I0702 15:26:10.064308 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0702 15:26:10.064469 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0702 15:26:10.064564 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0702 15:26:10.068603 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0702 15:26:10.069004 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0702 15:26:10.069109 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0702 15:26:10.069146 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0702 15:26:10.071629 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0702 15:26:10.085501 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0702 15:26:10.091641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0702 15:26:10.098405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0702 15:26:10.102177 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0702 15:26:10.104659 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0702 15:26:10.106383 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0702 15:26:10.106409 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0702 15:26:10.106446 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0702 15:26:10.106490 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0702 15:26:10.108318 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0702 15:26:10.110182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0702 15:26:10.114328 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0702 15:26:10.114395 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0702 15:26:10.114419 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0702 15:26:10.114406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0702 15:26:10.119155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0702 15:26:10.121736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0702 15:26:10.124423 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0702 15:26:10.127273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0702 15:26:10.130134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0702 15:26:10.133219 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0702 15:26:10.135667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0702 15:26:10.138309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0702 15:26:10.144155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0702 15:26:10.148324 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0702 15:26:10.151925 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.152377 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.152621 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.153215 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.170453 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.189888 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.206850 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.226296 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.239909 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:10.243734 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0702 15:26:27.646246 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 15:26:27.646226408 +0000 UTC m=+17.617616734 I0702 15:26:28.376418 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:28.376477 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 15:26:28.376467526 +0000 UTC m=+18.347857852 I0702 15:26:28.376467 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:26:28.376449485 +0000 UTC m=+18.347839811 E0702 15:26:28.388151 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:26:28.388217 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 15:26:28.388208009 +0000 UTC m=+18.359598335 E0702 15:26:28.388240 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:26:28.390094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:28.390145 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:26:28.390139373 +0000 UTC m=+18.361529699 E0702 15:26:28.396239 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0702 15:26:28.396301 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:26:28.396326 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:26:28.396355 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0702 15:26:28.403527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:28.403567 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:26:28.403560515 +0000 UTC m=+18.374950841 I0702 15:26:28.407981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:28.413263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xjcx8" condition "Approved" to 2026-07-02 15:26:28.41325031 +0000 UTC m=+18.384640656 I0702 15:26:28.424235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xjcx8" condition "Ready" to 2026-07-02 15:26:28.424223411 +0000 UTC m=+18.395613737 I0702 15:26:28.443714 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:28.443695154 +0000 UTC m=+18.415085500 I0702 15:26:28.463397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:28.463987 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:28.463931168 +0000 UTC m=+18.435321544 I0702 15:26:28.484559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:33.397193 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:33.397178716 +0000 UTC m=+23.368569042 I0702 15:26:52.707330 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 15:26:52.707309475 +0000 UTC m=+42.678699821 I0702 15:26:52.707364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:52.707408 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 15:26:52.707397917 +0000 UTC m=+42.678788263 I0702 15:26:52.724963 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 15:26:52.724943025 +0000 UTC m=+42.696333341 I0702 15:26:52.764910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:52.765260 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:26:52.765324 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 15:26:52.765315421 +0000 UTC m=+42.736705737 I0702 15:26:53.122113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:53.136837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vgfh9" condition "Approved" to 2026-07-02 15:26:53.136802741 +0000 UTC m=+43.108193097 I0702 15:26:53.180650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vgfh9" condition "Ready" to 2026-07-02 15:26:53.180635394 +0000 UTC m=+43.152025720 I0702 15:26:53.228441 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:53.22841692 +0000 UTC m=+43.199807266 I0702 15:26:53.254094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:53.254736 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:53.254724176 +0000 UTC m=+43.226114532 I0702 15:26:53.270080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:53.275780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:26:53.276167 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:26:53.276156204 +0000 UTC m=+43.247546530 I0702 15:31:05.572184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:31:05.572270 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Issuing" to 2026-07-02 15:31:05.572233533 +0000 UTC m=+295.543623859 I0702 15:31:05.573005 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-07-02 15:31:05.57212807 +0000 UTC m=+295.543518416 I0702 15:31:05.592657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:31:05.592765 