09:04:05.769473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-k6b8r" condition "Ready" to 2026-04-25 09:04:05.769461244 +0000 UTC m=+963.283987525 I0425 09:04:05.814117 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:05.814102463 +0000 UTC m=+963.328628734 I0425 09:04:05.844456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:05.990388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:06.184485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:06.244356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-w2z5d" condition "Approved" to 2026-04-25 09:04:06.244339605 +0000 UTC m=+963.758865876 I0425 09:04:06.346348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-w2z5d" condition "Ready" to 2026-04-25 09:04:06.346336996 +0000 UTC m=+963.860863267 I0425 09:04:06.793061 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:06.793043667 +0000 UTC m=+964.307569978 I0425 09:04:06.934716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:04:06.934961 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:04:06.934955164 +0000 UTC m=+964.449481435 I0425 09:04:07.133167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:56.756879 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-25 09:06:56.756822591 +0000 UTC m=+1134.271348882 I0425 09:06:56.756948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:06:56.757006 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-25 09:06:56.756998946 +0000 UTC m=+1134.271525227 I0425 09:06:56.773428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:56.773521 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-25 09:06:56.773514537 +0000 UTC m=+1134.288040828 I0425 09:06:57.052137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:57.081677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-fk679" condition "Approved" to 2026-04-25 09:06:57.081662251 +0000 UTC m=+1134.596188562 I0425 09:06:57.099224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-fk679" condition "Ready" to 2026-04-25 09:06:57.099216421 +0000 UTC m=+1134.613742692 I0425 09:06:57.126299 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:57.126286104 +0000 UTC m=+1134.640812375 I0425 09:06:57.150977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:57.151368 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:57.15136184 +0000 UTC m=+1134.665888111 I0425 09:06:57.166131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:57.166345 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:57.166339267 +0000 UTC m=+1134.680865528 I0425 09:06:58.142137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 09:06:58.142178 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-25 09:06:58.142168454 +0000 UTC m=+1135.656694755 I0425 09:06:58.142413 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-25 09:06:58.142399391 +0000 UTC m=+1135.656925672 I0425 09:06:58.157999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:58.158094 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-25 09:06:58.158085518 +0000 UTC m=+1135.672611819 I0425 09:06:58.225155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:58.264022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-pwfkc" condition "Approved" to 2026-04-25 09:06:58.264004631 +0000 UTC m=+1135.778530942 I0425 09:06:58.290729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-pwfkc" condition "Ready" to 2026-04-25 09:06:58.290706023 +0000 UTC m=+1135.805232324 I0425 09:06:58.325603 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:58.325588828 +0000 UTC m=+1135.840115109 I0425 09:06:58.341862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 09:06:58.342102 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 09:06:58.342044368 +0000 UTC m=+1135.856570639 I0425 09:06:58.359506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"