I0714 22:59:24.991345 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0714 22:59:24.991470 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0714 22:59:24.991555 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0714 22:59:24.995383 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0714 22:59:24.995821 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0714 22:59:24.995882 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0714 22:59:24.995971 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0714 22:59:24.998445 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0714 22:59:25.034141 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0714 22:59:25.042831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0714 22:59:25.046549 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0714 22:59:25.046586 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0714 22:59:25.046600 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0714 22:59:25.046601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0714 22:59:25.049690 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0714 22:59:25.052500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0714 22:59:25.054421 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0714 22:59:25.056398 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0714 22:59:25.056420 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0714 22:59:25.056548 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0714 22:59:25.061491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0714 22:59:25.065847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0714 22:59:25.069049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0714 22:59:25.071569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0714 22:59:25.076179 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0714 22:59:25.080112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0714 22:59:25.082315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0714 22:59:25.084073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0714 22:59:25.089342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0714 22:59:25.093689 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0714 22:59:25.093807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0714 22:59:25.096837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0714 22:59:25.099090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0714 22:59:25.101670 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.102227 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.102737 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.103470 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.126618 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.146564 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.170076 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.181159 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.190927 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:25.211181 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0714 22:59:37.410004 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-14 22:59:37.40997499 +0000 UTC m=+12.457548569 I0714 22:59:38.147909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 22:59:38.148001 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-14 22:59:38.14798574 +0000 UTC m=+13.195559269 I0714 22:59:38.148075 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 22:59:38.148056481 +0000 UTC m=+13.195630050 E0714 22:59:38.171290 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 22:59:38.171418 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-14 22:59:38.171404607 +0000 UTC m=+13.218978176 E0714 22:59:38.171457 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 22:59:38.176161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 22:59:38.176278 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 22:59:38.176313 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-14 22:59:38.176300359 +0000 UTC m=+13.223873918 E0714 22:59:38.189237 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0714 22:59:38.189376 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 22:59:38.189417 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 22:59:38.189463 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0714 22:59:38.221744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 22:59:38.255319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xcl84" condition "Approved" to 2026-07-14 22:59:38.255303992 +0000 UTC m=+13.302877561 I0714 22:59:38.268729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xcl84" condition "Ready" to 2026-07-14 22:59:38.268712599 +0000 UTC m=+13.316286168 I0714 22:59:38.312876 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 22:59:38.31277775 +0000 UTC m=+13.360351289 I0714 22:59:38.353854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 22:59:38.404560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 22:59:43.190533 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 22:59:43.190516606 +0000 UTC m=+18.238090165 I0714 23:00:04.528951 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-14 23:00:04.528931064 +0000 UTC m=+39.576504623 I0714 23:00:04.529135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:00:04.529254 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 23:00:04.529238612 +0000 UTC m=+39.576812211 I0714 23:00:04.577220 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-14 23:00:04.577200918 +0000 UTC m=+39.624774457 I0714 23:00:04.583331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:00:04.583442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:00:04.583474 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-14 23:00:04.583465565 +0000 UTC m=+39.631039104 I0714 23:00:04.773790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:00:04.780502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zfn8r" condition "Approved" to 2026-07-14 23:00:04.78048276 +0000 UTC m=+39.828056319 I0714 23:00:04.817083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zfn8r" condition "Ready" to 2026-07-14 23:00:04.817070899 +0000 UTC m=+39.864644438 I0714 23:00:04.862505 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:00:04.862473845 +0000 UTC m=+39.910047404 I0714 23:00:04.889641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:00:04.890004 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:00:04.889995631 +0000 UTC m=+39.937569170 I0714 23:00:04.918007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:05:04.716965 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready" to 2026-07-14 23:05:04.716931392 +0000 UTC m=+339.764504931 I0714 23:05:04.717142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:05:04.717320 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-07-14 23:05:04.71731223 +0000 UTC m=+339.764885759 I0714 23:05:04.749354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:05:04.749606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:05:04.749760 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Issuing" to 2026-07-14 23:05:04.749744207 +0000 UTC m=+339.797317826 