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-07-02 15:31:05.592750988 +0000 UTC m=+295.564141344 I0702 15:31:05.722755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:31:05.755541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-ldq9p" condition "Approved" to 2026-07-02 15:31:05.755522469 +0000 UTC m=+295.726912825 I0702 15:31:05.789592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-ldq9p" condition "Ready" to 2026-07-02 15:31:05.789573073 +0000 UTC m=+295.760963429 I0702 15:31:05.818971 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:31:05.818959757 +0000 UTC m=+295.790350083 I0702 15:31:05.840497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:13.467300 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 15:32:13.467253738 +0000 UTC m=+363.438644094 I0702 15:32:13.467421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:32:13.467468 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 15:32:13.467456784 +0000 UTC m=+363.438847140 I0702 15:32:13.481911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:13.481994 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 15:32:13.481985981 +0000 UTC m=+363.453376307 E0702 15:32:13.482485 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0702 15:32:13.482535 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 15:32:13.482527096 +0000 UTC m=+363.453917422 E0702 15:32:13.482584 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:32:13.496123 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0702 15:32:13.496199 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:32:13.496222 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0702 15:32:13.496248 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0702 15:32:13.498010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:13.521225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hh42z" condition "Approved" to 2026-07-02 15:32:13.521210237 +0000 UTC m=+363.492600593 I0702 15:32:13.532129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hh42z" condition "Ready" to 2026-07-02 15:32:13.532113652 +0000 UTC m=+363.503503998 I0702 15:32:13.552192 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:32:13.552178393 +0000 UTC m=+363.523568739 I0702 15:32:13.569618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:13.569931 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:32:13.56991197 +0000 UTC m=+363.541302316 I0702 15:32:13.582921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:13.588036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:18.496619 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:32:18.496603123 +0000 UTC m=+368.467993479 I0702 15:32:58.736776 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-02 15:32:58.736755573 +0000 UTC m=+408.708145919 I0702 15:32:58.737407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:32:58.737481 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 15:32:58.737439893 +0000 UTC m=+408.708830249 I0702 15:32:58.737769 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 15:32:58.737746591 +0000 UTC m=+408.709136917 I0702 15:32:58.737902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:32:58.737976 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-02 15:32:58.737966827 +0000 UTC m=+408.709357153 I0702 15:32:58.744367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:32:58.744410 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 15:32:58.744400916 +0000 UTC m=+408.715791242 I0702 15:32:58.745012 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-02 15:32:58.745004893 +0000 UTC m=+408.716395209 I0702 15:32:58.773817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:58.773917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:32:58.774010 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-02 15:32:58.773928009 +0000 UTC m=+408.745318325 I0702 15:32:58.776912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:58.776943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:32:58.776954 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-02 15:32:58.776950764 +0000 UTC m=+408.748341070 I0702 15:32:58.779438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:58.779474 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-02 15:32:58.779469994 +0000 UTC m=+408.750860310 I0702 15:32:58.847382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:58.878968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qbsnw" condition "Approved" to 2026-07-02 15:32:58.878953409 +0000 UTC m=+408.850343725 I0702 15:32:58.899972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qbsnw" condition "Ready" to 2026-07-02 15:32:58.899955234 +0000 UTC m=+408.871345580 I0702 15:32:58.938154 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:32:58.938135169 +0000 UTC m=+408.909525525 I0702 15:32:58.959659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:58.960210 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:32:58.960198394 +0000 UTC m=+408.931588720 I0702 15:32:58.969586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:58.983062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:58.983445 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:32:58.983432302 +0000 UTC m=+408.954822648 I0702 15:32:58.987968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:59.122787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xg25r" condition "Approved" to 2026-07-02 15:32:59.122768728 +0000 UTC m=+409.094159054 I0702 15:32:59.139956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xg25r" condition "Ready" to 2026-07-02 15:32:59.139942956 +0000 UTC m=+409.111333282 I0702 15:32:59.329687 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:32:59.329671918 +0000 UTC m=+409.301062244 I0702 15:32:59.377962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:59.432060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9fbvz" condition "Approved" to 2026-07-02 15:32:59.432037122 +0000 UTC m=+409.403427428 I0702 15:32:59.530379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:32:59.530987 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:32:59.530977031 +0000 UTC m=+409.502367377 I0702 15:32:59.708861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9fbvz" condition "Ready" to 2026-07-02 15:32:59.708847502 +0000 UTC m=+409.680237828 I0702 15:33:00.283215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:00.331191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:00.378544 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:33:00.378530107 +0000 UTC m=+410.349920443 I0702 15:33:00.529389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:00.529839 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:33:00.529830646 +0000 UTC m=+410.501220962 I0702 15:33:00.731263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:07.470359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:33:07.470428 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls" condition "Issuing" to 2026-07-02 15:33:07.470394457 +0000 UTC m=+417.441784783 I0702 15:33:07.470469 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls" condition "Ready" to 2026-07-02 15:33:07.470446109 +0000 UTC m=+417.441836465 I0702 15:33:07.490002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:07.490213 