I0224 06:46:39.032660 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0224 06:46:39.032768 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0224 06:46:39.032850 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0224 06:46:39.036446 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0224 06:46:39.036932 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0224 06:46:39.037014 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0224 06:46:39.037075 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0224 06:46:39.039099 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... E0224 06:46:39.039710 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0224 06:47:00.406392 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0224 06:47:00.406555 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0224 06:47:00.407003 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0224 06:47:00.412606 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0224 06:47:00.416039 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0224 06:47:00.418311 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0224 06:47:00.420755 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0224 06:47:00.423265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0224 06:47:00.426902 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0224 06:47:00.427156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0224 06:47:00.432257 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0224 06:47:00.436343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0224 06:47:00.438866 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0224 06:47:00.440968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0224 06:47:00.442596 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0224 06:47:00.442786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0224 06:47:00.444537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0224 06:47:00.447180 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0224 06:47:00.447212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0224 06:47:00.450826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0224 06:47:00.455601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0224 06:47:00.458612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0224 06:47:00.460607 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0224 06:47:00.462276 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0224 06:47:00.462730 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0224 06:47:00.464575 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.465169 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.465978 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.466464 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.467134 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.467674 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.473007 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.499592 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.501800 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:47:00.605764 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:48:35.601037 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-02-24 06:48:35.60101605 +0000 UTC m=+116.611435892 I0224 06:48:35.601153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:48:35.601187 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-02-24 06:48:35.601178954 +0000 UTC m=+116.611598756 I0224 06:48:35.622653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:48:35.622790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:48:35.622842 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-02-24 06:48:35.622831577 +0000 UTC m=+116.633251399 I0224 06:48:35.884388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:48:35.905283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-lprtn" condition "Approved" to 2026-02-24 06:48:35.905251436 +0000 UTC m=+116.915671278 I0224 06:48:35.925187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-lprtn" condition "Ready" to 2026-02-24 06:48:35.925174995 +0000 UTC m=+116.935594817 I0224 06:48:35.958194 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:48:35.958178084 +0000 UTC m=+116.968597906 I0224 06:48:35.991820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:48:35.992214 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:48:35.992205008 +0000 UTC m=+117.002624830 I0224 06:48:36.015975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:56:11.567139 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-02-24 06:56:11.567053164 +0000 UTC m=+572.577473036 I0224 06:56:11.567354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:56:11.567434 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-02-24 06:56:11.567413304 +0000 UTC m=+572.577833146 I0224 06:56:11.587514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:56:11.587670 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:56:11.587699 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-02-24 06:56:11.587689423 +0000 UTC m=+572.598109245 I0224 06:56:11.725518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-txhwf" condition "Approved" to 2026-02-24 06:56:11.725503398 +0000 UTC m=+572.735923230 I0224 06:56:11.747665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-txhwf" condition "Ready" to 2026-02-24 06:56:11.747648744 +0000 UTC m=+572.758068576 I0224 06:56:11.785987 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:56:11.785967798 +0000 UTC m=+572.796387650 I0224 06:56:11.810892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:56:11.811548 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:56:11.811538171 +0000 UTC m=+572.821958013 I0224 06:56:11.820408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:56:11.834027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:56:11.834513 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:56:11.834504648 +0000 UTC m=+572.844924470 I0224 06:57:51.833099 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-02-24 06:57:51.833078255 +0000 UTC m=+672.843498097 I0224 06:57:51.833162 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:57:51.833259 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-02-24 06:57:51.833248229 +0000 UTC m=+672.843668081 I0224 06:57:51.858325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:57:51.858416 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:57:51.858436 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-02-24 06:57:51.858427491 +0000 UTC m=+672.868847313 I0224 06:57:52.381380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:57:52.389238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-kcslp" condition "Approved" to 2026-02-24 06:57:52.389226921 +0000 UTC m=+673.399646733 I0224 06:57:52.411366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-kcslp" condition "Ready" to 2026-02-24 06:57:52.411353077 +0000 UTC m=+673.421772879 I0224 06:57:52.443090 