I0714 23:05:05.079389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:05:05.093283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-crc4l" condition "Approved" to 2026-07-14 23:05:05.093269085 +0000 UTC m=+340.140842654 I0714 23:05:05.123829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-144.nip.io-tls-crc4l" condition "Ready" to 2026-07-14 23:05:05.123812878 +0000 UTC m=+340.171386437 I0714 23:05:05.152825 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:05:05.152813355 +0000 UTC m=+340.200386884 I0714 23:05:05.175979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:05:05.176557 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:05:05.176546412 +0000 UTC m=+340.224119981 I0714 23:05:05.194358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:05:05.194647 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:05:05.194641808 +0000 UTC m=+340.242215347 I0714 23:06:13.704251 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-14 23:06:13.704203382 +0000 UTC m=+408.751776961 I0714 23:06:13.704802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:06:13.704907 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 23:06:13.704894778 +0000 UTC m=+408.752468337 E0714 23:06:13.717690 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 23:06:13.717781 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-14 23:06:13.717769766 +0000 UTC m=+408.765343305 E0714 23:06:13.717810 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0714 23:06:13.721038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:13.721206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:06:13.721258 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-14 23:06:13.721230826 +0000 UTC m=+408.768804365 E0714 23:06:13.731095 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0714 23:06:13.731345 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 23:06:13.731438 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0714 23:06:13.732298 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0714 23:06:13.763511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:13.764470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j82dj" condition "Approved" to 2026-07-14 23:06:13.764449098 +0000 UTC m=+408.812022667 I0714 23:06:13.777314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-j82dj" condition "Ready" to 2026-07-14 23:06:13.777305066 +0000 UTC m=+408.824878605 I0714 23:06:13.805822 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:06:13.805798516 +0000 UTC m=+408.853372075 I0714 23:06:13.823115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:13.823771 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:06:13.823762152 +0000 UTC m=+408.871335691 I0714 23:06:13.837959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:13.844095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:13.844534 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:06:13.844520653 +0000 UTC m=+408.892094212 I0714 23:06:18.732174 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:06:18.732161421 +0000 UTC m=+413.779734980 I0714 23:06:58.864694 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 23:06:58.864674735 +0000 UTC m=+453.912248274 I0714 23:06:58.865049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:06:58.865110 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-14 23:06:58.865104685 +0000 UTC m=+453.912678224 I0714 23:06:58.864760 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 23:06:58.864739756 +0000 UTC m=+453.912313295 I0714 23:06:58.865634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:06:58.865739 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-14 23:06:58.865732159 +0000 UTC m=+453.913305698 I0714 23:06:58.865840 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 23:06:58.865833321 +0000 UTC m=+453.913406860 I0714 23:06:58.864847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:06:58.865986 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-14 23:06:58.865963174 +0000 UTC m=+453.913536713 I0714 23:06:58.916715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:58.916817 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-14 23:06:58.916809272 +0000 UTC m=+453.964382791 I0714 23:06:58.917230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:58.917266 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-14 23:06:58.917263224 +0000 UTC m=+453.964836753 I0714 23:06:58.917332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:58.917482 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-14 23:06:58.917473208 +0000 UTC m=+453.965046757 I0714 23:06:59.139695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:59.179031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cxlpl" condition "Approved" to 2026-07-14 23:06:59.179018418 +0000 UTC m=+454.226591957 I0714 23:06:59.212458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cxlpl" condition "Ready" to 2026-07-14 23:06:59.212446403 +0000 UTC m=+454.260019932 I0714 23:06:59.245077 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:06:59.245062799 +0000 UTC m=+454.292636338 I0714 23:06:59.276059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:59.276334 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:06:59.276328634 +0000 UTC m=+454.323902163 I0714 23:06:59.309235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:59.446480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:59.526650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k822t" condition "Approved" to 2026-07-14 23:06:59.526613353 +0000 UTC m=+454.574186892 I0714 23:06:59.532075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:59.564407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k822t" condition "Ready" to 2026-07-14 23:06:59.564391749 +0000 UTC m=+454.611965268 I0714 23:06:59.597239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gwlzr" condition "Approved" to 2026-07-14 23:06:59.597220189 +0000 UTC m=+454.644793748 I0714 23:06:59.624734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gwlzr" condition "Ready" to 2026-07-14 23:06:59.624720906 +0000 UTC m=+454.672294445 I0714 23:06:59.758911 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:06:59.758894166 +0000 UTC m=+454.806467705 I0714 23:06:59.997611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:06:59.998266 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:06:59.998255492 +0000 UTC m=+455.045829051 I0714 23:07:00.045884 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:07:00.045863876 +0000 UTC m=+455.093437435 I0714 23:07:00.341288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:00.341931 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:07:00.341921395 +0000 UTC m=+455.389494924 I0714 23:07:00.389944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:00.458071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:00.970568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:17.376707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:07:17.376741 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" condition "Issuing" to 2026-07-14 23:07:17.376733698 +0000 UTC m=+472.424307227 I0714 