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls" condition "Ready" to 2026-07-02 15:33:07.490198249 +0000 UTC m=+417.461588605 I0702 15:33:07.727820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:07.756054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2q2h4-8kr6w" condition "Approved" to 2026-07-02 15:33:07.756036363 +0000 UTC m=+417.727426679 I0702 15:33:07.772877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2q2h4-8kr6w" condition "Ready" to 2026-07-02 15:33:07.772861342 +0000 UTC m=+417.744251678 I0702 15:33:07.800331 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:33:07.800315288 +0000 UTC m=+417.771705614 I0702 15:33:07.828964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2q2h4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:38.262144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:33:38.262191 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-02 15:33:38.262181866 +0000 UTC m=+448.233572192 I0702 15:33:38.262595 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 15:33:38.262582578 +0000 UTC m=+448.233972964 I0702 15:33:38.282700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:38.282889 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-02 15:33:38.282878314 +0000 UTC m=+448.254268670 I0702 15:33:38.420289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:33:38.463613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mfmg6" condition "Approved" to 2026-07-02 15:33:38.463592724 +0000 UTC m=+448.434983040 I0702 15:33:38.494256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mfmg6" condition "Ready" to 2026-07-02 15:33:38.494198027 +0000 UTC m=+448.465588393 I0702 15:33:38.549600 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:33:38.549584271 +0000 UTC m=+448.520974617 I0702 15:33:38.579098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:36:46.051561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:36:46.051634 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 15:36:46.051628808 +0000 UTC m=+636.023019124 I0702 15:36:46.051579 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-02 15:36:46.051548165 +0000 UTC m=+636.022938481 I0702 15:36:46.069319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:36:46.069543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:36:46.069651 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-02 15:36:46.069642859 +0000 UTC m=+636.041033185 I0702 15:36:46.435071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:36:46.444674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gr752" condition "Approved" to 2026-07-02 15:36:46.444651911 +0000 UTC m=+636.416042237 I0702 15:36:46.471318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-gr752" condition "Ready" to 2026-07-02 15:36:46.471299203 +0000 UTC m=+636.442689559 I0702 15:36:46.504231 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:36:46.504216039 +0000 UTC m=+636.475606365 I0702 15:36:46.524006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:36:46.527854 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:36:46.527843277 +0000 UTC m=+636.499233603 I0702 15:36:46.532610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:36:46.553146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:36:46.553486 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:36:46.553474241 +0000 UTC m=+636.524864567 I0702 15:36:46.554448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:39:09.287577 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-02 15:39:09.287525731 +0000 UTC m=+779.258916087 I0702 15:39:09.287764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:39:09.287862 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-02 15:39:09.28785058 +0000 UTC m=+779.259240926 I0702 15:39:09.303467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:39:09.303541 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-02 15:39:09.303533847 +0000 UTC m=+779.274924183 I0702 15:39:09.558538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:39:09.600352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jvfp5" condition "Approved" to 2026-07-02 15:39:09.600341498 +0000 UTC m=+779.571731814 I0702 15:39:09.621184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jvfp5" condition "Ready" to 2026-07-02 15:39:09.621169287 +0000 UTC m=+779.592559643 I0702 15:39:09.655064 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:39:09.655053551 +0000 UTC m=+779.626443877 I0702 15:39:09.680746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:39:09.681201 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:39:09.681189127 +0000 UTC m=+779.652579483 I0702 15:39:09.700222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:39:09.700640 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:39:09.700630859 +0000 UTC m=+779.672021185 I0702 15:40:11.649052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:40:11.649162 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-02 15:40:11.649148574 +0000 UTC m=+841.620538930 I0702 15:40:11.649624 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-02 15:40:11.649605117 +0000 UTC m=+841.620995463 I0702 15:40:11.670860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:11.670969 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-02 15:40:11.670959431 +0000 UTC m=+841.642349757 I0702 15:40:11.824496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:40:11.863763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pshlz" condition "Approved" to 2026-07-02 15:40:11.863748337 +0000 UTC m=+841.835138683 I0702 15:40:11.923563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pshlz" condition "Ready" to 2026-07-02 15:40:11.923540691 +0000 UTC m=+841.894931007 I0702 15:40:11.981161 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:40:11.981136174 +0000 UTC m=+841.952526530 I0702 15:40:11.999244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:13.972216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:43:13.972307 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-02 15:43:13.972284281 +0000 UTC m=+1023.943674607 I0702 15:43:13.972323 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-02 15:43:13.972282211 +0000 UTC m=+1023.943672567 I0702 15:43:13.990018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:13.990120 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-02 15:43:13.990109986 +0000 UTC m=+1023.961500312 I0702 15:43:14.591002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:14.625367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mv4cm" condition "Approved" to 2026-07-02 15:43:14.625343384 +0000 UTC m=+1024.596733710 I0702 15:43:14.641194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mv4cm" condition "Ready" to 2026-07-02 15:43:14.641179603 +0000 UTC m=+1024.612569919 I0702 15:43:14.670783 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:43:14.670768904 +0000 UTC m=+1024.642159230 I0702 15:43:14.699064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:14.700513 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:43:14.70050097 +0000 UTC m=+1024.671891286 I0702 15:43:14.728895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:43:14.729174 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:43:14.729164865 +0000 UTC m=+1024.700555181 I0702 15:49:22.273683 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-02 15:49:22.273623552 +0000 UTC m=+1392.245013898 I0702 15:49:22.273753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:49:22.274093 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-02 15:49:22.274078254 +0000 UTC m=+1392.245468640 I0702 15:49:22.294698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:49:22.294900 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-02 15:49:22.294868947 +0000 UTC m=+1392.266259273 I0702 15:49:22.522793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:49:22.556528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-wml4m" condition "Approved" to 2026-07-02 15:49:22.55650874 +0000 UTC m=+1392.527899096 I0702 15:49:22.580768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-wml4m" condition "Ready" to 2026-07-02 15:49:22.580752037 +0000 UTC m=+1392.552142363 I0702 15:49:22.613980 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:49:22.613964106 +0000 UTC m=+1392.585354432 I0702 15:49:22.638153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:49:22.638593 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:49:22.638585422 +0000 UTC m=+1392.609975748 I0702 15:49:22.655906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:50:47.346227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:50:47.346290 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-02 15:50:47.346284724 +0000 UTC m=+1477.317675040 I0702 15:50:47.346290 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-02 15:50:47.346233802 +0000 UTC m=+1477.317624158 I0702 15:50:47.361497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:50:47.361726 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-02 15:50:47.361606248 +0000 UTC m=+1477.332996594 I0702 15:50:47.733428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:50:47.768605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-4vw58" condition "Approved" to 2026-07-02 15:50:47.768593436 +0000 UTC m=+1477.739983762 I0702 15:50:47.786558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-4vw58" condition "Ready" to 2026-07-02 15:50:47.786549643 +0000 UTC m=+1477.757939959 I0702 15:50:47.815725 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:50:47.815716083 +0000 UTC m=+1477.787106409 I0702 15:50:47.833622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:50:47.834459 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:50:47.83444972 +0000 UTC m=+1477.805840046 I0702 15:50:47.855217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.089687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:51:44.089749 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-02 15:51:44.089743023 +0000 UTC m=+1534.061133349 I0702 15:51:44.090017 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-02 15:51:44.0899847 +0000 UTC m=+1534.061375056 I0702 15:51:44.109119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.109283 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-02 15:51:44.109274973 +0000 UTC m=+1534.080665299 I0702 15:51:44.129017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.158848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xgg9f" condition "Approved" to 2026-07-02 15:51:44.158831824 +0000 UTC m=+1534.130222150 I0702 15:51:44.175348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xgg9f" condition "Ready" to 2026-07-02 15:51:44.175336371 +0000 UTC m=+1534.146726697 I0702 15:51:44.200858 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:51:44.200840072 +0000 UTC m=+1534.172230428 I0702 15:51:44.223137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.223554 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:51:44.223544337 +0000 UTC m=+1534.194934643 I0702 15:51:44.236852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.254300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.741886 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-02 15:51:44.741871709 +0000 UTC m=+1534.713262045 I0702 15:51:44.741921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:51:44.741952 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-02 15:51:44.74194469 +0000 UTC m=+1534.713335016 I0702 15:51:44.764918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.765017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:51:44.765044 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-02 15:51:44.765036296 +0000 UTC m=+1534.736426632 I0702 15:51:44.807816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.814414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qkckr" condition "Approved" to 2026-07-02 15:51:44.814398292 +0000 UTC m=+1534.785788628 I0702 15:51:44.831086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qkckr" condition "Ready" to 2026-07-02 15:51:44.831074844 +0000 UTC m=+1534.802465160 I0702 15:51:44.856300 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:51:44.856288367 +0000 UTC m=+1534.827678693 I0702 15:51:44.894095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.894637 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:51:44.894626915 +0000 UTC m=+1534.866017271 I0702 15:51:44.925420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:51:44.926237 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:51:44.926221649 +0000 UTC m=+1534.897612015 I0702 15:51:45.465499 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-02 15:51:45.465484269 +0000 UTC m=+1535.436874625 I0702 15:51:46.241148 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-02 15:51:46.241137348 +0000 UTC m=+1536.212527674 I0702 15:52:32.953833 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-02 15:52:32.953823315 +0000 UTC m=+1582.925213641 I0702 15:52:32.954245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:52:32.954264 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-02 15:52:32.954261077 +0000 UTC m=+1582.925651383 I0702 15:52:32.982948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:52:32.983075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:52:32.983106 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-02 15:52:32.983097887 +0000 UTC m=+1582.954488203 I0702 15:52:35.308050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:52:35.333300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-f9jq5" condition "Approved" to 2026-07-02 15:52:35.333285753 +0000 UTC m=+1585.304676079 I0702 15:52:35.361652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-f9jq5" condition "Ready" to 2026-07-02 15:52:35.361638851 +0000 UTC m=+1585.333029177 I0702 15:52:35.398263 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:52:35.398248262 +0000 UTC m=+1585.369638588 I0702 15:52:35.418314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:52:35.419441 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:52:35.419429436 +0000 UTC m=+1585.390819792 I0702 15:52:35.427449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:52:35.438973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:55:07.300438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:55:07.300536 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-02 15:55:07.300513658 +0000 UTC m=+1737.271904004 I0702 15:55:07.301102 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-02 