23:07:17.377237 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" condition "Ready" to 2026-07-14 23:07:17.377232179 +0000 UTC m=+472.424805708 I0714 23:07:17.399313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vznk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:17.399426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:07:17.399455 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" condition "Issuing" to 2026-07-14 23:07:17.399446324 +0000 UTC m=+472.447019863 I0714 23:07:17.676085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9vznk-vcd49" condition "Approved" to 2026-07-14 23:07:17.676067894 +0000 UTC m=+472.723641433 I0714 23:07:17.701955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9vznk-vcd49" condition "Ready" to 2026-07-14 23:07:17.701939544 +0000 UTC m=+472.749513083 I0714 23:07:17.750199 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:07:17.750183421 +0000 UTC m=+472.797756960 I0714 23:07:17.777613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vznk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:07:17.777891 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:07:17.777882013 +0000 UTC m=+472.825455542 I0714 23:07:17.861544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9vznk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9vznk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:12.929227 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 23:08:12.929146844 +0000 UTC m=+527.976720403 I0714 23:08:12.929404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:08:12.929473 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-14 23:08:12.929459482 +0000 UTC m=+527.977033051 I0714 23:08:13.003504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:13.003673 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-14 23:08:13.003641236 +0000 UTC m=+528.051214815 I0714 23:08:13.349586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:13.666752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wvlch" condition "Approved" to 2026-07-14 23:08:13.666724776 +0000 UTC m=+528.714298355 I0714 23:08:13.861507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wvlch" condition "Ready" to 2026-07-14 23:08:13.861488362 +0000 UTC m=+528.909061931 I0714 23:08:14.158870 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:08:14.158849607 +0000 UTC m=+529.206423166 I0714 23:08:14.181795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:14.182204 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:08:14.182192254 +0000 UTC m=+529.229765823 I0714 23:08:14.195809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:14.199780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:08:14.200302 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:08:14.200287729 +0000 UTC m=+529.247861288 I0714 23:08:14.200382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:11:35.474716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:11:35.474868 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-14 23:11:35.474839279 +0000 UTC m=+730.522412848 I0714 23:11:35.474901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-14 23:11:35.47487784 +0000 UTC m=+730.522451399 I0714 23:11:35.499123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:11:35.499239 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-14 23:11:35.499226807 +0000 UTC m=+730.546800346 I0714 23:11:35.901242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:11:35.985791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pn8n6" condition "Approved" to 2026-07-14 23:11:35.985777902 +0000 UTC m=+731.033351441 I0714 23:11:36.056575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pn8n6" condition "Ready" to 2026-07-14 23:11:36.056558363 +0000 UTC m=+731.104131902 I0714 23:11:36.150853 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:11:36.150837083 +0000 UTC m=+731.198410642 I0714 23:11:36.193834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:11:36.194359 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:11:36.19435151 +0000 UTC m=+731.241925049 I0714 23:11:36.200688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:11:36.226951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:14:02.668632 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-14 23:14:02.668617109 +0000 UTC m=+877.716190648 I0714 23:14:02.668827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:14:02.668880 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-14 23:14:02.668870464 +0000 UTC m=+877.716444013 I0714 23:14:02.687628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:14:02.687778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:14:02.687816 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-14 23:14:02.687804379 +0000 UTC m=+877.735377928 I0714 23:14:03.066511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-87dbn" condition "Approved" to 2026-07-14 23:14:03.066494982 +0000 UTC m=+878.114068541 I0714 23:14:03.087230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-87dbn" condition "Ready" to 2026-07-14 23:14:03.087218738 +0000 UTC m=+878.134792277 I0714 23:14:03.110899 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:14:03.110889051 +0000 UTC m=+878.158462590 I0714 23:14:03.129256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:14:03.129928 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:14:03.129921048 +0000 UTC m=+878.177494587 I0714 23:14:03.134598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:14:03.149827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:15:28.606521 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-14 23:15:28.606453179 +0000 UTC m=+963.654026728 I0714 23:15:28.606788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:15:28.606834 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-14 23:15:28.606829858 +0000 UTC m=+963.654403397 I0714 23:15:28.693822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:15:28.693917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:15:28.693942 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-14 23:15:28.693932377 +0000 UTC m=+963.741505946 I0714 23:15:28.994426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:15:29.026350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-nwqzp" condition "Approved" to 2026-07-14 23:15:29.026340258 +0000 UTC m=+964.073913787 I0714 23:15:29.089107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-nwqzp" condition "Ready" to 2026-07-14 23:15:29.089093609 +0000 UTC m=+964.136667148 I0714 23:15:29.140479 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:15:29.140464428 +0000 UTC m=+964.188037987 I0714 23:15:29.171707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:18:54.700455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:18:54.700779 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-14 23:18:54.700723036 +0000 UTC m=+1169.748296605 I0714 23:18:54.700852 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-14 23:18:54.700841259 +0000 UTC m=+1169.748414808 I0714 23:18:54.719091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:18:54.719156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:18:54.719178 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-14 23:18:54.71917042 +0000 UTC m=+1169.766743949 I0714 23:18:54.923643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-j7z27" condition "Approved" to 2026-07-14 23:18:54.923625242 +0000 UTC m=+1169.971198771 I0714 23:18:54.943713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-j7z27" condition "Ready" to 2026-07-14 23:18:54.943699403 +0000 UTC m=+1169.991272942 I0714 23:18:54.974620 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:18:54.974603392 +0000 UTC m=+1170.022176921 I0714 23:18:54.997618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:18:54.997945 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:18:54.997936407 +0000 UTC m=+1170.045509946 I0714 23:18:55.010141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:18:55.029804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:26:56.401300 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-14 23:26:56.401255789 +0000 UTC m=+1651.448829358 I0714 23:26:56.401366 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:26:56.401459 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-14 23:26:56.401448374 +0000 UTC m=+1651.449021933 I0714 23:26:56.419778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:26:56.419910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:26:56.419941 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-14 23:26:56.419934484 +0000 UTC m=+1651.467508013 I0714 23:26:56.806502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-lfz4s" condition "Approved" to 2026-07-14 23:26:56.806483674 +0000 UTC m=+1651.854057253 I0714 23:26:56.826559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-lfz4s" condition "Ready" to 2026-07-14 23:26:56.826541872 +0000 UTC m=+1651.874115401 I0714 23:26:56.855378 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:26:56.855360219 +0000 UTC m=+1651.902933758 I0714 23:26:56.883368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:26:56.939972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:28:29.724903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:28:29.725015 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-14 23:28:29.724983219 +0000 UTC m=+1744.772556758 I0714 23:28:29.725581 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-14 23:28:29.725557682 +0000 UTC m=+1744.773131211 I0714 23:28:29.747694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:28:29.747833 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-14 23:28:29.7478219 +0000 UTC m=+1744.795395439 I0714 23:28:29.982027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:28:30.024346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-7pqxh" condition "Approved" to 2026-07-14 23:28:30.024330261 +0000 UTC m=+1745.071903800 I0714 23:28:30.045511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-7pqxh" condition "Ready" to 2026-07-14 23:28:30.045491484 +0000 UTC m=+1745.093065043 I0714 23:28:30.075460 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:28:30.075444585 +0000 UTC m=+1745.123018134 I0714 23:28:30.098159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:28:30.098665 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:28:30.098654835 +0000 UTC m=+1745.146228384 I0714 23:28:30.121452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:34.811720 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-14 23:29:34.811699041 +0000 UTC m=+1809.859272580 I0714 23:29:34.812824 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:29:34.812886 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-14 23:29:34.812879829 +0000 UTC m=+1809.860453368 I0714 23:29:34.829232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:34.829295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:29:34.829346 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-14 23:29:34.829341494 +0000 UTC m=+1809.876915033 I0714 23:29:34.878011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:34.883988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-gcdxp" condition "Approved" to 2026-07-14 23:29:34.883972957 +0000 UTC m=+1809.931546496 I0714 23:29:34.905609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-gcdxp" condition "Ready" to 2026-07-14 23:29:34.90559607 +0000 UTC m=+1809.953169589 I0714 23:29:34.932645 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:29:34.932623025 +0000 UTC m=+1809.980196564 I0714 23:29:34.953814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:35.008717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:35.500817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:29:35.500878 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-14 23:29:35.500867456 +0000 UTC m=+1810.548440995 I0714 23:29:35.500940 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-14 23:29:35.500912977 +0000 UTC m=+1810.548486546 I0714 23:29:35.524259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:35.524342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:29:35.524366 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-14 23:29:35.524357312 +0000 UTC m=+1810.571930851 I0714 23:29:35.569447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:35.578090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-jf4jc" condition "Approved" to 2026-07-14 23:29:35.578067445 +0000 UTC m=+1810.625640984 I0714 23:29:35.601340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-jf4jc" condition "Ready" to 2026-07-14 23:29:35.601323804 +0000 UTC m=+1810.648897343 I0714 23:29:35.638688 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:29:35.638668614 +0000 UTC m=+1810.686242143 I0714 23:29:35.667334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:35.667796 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:29:35.667787138 +0000 UTC m=+1810.715360677 I0714 23:29:35.676525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:35.687017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:29:36.231893 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-14 23:29:36.231878924 +0000 UTC m=+1811.279452473 I0714 23:29:36.924342 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-14 23:29:36.924328474 +0000 UTC m=+1811.971902003 I0714 23:30:23.846930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:30:23.846974 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-14 23:30:23.846965518 +0000 UTC m=+1858.894539057 I0714 23:30:23.847751 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-14 23:30:23.847744937 +0000 UTC m=+1858.895318476 I0714 23:30:23.898481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:30:23.899659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:30:23.902497 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-14 23:30:23.902481282 +0000 UTC m=+1858.950054891 I0714 23:30:24.612443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:30:24.635033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-jjz6m" condition "Approved" to 2026-07-14 23:30:24.635019846 +0000 UTC m=+1859.682593375 I0714 23:30:24.672260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-jjz6m" condition "Ready" to 2026-07-14 23:30:24.672246423 +0000 UTC m=+1859.719819962 I0714 