15:55:07.301093884 +0000 UTC m=+1737.272484240 I0702 15:55:07.321328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:55:07.321433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:55:07.321467 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-02 15:55:07.321458035 +0000 UTC m=+1737.292848381 I0702 15:55:07.580594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:55:07.586772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tfpk6" condition "Approved" to 2026-07-02 15:55:07.586761352 +0000 UTC m=+1737.558151668 I0702 15:55:07.608666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tfpk6" condition "Ready" to 2026-07-02 15:55:07.608657636 +0000 UTC m=+1737.580047942 I0702 15:55:07.641395 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:55:07.641371997 +0000 UTC m=+1737.612762323 I0702 15:55:07.663273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:55:08.779921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:55:08.779960 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-02 15:55:08.779953276 +0000 UTC m=+1738.751343592 I0702 15:55:08.780108 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-02 15:55:08.78008114 +0000 UTC m=+1738.751471476 I0702 15:55:08.802511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:55:08.802645 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-02 15:55:08.802632081 +0000 UTC m=+1738.774022437 I0702 15:55:08.918795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:55:08.963193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-lsmlg" condition "Approved" to 2026-07-02 15:55:08.963170709 +0000 UTC m=+1738.934561035 I0702 15:55:08.985441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-lsmlg" condition "Ready" to 2026-07-02 15:55:08.985429083 +0000 UTC m=+1738.956819399 I0702 15:55:09.012816 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:55:09.012803087 +0000 UTC m=+1738.984193413 I0702 15:55:09.034819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:58:18.367718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:58:18.367796 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-02 15:58:18.367760017 +0000 UTC m=+1928.339150333 I0702 15:58:18.368047 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-02 15:58:18.368032065 +0000 UTC m=+1928.339422391 I0702 15:58:18.386950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:58:18.387199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:58:18.387234 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-02 15:58:18.387225833 +0000 UTC m=+1928.358616189 I0702 15:58:18.664201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-jwv4p" condition "Approved" to 2026-07-02 15:58:18.664186216 +0000 UTC m=+1928.635576542 I0702 15:58:18.684993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-jwv4p" condition "Ready" to 2026-07-02 15:58:18.684984479 +0000 UTC m=+1928.656374795 I0702 15:58:18.717118 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:58:18.717108974 +0000 UTC m=+1928.688499290 I0702 15:58:18.744647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:58:18.796996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:59:23.797158 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pnzdg-vnc" condition "Ready" to 2026-07-02 15:59:23.797138182 +0000 UTC m=+1993.768528528 I0702 15:59:23.797428 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pnzdg-api" condition "Ready" to 2026-07-02 15:59:23.797420089 +0000 UTC m=+1993.768810415 I0702 15:59:23.797619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pnzdg-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:59:23.797645 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pnzdg-api" condition "Issuing" to 2026-07-02 15:59:23.797640245 +0000 UTC m=+1993.769030571 I0702 15:59:23.802152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pnzdg-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:59:23.802193 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pnzdg-vnc" condition "Issuing" to 2026-07-02 15:59:23.80218387 +0000 UTC m=+1993.773574216 I0702 15:59:23.885625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pnzdg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pnzdg-api\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:59:23.885710 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pnzdg-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:59:23.885730 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pnzdg-api" condition "Issuing" to 2026-07-02 15:59:23.885723883 +0000 UTC m=+1993.857114199 I0702 15:59:23.893892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pnzdg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pnzdg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:59:23.893936 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pnzdg-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 15:59:23.893948 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pnzdg-vnc" condition "Issuing" to 2026-07-02 15:59:23.89394456 +0000 UTC m=+1993.865334876 I0702 15:59:24.373514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pnzdg-api-kg774" condition "Approved" to 2026-07-02 15:59:24.373501104 +0000 UTC m=+1994.344891420 I0702 15:59:24.614410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pnzdg-api-kg774" condition "Ready" to 2026-07-02 15:59:24.614397433 +0000 UTC m=+1994.585787759 I0702 15:59:24.656644 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pnzdg-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:59:24.656630567 +0000 UTC m=+1994.628020883 I0702 15:59:24.673199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-pnzdg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pnzdg-api\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:59:24.673518 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pnzdg-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:59:24.673511522 +0000 UTC m=+1994.644901868 I0702 15:59:24.694009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-pnzdg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pnzdg-api\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:59:24.707504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-pnzdg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pnzdg-api\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:59:24.767286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pnzdg-vnc-rtgxd" condition "Approved" to 2026-07-02 15:59:24.767265446 +0000 UTC m=+1994.738655782 I0702 15:59:24.784950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pnzdg-vnc-rtgxd" condition "Ready" to 2026-07-02 15:59:24.784940723 +0000 UTC m=+1994.756331049 I0702 15:59:24.818556 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pnzdg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:59:24.818513238 +0000 UTC m=+1994.789903564 I0702 15:59:24.850108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-pnzdg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pnzdg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:59:24.850609 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pnzdg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:59:24.850598233 +0000 UTC m=+1994.821988559 I0702 