23:30:24.710990 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:30:24.710968775 +0000 UTC m=+1859.758542314 I0714 23:30:24.747186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:30:24.848053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:21.297542 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:33:21.297568 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-14 23:33:21.297532576 +0000 UTC m=+2036.345106115 I0714 23:33:21.297639 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-14 23:33:21.297630759 +0000 UTC m=+2036.345204298 I0714 23:33:21.323426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:21.323612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:33:21.323685 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-14 23:33:21.323673223 +0000 UTC m=+2036.371246782 I0714 23:33:21.691888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:21.703879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-n9gxc" condition "Approved" to 2026-07-14 23:33:21.70386936 +0000 UTC m=+2036.751442899 I0714 23:33:21.723789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-n9gxc" condition "Ready" to 2026-07-14 23:33:21.723771465 +0000 UTC m=+2036.771345014 I0714 23:33:21.754708 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:33:21.754690688 +0000 UTC m=+2036.802264227 I0714 23:33:21.770827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:21.771299 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:33:21.771289085 +0000 UTC m=+2036.818862614 I0714 23:33:21.795443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:21.801681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:22.969643 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-14 23:33:22.969624787 +0000 UTC m=+2038.017198326 I0714 23:33:22.969884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:33:22.969956 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-14 23:33:22.969941934 +0000 UTC m=+2038.017515503 I0714 23:33:22.989202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:22.989465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:33:22.989508 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-14 23:33:22.989495929 +0000 UTC m=+2038.037069498 I0714 23:33:23.276123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:23.282030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-xsttt" condition "Approved" to 2026-07-14 23:33:23.282015562 +0000 UTC m=+2038.329589101 I0714 23:33:23.307314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-xsttt" condition "Ready" to 2026-07-14 23:33:23.307298077 +0000 UTC m=+2038.354871616 I0714 23:33:23.342758 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:33:23.342734424 +0000 UTC m=+2038.390307973 I0714 23:33:23.362699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:33:23.363181 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:33:23.36316858 +0000 UTC m=+2038.410742119 I0714 23:33:23.389763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:37:02.907387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:37:02.907482 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-14 23:37:02.907472324 +0000 UTC m=+2257.955045853 I0714 23:37:02.907370 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-14 23:37:02.90726702 +0000 UTC m=+2257.954840579 I0714 23:37:02.969282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:37:02.969389 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-14 23:37:02.969381363 +0000 UTC m=+2258.016954892 I0714 23:37:03.165197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:37:03.203258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-wql8z" condition "Approved" to 2026-07-14 23:37:03.203244464 +0000 UTC m=+2258.250817993 I0714 23:37:03.222876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-wql8z" condition "Ready" to 2026-07-14 23:37:03.22286332 +0000 UTC m=+2258.270436839 I0714 23:37:03.263515 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:37:03.263497614 +0000 UTC m=+2258.311071183 I0714 23:37:03.295196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:38:06.341030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-79s7q-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:38:06.341081 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-79s7q-api" condition "Issuing" to 2026-07-14 23:38:06.341068676 +0000 UTC m=+2321.388642235 I0714 23:38:06.346316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-79s7q-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:38:06.346377 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-79s7q-vnc" condition "Issuing" to 2026-07-14 23:38:06.346361717 +0000 UTC m=+2321.393935306 I0714 23:38:06.346796 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-79s7q-vnc" condition "Ready" to 2026-07-14 23:38:06.346767866 +0000 UTC m=+2321.394341425 I0714 23:38:06.347931 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-79s7q-api" condition "Ready" to 2026-07-14 23:38:06.347916592 +0000 UTC m=+2321.395490151 I0714 23:38:06.489643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-79s7q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-79s7q-api\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:38:06.489794 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-79s7q-api" condition "Ready" to 2026-07-14 23:38:06.48978501 +0000 UTC m=+2321.537358529 I0714 23:38:06.494949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-79s7q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-79s7q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:38:06.495083 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-79s7q-vnc" condition "Ready" to 2026-07-14 23:38:06.49507436 +0000 UTC m=+2321.542647889 I0714 23:38:06.596994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-79s7q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-79s7q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:38:06.647587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-79s7q-vnc-ld958" condition "Approved" to 2026-07-14 23:38:06.64757319 +0000 UTC m=+2321.695146719 I0714 23:38:06.712837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-79s7q-vnc-ld958" condition "Ready" to 2026-07-14 23:38:06.712822044 +0000 UTC m=+2321.760395583 I0714 23:38:06.779654 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-79s7q-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:38:06.779629504 +0000 UTC m=+2321.827203063 I0714 23:38:06.842585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-79s7q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-79s7q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:38:06.849297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-79s7q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-79s7q-api\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:38:07.100596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-79s7q-api-xrvqw" condition "Approved" to 2026-07-14 23:38:07.100581918 +0000 UTC m=+2322.148155447 I0714 23:38:07.192613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-79s7q-api-xrvqw" condition "Ready" to 2026-07-14 23:38:07.192594841 +0000 UTC m=+2322.240168400 I0714 23:38:07.251116 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-79s7q-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:38:07.251095752 +0000 UTC m=+2322.298669291 I0714 23:38:07.276955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-79s7q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-79s7q-api\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:40:16.354637 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-07-14 23:40:16.354596118 +0000 UTC m=+2451.402169667 I0714 23:40:16.355252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:40:16.355282 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-07-14 23:40:16.355277724 +0000 UTC m=+2451.402851273 I0714 23:40:16.384950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:40:16.385085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:40:16.385113 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-07-14 23:40:16.385105812 +0000 UTC m=+2451.432679351 I0714 23:40:16.603901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-4lphl" condition "Approved" to 2026-07-14 23:40:16.60388782 +0000 UTC m=+2451.651461349 I0714 23:40:16.640878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-4lphl" condition "Ready" to 2026-07-14 23:40:16.640864032 +0000 UTC m=+2451.688437561 I0714 23:40:16.697948 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:40:16.69792476 +0000 UTC m=+2451.745498299 I0714 23:40:16.731366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:40:16.733147 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:40:16.733138742 +0000 UTC m=+2451.780712261 I0714 23:40:16.743737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:40:16.743978 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:40:16.743971787 +0000 UTC m=+2451.791545326 I0714 23:40:16.744438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:04.328496 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-14 23:44:04.328451779 +0000 UTC m=+2679.376025338 I0714 23:44:04.329353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:44:04.341349 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-14 23:44:04.341331871 +0000 UTC m=+2679.388905430 I0714 23:44:04.359212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:04.359330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:44:04.359372 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-14 23:44:04.359361662 +0000 UTC m=+2679.406935201 I0714 23:44:04.601429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-f7d5t" condition "Approved" to 2026-07-14 23:44:04.601415049 +0000 UTC m=+2679.648988588 I0714 23:44:04.627283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-f7d5t" condition "Ready" to 2026-07-14 23:44:04.627267587 +0000 UTC m=+2679.674841146 I0714 23:44:04.662717 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:44:04.662703564 +0000 UTC m=+2679.710277103 I0714 23:44:04.687386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:04.687877 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:44:04.687865346 +0000 UTC m=+2679.735438885 I0714 23:44:04.715940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:06.094556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:44:06.094562 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-14 23:44:06.094535322 +0000 UTC m=+2681.142108861 I0714 23:44:06.094619 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-14 23:44:06.094607834 +0000 UTC m=+2681.142181373 I0714 23:44:06.115908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:06.116039 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-14 23:44:06.116029782 +0000 UTC m=+2681.163603321 I0714 23:44:06.270505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:06.306219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-c958g" condition "Approved" to 2026-07-14 23:44:06.306194809 +0000 UTC m=+2681.353768388 I0714 23:44:06.335322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-c958g" condition "Ready" to 2026-07-14 23:44:06.335307351 +0000 UTC m=+2681.382880880 I0714 23:44:06.393750 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:44:06.39373125 +0000 UTC m=+2681.441304789 I0714 23:44:06.425532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:06.425931 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:44:06.425923242 +0000 UTC m=+2681.473496771 I0714 23:44:06.468412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:06.469135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:44:06.469407 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:44:06.469401042 +0000 UTC m=+2681.516974571 I0714 23:46:56.342697 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-14 23:46:56.342677521 +0000 UTC m=+2851.390251060 I0714 23:46:56.343265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:46:56.343342 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-14 23:46:56.343330976 +0000 UTC m=+2851.390904515 E0714 23:46:56.362150 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0714 23:46:56.362229 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-14 23:46:56.362221106 +0000 UTC m=+2851.409794645 I0714 23:46:56.362253 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0714 23:46:56.364901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:56.366100 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-14 23:46:56.366078085 +0000 UTC m=+2851.413651654 E0714 23:46:56.374760 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0714 23:46:56.374875 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0714 23:46:56.374908 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0714 23:46:56.380016 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0714 23:46:56.388288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:56.423744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-mtqtd" condition "Approved" to 2026-07-14 23:46:56.423726947 +0000 UTC m=+2851.471300486 I0714 23:46:56.444948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-mtqtd" condition "Ready" to 2026-07-14 23:46:56.44493444 +0000 UTC m=+2851.492507959 I0714 23:46:56.481872 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:46:56.481858681 +0000 UTC m=+2851.529432220 I0714 23:46:56.506053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:56.506449 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:46:56.506441591 +0000 UTC m=+2851.554015120 I0714 23:46:56.545466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:57.106223 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-14 23:46:57.106202238 +0000 UTC m=+2852.153775767 I0714 23:46:57.106678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:46:57.106744 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-14 23:46:57.10673064 +0000 UTC m=+2852.154304209 E0714 23:46:57.136063 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0714 23:46:57.136110 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-14 23:46:57.136102269 +0000 UTC m=+2852.183675818 I0714 23:46:57.136155 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0714 23:46:57.140993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:57.141104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:46:57.141122 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-14 