15:59:24.873950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-pnzdg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pnzdg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0702 15:59:24.874424 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pnzdg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:59:24.874412909 +0000 UTC m=+1994.845803265 I0702 16:01:45.125426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:01:45.125499 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-07-02 16:01:45.125459938 +0000 UTC m=+2135.096850264 I0702 16:01:45.125851 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-07-02 16:01:45.125810458 +0000 UTC m=+2135.097200814 I0702 16:01:45.146638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:01:45.146776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:01:45.146805 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-07-02 16:01:45.146798357 +0000 UTC m=+2135.118188673 I0702 16:01:45.423584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:01:45.430350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-nsr2v" condition "Approved" to 2026-07-02 16:01:45.430331144 +0000 UTC m=+2135.401721470 I0702 16:01:45.453334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-nsr2v" condition "Ready" to 2026-07-02 16:01:45.453315817 +0000 UTC m=+2135.424706153 I0702 16:01:45.487200 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:01:45.487178451 +0000 UTC m=+2135.458568807 I0702 16:01:45.509633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:01:45.510076 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:01:45.510068642 +0000 UTC m=+2135.481458968 I0702 16:01:45.534361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:05:26.231561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:05:26.231627 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-02 16:05:26.231618036 +0000 UTC m=+2356.203008382 I0702 16:05:26.231913 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-02 16:05:26.231907245 +0000 UTC m=+2356.203297601 I0702 16:05:26.251553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:05:26.251673 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-02 16:05:26.25166541 +0000 UTC m=+2356.223055726 I0702 16:05:26.506308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:05:26.546404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-dqdjf" condition "Approved" to 2026-07-02 16:05:26.545877402 +0000 UTC m=+2356.517267718 I0702 16:05:26.569334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-dqdjf" condition "Ready" to 2026-07-02 16:05:26.569319077 +0000 UTC m=+2356.540709413 I0702 16:05:26.598050 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:05:26.598034839 +0000 UTC m=+2356.569425175 I0702 16:05:26.621340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:05:26.621628 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:05:26.62162133 +0000 UTC m=+2356.593011656 I0702 16:05:26.642138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:05:27.721078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:05:27.721122 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-02 16:05:27.721111973 +0000 UTC m=+2357.692502299 I0702 16:05:27.721630 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-02 16:05:27.721623007 +0000 UTC m=+2357.693013323 I0702 16:05:27.743527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:05:27.743688 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-02 16:05:27.743679336 +0000 UTC m=+2357.715069662 I0702 16:05:27.892255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:05:27.938320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-6pq4w" condition "Approved" to 2026-07-02 16:05:27.938292671 +0000 UTC m=+2357.909682987 I0702 16:05:27.960816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-6pq4w" condition "Ready" to 2026-07-02 16:05:27.960807252 +0000 UTC m=+2357.932197568 I0702 16:05:27.992276 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:05:27.992256419 +0000 UTC m=+2357.963646755 I0702 16:05:28.031327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:05:28.031768 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:05:28.031760258 +0000 UTC m=+2358.003150574 I0702 16:05:28.060889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:35.801874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:07:35.801955 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-02 16:07:35.80192781 +0000 UTC m=+2485.773318136 I0702 16:07:35.802619 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-02 16:07:35.802595468 +0000 UTC m=+2485.773985814 E0702 16:07:35.817559 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 16:07:35.817664 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-02 16:07:35.817651683 +0000 UTC m=+2485.789042029 I0702 16:07:35.817698 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 16:07:35.819817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:35.819916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:07:35.819942 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-02 16:07:35.819935146 +0000 UTC m=+2485.791325472 E0702 16:07:35.837827 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0702 16:07:35.838128 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 16:07:35.838167 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0702 16:07:35.838228 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0702 16:07:35.908875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:35.917218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-58rjz" condition "Approved" to 2026-07-02 16:07:35.917206868 +0000 UTC m=+2485.888597184 I0702 16:07:35.934618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-58rjz" condition "Ready" to 2026-07-02 16:07:35.934607768 +0000 UTC m=+2485.905998084 I0702 16:07:35.963095 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:35.963081443 +0000 UTC m=+2485.934471759 I0702 16:07:35.986342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:36.501003 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-02 16:07:36.500986074 +0000 UTC m=+2486.472376390 I0702 16:07:36.501352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:07:36.501436 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-02 16:07:36.501427156 +0000 UTC m=+2486.472817482 E0702 16:07:36.518094 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 16:07:36.518128 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-02 16:07:36.518120506 +0000 UTC m=+2486.489510832 I0702 16:07:36.518175 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 16:07:36.520794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:36.521018 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-02 16:07:36.521006566 +0000 UTC m=+2486.492396902 E0702 16:07:36.528202 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0702 16:07:36.528272 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0702 16:07:36.528292 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0702 16:07:36.528319 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0702 16:07:36.537635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:36.537731 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-02 16:07:36.537723457 +0000 UTC m=+2486.509113763 I0702 16:07:36.541629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:36.552580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-4jqf6" condition "Approved" to 2026-07-02 16:07:36.552565626 +0000 UTC m=+2486.523955942 I0702 16:07:36.555364 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-02 16:07:36.555344513 +0000 UTC m=+2486.526734869 I0702 16:07:36.567112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:36.568591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-4jqf6" condition "Ready" to 2026-07-02 16:07:36.568578408 +0000 UTC m=+2486.539968734 I0702 16:07:36.598386 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:36.598371849 +0000 UTC m=+2486.569762185 I0702 16:07:36.615966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:36.616598 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:36.616582941 +0000 UTC m=+2486.587973297 I0702 16:07:36.635646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:36.636164 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:36.636155981 +0000 UTC m=+2486.607546297 I0702 16:07:37.267240 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-02 16:07:37.267216631 +0000 UTC m=+2487.238606977 I0702 16:07:37.267597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:07:37.267962 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-02 16:07:37.267946701 +0000 UTC m=+2487.239337107 I0702 16:07:37.290113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:37.290170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:07:37.290182 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-02 16:07:37.290177543 +0000 UTC m=+2487.261567869 I0702 16:07:37.341280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-lslh2" condition "Approved" to 2026-07-02 16:07:37.341268413 +0000 UTC m=+2487.312658739 I0702 16:07:37.362428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-lslh2" condition "Ready" to 2026-07-02 16:07:37.362415635 +0000 UTC m=+2487.333805961 I0702 16:07:40.839224 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:40.839203717 +0000 UTC m=+2490.810594073 I0702 16:07:40.851053 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-lslh2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:40.851037034 +0000 UTC m=+2490.822427360 I0702 16:07:40.879184 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:40.879171649 +0000 UTC m=+2490.850561975 I0702 16:07:40.899875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:40.901242 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:40.901220776 +0000 UTC m=+2490.872611132 I0702 16:07:40.932363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:07:41.530256 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:07:41.53024287 +0000 UTC m=+2491.501633196 I0702 16:09:53.949142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:09:53.949199 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-02 16:09:53.949188305 +0000 UTC m=+2623.920578641 I0702 16:09:53.949244 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-02 16:09:53.949220075 +0000 UTC m=+2623.920610401 I0702 16:09:53.970416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:09:53.970489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:09:53.970510 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-02 16:09:53.970500312 +0000 UTC m=+2623.941890638 I0702 16:09:54.312769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:09:54.326435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-8zv64" condition "Approved" to 2026-07-02 16:09:54.326412706 +0000 UTC m=+2624.297803062 I0702 16:09:54.347532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-8zv64" condition "Ready" to 2026-07-02 16:09:54.347513397 +0000 UTC m=+2624.318903713 I0702 16:09:54.378105 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:09:54.37808815 +0000 UTC m=+2624.349478466 I0702 16:09:54.401944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:41.177213 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-02 16:10:41.177194528 +0000 UTC m=+2671.148584854 I0702 16:10:41.200959 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-02 16:10:41.200933623 +0000 UTC m=+2671.172323979 I0702 16:10:41.201356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:10:41.201412 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-02 16:10:41.201401936 +0000 UTC m=+2671.172792262 I0702 16:10:41.220131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:41.220358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:10:41.220390 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-02 16:10:41.220380019 +0000 UTC m=+2671.191770345 E0702 16:10:41.227684 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0702 16:10:41.280845 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-02 16:10:41.280823136 +0000 UTC m=+2671.252213492 I0702 16:10:41.308760 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-02 16:10:41.308741865 +0000 UTC m=+2671.280132181 I0702 16:10:41.308914 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:10:41.308975 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-02 16:10:41.308962491 +0000 UTC m=+2671.280352817 I0702 16:10:41.326339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:41.326400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:10:41.326421 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-02 16:10:41.326416472 +0000 UTC m=+2671.297806798 E0702 16:10:41.339090 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0702 16:10:41.530047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:41.540230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-b7fsj" condition "Approved" to 2026-07-02 16:10:41.540210747 +0000 UTC m=+2671.511601073 I0702 16:10:41.565711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-b7fsj" condition "Ready" to 2026-07-02 16:10:41.56569984 +0000 UTC m=+2671.537090166 I0702 16:10:41.600228 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:10:41.600212451 +0000 UTC m=+2671.571602767 I0702 16:10:41.628974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:42.184309 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-02 16:10:42.184292676 +0000 UTC m=+2672.155683002 I0702 16:10:42.205468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:10:42.205517 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-02 16:10:42.205505771 +0000 UTC m=+2672.176896127 I0702 16:10:42.206093 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-02 16:10:42.206085156 +0000 UTC m=+2672.177475512 I0702 16:10:42.228091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:42.228191 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-02 16:10:42.228181656 +0000 UTC m=+2672.199571992 I0702 16:10:42.647805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:42.704122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-fsjql" condition "Approved" to 2026-07-02 16:10:42.704087537 +0000 UTC m=+2672.675477863 I0702 16:10:42.732947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-fsjql" condition "Ready" to 2026-07-02 16:10:42.732934313 +0000 UTC m=+2672.704324639 I0702 16:10:42.744632 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-02 16:10:42.744620045 +0000 UTC m=+2672.716010371 I0702 16:10:42.771138 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-02 16:10:42.771113886 +0000 UTC m=+2672.742504222 I0702 16:10:42.772230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:10:42.772278 