23:46:57.141115573 +0000 UTC m=+2852.188689122 E0714 23:46:57.152359 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0714 23:46:57.152665 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0714 23:46:57.152727 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0714 23:46:57.152762 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0714 23:46:57.206313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-mp5sx" condition "Approved" to 2026-07-14 23:46:57.206299358 +0000 UTC m=+2852.253872897 I0714 23:46:57.224315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-mp5sx" condition "Ready" to 2026-07-14 23:46:57.224299667 +0000 UTC m=+2852.271873216 I0714 23:46:57.274421 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:46:57.274400288 +0000 UTC m=+2852.321973817 I0714 23:46:57.302746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:57.364237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:57.948971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:46:57.949021 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-14 23:46:57.94900877 +0000 UTC m=+2852.996582329 I0714 23:46:57.949864 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-14 23:46:57.949854849 +0000 UTC m=+2852.997428408 I0714 23:46:57.969449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:57.969506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:46:57.969524 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-14 23:46:57.969519146 +0000 UTC m=+2853.017092675 I0714 23:46:58.027720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:46:58.033690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-tglgj" condition "Approved" to 2026-07-14 23:46:58.033675318 +0000 UTC m=+2853.081248857 I0714 23:46:58.050138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-tglgj" condition "Ready" to 2026-07-14 23:46:58.050123662 +0000 UTC m=+2853.097697201 I0714 23:47:01.376297 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:47:01.376265612 +0000 UTC m=+2856.423839151 I0714 23:47:01.399229 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-tglgj" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:47:01.399207544 +0000 UTC m=+2856.446781103 I0714 23:47:01.437872 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:47:01.437852715 +0000 UTC m=+2856.485426274 I0714 23:47:01.470680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:47:01.470977 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:47:01.470967319 +0000 UTC m=+2856.518540858 I0714 23:47:01.486998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:47:01.487216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:47:01.487603 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:47:01.487593617 +0000 UTC m=+2856.535167146 I0714 23:47:02.153169 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:47:02.153149672 +0000 UTC m=+2857.200723211 I0714 23:49:19.290379 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-14 23:49:19.290333871 +0000 UTC m=+2994.337907430 I0714 23:49:19.290965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:49:19.291000 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-14 23:49:19.290993446 +0000 UTC m=+2994.338567015 I0714 23:49:19.311702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:49:19.311816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:49:19.311847 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-14 23:49:19.311837051 +0000 UTC m=+2994.359410620 I0714 23:49:19.479620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-v29ls" condition "Approved" to 2026-07-14 23:49:19.479604571 +0000 UTC m=+2994.527178110 I0714 23:49:19.504912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-v29ls" condition "Ready" to 2026-07-14 23:49:19.504896587 +0000 UTC m=+2994.552470136 I0714 23:49:19.535561 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:49:19.535543085 +0000 UTC m=+2994.583116624 I0714 23:49:19.558150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:10.255594 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-14 23:50:10.255565817 +0000 UTC m=+3045.303139356 I0714 23:50:10.280410 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-14 23:50:10.280389392 +0000 UTC m=+3045.327962931 I0714 23:50:10.280851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:10.280963 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-14 23:50:10.280950545 +0000 UTC m=+3045.328524094 I0714 23:50:10.315973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:10.316086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:10.316114 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-14 23:50:10.316103135 +0000 UTC m=+3045.363676684 E0714 23:50:10.318402 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0714 23:50:10.394510 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-14 23:50:10.39448672 +0000 UTC m=+3045.442060260 I0714 23:50:10.413978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:10.414027 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-14 23:50:10.414015704 +0000 UTC m=+3045.461589243 I0714 23:50:10.414111 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-14 23:50:10.414086417 +0000 UTC m=+3045.461659986 I0714 23:50:10.433554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:10.433756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:10.433827 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-14 23:50:10.433813716 +0000 UTC m=+3045.481387275 E0714 23:50:10.479089 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0714 23:50:10.710598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:10.733147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-l2kdd" condition "Approved" to 2026-07-14 23:50:10.733134751 +0000 UTC m=+3045.780708280 I0714 23:50:10.761085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-l2kdd" condition "Ready" to 2026-07-14 23:50:10.761073267 +0000 UTC m=+3045.808646796 I0714 23:50:10.818395 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:50:10.818375553 +0000 UTC m=+3045.865949092 I0714 23:50:10.866106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:11.566581 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-14 23:50:11.566558789 +0000 UTC m=+3046.614132308 I0714 23:50:11.607367 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-14 23:50:11.607349598 +0000 UTC m=+3046.654923127 I0714 23:50:11.607405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:11.607444 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-14 23:50:11.607434559 +0000 UTC m=+3046.655008098 I0714 23:50:11.637999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:11.638079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:11.638100 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-14 23:50:11.638092018 +0000 UTC m=+3046.685665557 I0714 23:50:12.103736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-q56pg" condition "Approved" to 2026-07-14 23:50:12.103715091 +0000 UTC m=+3047.151288630 I0714 23:50:12.137671 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-14 23:50:12.137653244 +0000 UTC m=+3047.185226773 I0714 23:50:12.144695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-q56pg" condition "Ready" to 2026-07-14 23:50:12.144683634 +0000 UTC m=+3047.192257163 I0714 23:50:12.162248 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-14 23:50:12.162236054 +0000 UTC m=+3047.209809583 I0714 23:50:12.162551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:12.162580 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-14 23:50:12.162568261 +0000 UTC m=+3047.210141790 I0714 23:50:12.195160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.195225 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-14 23:50:12.195217854 +0000 UTC m=+3047.242791383 I0714 23:50:12.211708 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:50:12.211693459 +0000 UTC m=+3047.259266988 I0714 23:50:12.263596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.263976 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:50:12.26396882 +0000 UTC m=+3047.311542349 I0714 23:50:12.291387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.294161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.294641 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:50:12.294633089 +0000 UTC m=+3047.342206618 I0714 23:50:12.487584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.542909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-x7kcb" condition "Approved" to 2026-07-14 23:50:12.542885781 +0000 UTC m=+3047.590459320 I0714 23:50:12.580348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-x7kcb" condition "Ready" to 2026-07-14 23:50:12.580334604 +0000 UTC m=+3047.627908143 I0714 23:50:12.623358 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:50:12.623338663 +0000 UTC m=+3047.670912192 I0714 23:50:12.660593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.661036 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:50:12.661027552 +0000 UTC m=+3047.708601081 I0714 23:50:12.699379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.699742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.752617 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-14 23:50:12.752599506 +0000 UTC m=+3047.800173035 I0714 23:50:12.777604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:12.777638 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-14 23:50:12.777631256 +0000 UTC m=+3047.825204785 I0714 23:50:12.778109 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-14 23:50:12.778104017 +0000 UTC m=+3047.825677536 I0714 23:50:12.801509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:12.801633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:50:12.801825 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-14 23:50:12.801806887 +0000 UTC m=+3047.849380446 I0714 23:50:13.601354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:50:13.603246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-7btjm" condition "Approved" to 2026-07-14 23:50:13.603231917 +0000 UTC m=+3048.650805456 I0714 23:50:13.635278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-7btjm" condition "Ready" to 2026-07-14 23:50:13.635266286 +0000 UTC m=+3048.682839815 I0714 23:50:13.771703 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:50:13.771679672 +0000 UTC m=+3048.819253221 I0714 23:50:13.831000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:53:51.575390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:53:51.575479 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-14 23:53:51.575430618 +0000 UTC m=+3266.623004157 I0714 23:53:51.576230 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-14 23:53:51.576224316 +0000 UTC m=+3266.623797845 I0714 23:53:51.773311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:53:51.773370 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:53:51.773384 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-14 23:53:51.773378866 +0000 UTC m=+3266.820952395 I0714 23:53:52.521137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-wj9g5" condition "Approved" to 2026-07-14 23:53:52.521115783 +0000 UTC m=+3267.568689322 I0714 23:53:52.888570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-wj9g5" condition "Ready" to 2026-07-14 23:53:52.8885436 +0000 UTC m=+3267.936117159 I0714 23:53:53.623209 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:53:53.623195678 +0000 UTC m=+3268.670769227 I0714 23:53:53.719773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:53:55.489041 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-14 23:53:55.489023065 +0000 UTC m=+3270.536596604 I0714 23:53:55.489213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:53:55.489271 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-14 23:53:55.489257541 +0000 UTC m=+3270.536831100 I0714 23:53:55.552743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0714 23:53:55.552918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0714 23:53:55.552965 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-14 23:53:55.552952521 +0000 UTC m=+3270.600526090 I0714 23:53:56.076779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-wvrbz" condition "Approved" to 2026-07-14 23:53:56.076761719 +0000 UTC m=+3271.124335248 I0714 23:53:56.304174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-wvrbz" condition "Ready" to 2026-07-14 23:53:56.304159967 +0000 UTC m=+3271.351733506 I0714 23:53:56.623453 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-14 23:53:56.623426197 +0000 UTC m=+3271.670999816 I0714 23:53:56.914909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0714 23:54:58.232847 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0714 23:55:22.781399 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0714 23:55:22.781493 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0714 23:55:32.425090 1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again I0714 23:55:32.426174 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0714 23:55:32.426220 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0714 23:55:32.426243 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0714 23:55:32.426271 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0714 23:55:32.426293 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0714 23:55:32.426318 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0714 23:55:32.426344 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0714 23:55:32.426369 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0714 23:55:32.426443 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0714 23:55:32.426479 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0714 23:55:32.426500 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0714 23:55:32.426520 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0714 23:55:32.426544 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0714 23:55:32.426571 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0714 23:55:32.426594 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0714 23:55:32.426620 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0714 23:55:32.426642 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0714 23:55:32.426670 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" E0714 23:55:32.427271 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"