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-02 16:10:42.772267887 +0000 UTC m=+2672.743658213 I0702 16:10:42.774182 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:10:42.774131249 +0000 UTC m=+2672.745521605 I0702 16:10:42.795847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:42.795955 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-02 16:10:42.79594345 +0000 UTC m=+2672.767333776 I0702 16:10:42.804143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:43.150800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:43.198561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ttg2k" condition "Approved" to 2026-07-02 16:10:43.198548911 +0000 UTC m=+2673.169939227 I0702 16:10:43.225032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ttg2k" condition "Ready" to 2026-07-02 16:10:43.22501862 +0000 UTC m=+2673.196408946 I0702 16:10:43.260150 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:10:43.260134678 +0000 UTC m=+2673.231524994 I0702 16:10:43.282686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:43.293664 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-02 16:10:43.293604191 +0000 UTC m=+2673.264994517 I0702 16:10:43.315217 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-02 16:10:43.315196857 +0000 UTC m=+2673.286587163 I0702 16:10:43.315456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:10:43.315483 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-02 16:10:43.315478754 +0000 UTC m=+2673.286869080 I0702 16:10:43.439227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:43.439332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:10:43.439415 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-02 16:10:43.439405521 +0000 UTC m=+2673.410795847 I0702 16:10:44.030793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-v9x2w" condition "Approved" to 2026-07-02 16:10:44.030766466 +0000 UTC m=+2674.002156792 I0702 16:10:44.074633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-v9x2w" condition "Ready" to 2026-07-02 16:10:44.074614545 +0000 UTC m=+2674.046004851 I0702 16:10:44.341685 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:10:44.341641138 +0000 UTC m=+2674.313031484 I0702 16:10:44.443944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:10:44.444140 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:10:44.444135133 +0000 UTC m=+2674.415525439 I0702 16:10:44.637077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:14:10.522409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:14:10.522478 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-02 16:14:10.522445941 +0000 UTC m=+2880.493836257 I0702 16:14:10.522918 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-02 16:14:10.522896984 +0000 UTC m=+2880.494287310 I0702 16:14:10.544572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:14:10.544694 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-02 16:14:10.544682684 +0000 UTC m=+2880.516073030 I0702 16:14:10.665924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:14:10.708578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-zffc5" condition "Approved" to 2026-07-02 16:14:10.708550592 +0000 UTC m=+2880.679940928 I0702 16:14:10.731237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-zffc5" condition "Ready" to 2026-07-02 16:14:10.731226847 +0000 UTC m=+2880.702617163 I0702 16:14:10.765680 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:14:10.765663897 +0000 UTC m=+2880.737054213 I0702 16:14:10.787143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:14:10.787569 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:14:10.7875632 +0000 UTC m=+2880.758953516 I0702 16:14:10.816311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:14:13.067496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:14:13.067543 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-02 16:14:13.067533633 +0000 UTC m=+2883.038923969 I0702 16:14:13.068028 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-02 16:14:13.068021597 +0000 UTC m=+2883.039411923 I0702 16:14:13.085745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:14:13.085887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:14:13.085910 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-02 16:14:13.08590427 +0000 UTC m=+2883.057294596 I0702 16:14:13.491094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:14:13.502331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-2c9fv" condition "Approved" to 2026-07-02 16:14:13.502319661 +0000 UTC m=+2883.473709987 I0702 16:14:13.525381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-2c9fv" condition "Ready" to 2026-07-02 16:14:13.525369527 +0000 UTC m=+2883.496759853 I0702 16:14:13.555334 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:14:13.555317462 +0000 UTC m=+2883.526707788 I0702 16:14:13.573779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:19:03.213022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:19:03.213103 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-02 16:19:03.213092567 +0000 UTC m=+3173.184482923 I0702 16:19:03.213854 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-02 16:19:03.213843968 +0000 UTC m=+3173.185234324 I0702 16:19:03.238445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:19:03.238617 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-02 16:19:03.238604624 +0000 UTC m=+3173.209994970 I0702 16:19:03.406651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:19:03.450380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-fdkzn" condition "Approved" to 2026-07-02 16:19:03.450361252 +0000 UTC m=+3173.421751578 I0702 16:19:03.467871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-fdkzn" condition "Ready" to 2026-07-02 16:19:03.467857718 +0000 UTC m=+3173.439248034 I0702 16:19:03.497799 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:19:03.497784897 +0000 UTC m=+3173.469175223 I0702 16:19:03.528073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:19:39.012754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0702 16:19:39.012802 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-02 16:19:39.012791501 +0000 UTC m=+3208.984181857 I0702 16:19:39.013025 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 16:19:39.012956606 +0000 UTC m=+3208.984346952 I0702 16:19:39.030784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:19:39.031027 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-02 16:19:39.031013996 +0000 UTC m=+3209.002404342 I0702 16:19:39.321326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:19:39.352858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tkn5c" condition "Approved" to 2026-07-02 16:19:39.352847486 +0000 UTC m=+3209.324237812 I0702 16:19:39.369734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-tkn5c" condition "Ready" to 2026-07-02 16:19:39.369722592 +0000 UTC m=+3209.341112918 I0702 16:19:39.397285 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:19:39.397266936 +0000 UTC m=+3209.368657282 I0702 16:19:39.423436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0702 16:19:39.423805 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 16:19:39.423797331 +0000 UTC m=+3209.395187657 I0702 16:19:39.446954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"