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:57:52.443070323 +0000 UTC m=+673.453490175 I0224 06:57:52.467367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:57:52.467945 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:57:52.467935367 +0000 UTC m=+673.478355189 I0224 06:57:52.490720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:57:52.491160 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:57:52.49115014 +0000 UTC m=+673.501569962 I0224 06:59:02.336686 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-24 06:59:02.336671135 +0000 UTC m=+743.347090947 I0224 06:59:02.336713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:59:02.336839 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-02-24 06:59:02.336830559 +0000 UTC m=+743.347250401 I0224 06:59:02.356689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:02.357084 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-24 06:59:02.356772299 +0000 UTC m=+743.367192121 I0224 06:59:02.376968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:02.377095 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-24 06:59:02.377085199 +0000 UTC m=+743.387505011 I0224 06:59:02.377322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:02.386653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-clwms" condition "Approved" to 2026-02-24 06:59:02.386640239 +0000 UTC m=+743.397060051 I0224 06:59:02.398001 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-02-24 06:59:02.397987654 +0000 UTC m=+743.408407476 I0224 06:59:02.410267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-clwms" condition "Ready" to 2026-02-24 06:59:02.410256522 +0000 UTC m=+743.420676324 I0224 06:59:02.426723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:02.449461 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:59:02.449440666 +0000 UTC m=+743.459860478 I0224 06:59:02.474427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:03.018343 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-02-24 06:59:03.018327612 +0000 UTC m=+744.028747434 I0224 06:59:03.018449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:59:03.018500 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-02-24 06:59:03.018490996 +0000 UTC m=+744.028910818 I0224 06:59:03.041078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:03.041203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:59:03.041240 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-02-24 06:59:03.041234557 +0000 UTC m=+744.051654369 I0224 06:59:03.091917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-9dpb2" condition "Approved" to 2026-02-24 06:59:03.091900969 +0000 UTC m=+744.102320781 I0224 06:59:03.109932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-9dpb2" condition "Ready" to 2026-02-24 06:59:03.109920182 +0000 UTC m=+744.120340004 I0224 06:59:03.157497 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:59:03.157474496 +0000 UTC m=+744.167894318 I0224 06:59:03.211490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:03.211737 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:59:03.211730448 +0000 UTC m=+744.222150250 I0224 06:59:03.249986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:03.250267 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:59:03.250258966 +0000 UTC m=+744.260678788 I0224 06:59:03.717278 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-02-24 06:59:03.717261023 +0000 UTC m=+744.727680865 I0224 06:59:04.481186 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-02-24 06:59:04.481174226 +0000 UTC m=+745.491594038 I0224 06:59:49.491064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:59:49.491100 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-02-24 06:59:49.491093408 +0000 UTC m=+790.501513210 I0224 06:59:49.491581 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-02-24 06:59:49.49155402 +0000 UTC m=+790.501973852 I0224 06:59:49.546182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:49.546479 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-02-24 06:59:49.54647053 +0000 UTC m=+790.556890342 I0224 06:59:58.060959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:58.099858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-62qqn" condition "Approved" to 2026-02-24 06:59:58.099841658 +0000 UTC m=+799.110261470 I0224 06:59:58.138832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-62qqn" condition "Ready" to 2026-02-24 06:59:58.138815347 +0000 UTC m=+799.149235199 I0224 06:59:58.209656 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:59:58.209641635 +0000 UTC m=+799.220061467 I0224 06:59:58.235718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:59:58.237171 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:59:58.237159457 +0000 UTC m=+799.247579269 I0224 06:59:58.259311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:02:41.368059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:02:41.368144 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-02-24 07:02:41.368133685 +0000 UTC m=+962.378553537 I0224 07:02:41.368258 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-02-24 07:02:41.368246128 +0000 UTC m=+962.378665980 I0224 07:02:41.387352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:02:41.387459 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:02:41.387481 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-02-24 07:02:41.38747495 +0000 UTC m=+962.397894772 I0224 07:02:41.554564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-fh2d2" condition "Approved" to 2026-02-24 07:02:41.554555176 +0000 UTC m=+962.564974978 I0224 07:02:41.574402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-fh2d2" condition "Ready" to 2026-02-24 07:02:41.574392134 +0000 UTC m=+962.584811976 I0224 07:02:41.602047 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:02:41.602036829 +0000 UTC m=+962.612456671 I0224 07:02:41.621365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:02:41.622265 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:02:41.622256266 +0000 UTC m=+962.632676088 I0224 07:02:41.628680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:02:41.644264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:02:42.939611 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-02-24 07:02:42.939599119 +0000 UTC m=+963.950018941 I0224 07:02:42.939916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:02:42.939938 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-02-24 07:02:42.939934478 +0000 UTC m=+963.950354300 I0224 07:02:42.957089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:02:42.957133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:02:42.957143 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-02-24 07:02:42.95713984 +0000 UTC m=+963.967559652 I0224 07:02:43.133376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-9z26s" condition "Approved" to 2026-02-24 07:02:43.133365855 +0000 UTC m=+964.143785677 I0224 07:02:43.153509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-9z26s" condition "Ready" to 2026-02-24 07:02:43.153501191 +0000 UTC m=+964.163921003 I0224 07:02:43.182498 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:02:43.182486038 +0000 UTC m=+964.192905850 I0224 07:02:43.203917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:02:43.204481 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:02:43.204470831 +0000 UTC m=+964.214890653 I0224 07:02:43.227005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:03.175081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:06:03.175139 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-02-24 07:06:03.175132828 +0000 UTC m=+1164.185552670 I0224 07:06:03.175572 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-02-24 07:06:03.175566428 +0000 UTC m=+1164.185986250 I0224 07:06:03.190006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:03.190076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:06:03.190101 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-02-24 07:06:03.190094773 +0000 UTC m=+1164.200514625 I0224 07:06:03.540471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-vbbdz" condition "Approved" to 2026-02-24 07:06:03.540454742 +0000 UTC m=+1164.550874564 I0224 07:06:03.569206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-vbbdz" condition "Ready" to 2026-02-24 07:06:03.569184864 +0000 UTC m=+1164.579604686 I0224 07:06:03.603269 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:06:03.603253219 +0000 UTC m=+1164.613673061 I0224 07:06:03.626100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:03.626764 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:06:03.626753319 +0000 UTC m=+1164.637173161 I0224 07:06:03.652641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:35.828629 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t9z56-vnc" condition "Ready" to 2026-02-24 07:06:35.828610789 +0000 UTC m=+1196.839030631 I0224 07:06:35.828761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-t9z56-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:06:35.828804 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t9z56-vnc" condition "Issuing" to 2026-02-24 07:06:35.828795563 +0000 UTC m=+1196.839215385 I0224 07:06:35.834444 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t9z56-api" condition "Ready" to 2026-02-24 07:06:35.834430625 +0000 UTC m=+1196.844850477 I0224 07:06:35.834562 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-t9z56-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:06:35.834595 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t9z56-api" condition "Issuing" to 2026-02-24 07:06:35.834587849 +0000 UTC m=+1196.845007701 I0224 07:06:35.854646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-t9z56-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-api\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:35.854837 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t9z56-api" condition "Ready" to 2026-02-24 07:06:35.854821718 +0000 UTC m=+1196.865241600 I0224 07:06:35.858327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-t9z56-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:35.858485 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-t9z56-vnc" condition "Ready" to 2026-02-24 07:06:35.858465379 +0000 UTC m=+1196.868885231 I0224 07:06:36.370611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-t9z56-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-api\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:36.366289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-t9z56-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:36.853706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t9z56-api-8g9ql" condition "Approved" to 2026-02-24 07:06:36.853687192 +0000 UTC m=+1197.864107044 I0224 07:06:36.886198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t9z56-vnc-jkrrw" condition "Approved" to 2026-02-24 07:06:36.886183328 +0000 UTC m=+1197.896603170 I0224 07:06:37.239939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t9z56-api-8g9ql" condition "Ready" to 2026-02-24 07:06:37.239925601 +0000 UTC m=+1198.250345433 I0224 07:06:37.321184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-t9z56-vnc-jkrrw" condition "Ready" to 2026-02-24 07:06:37.321126411 +0000 UTC m=+1198.331546263 I0224 07:06:38.197309 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t9z56-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:06:38.197295394 +0000 UTC m=+1199.207715196 I0224 07:06:38.197786 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t9z56-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:06:38.197773426 +0000 UTC m=+1199.208193238 I0224 07:06:38.232100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-t9z56-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-api\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:38.232468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-t9z56-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:38.232569 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t9z56-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:06:38.232560789 +0000 UTC m=+1199.242980611 I0224 07:06:38.232967 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-t9z56-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:06:38.232958709 +0000 UTC m=+1199.243378561 I0224 07:06:38.263353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-t9z56-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:38.272562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-t9z56-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-api\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:38.274957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-t9z56-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:06:38.276302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-t9z56-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-t9z56-api\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:10:33.225805 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-02-24 07:10:33.225792477 +0000 UTC m=+1434.236212329 I0224 07:10:33.226180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:10:33.226225 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-02-24 07:10:33.226217088 +0000 UTC m=+1434.236636910 I0224 07:10:33.241297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:10:33.241574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:10:33.241607 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-02-24 07:10:33.241599385 +0000 UTC m=+1434.252019207 I0224 07:10:33.589323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:10:33.594903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-jb7xh" condition "Approved" to 2026-02-24 07:10:33.594893627 +0000 UTC m=+1434.605313449 I0224 07:10:33.612218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-jb7xh" condition "Ready" to 2026-02-24 07:10:33.612206772 +0000 UTC m=+1434.622626594 I0224 07:10:33.641592 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:10:33.64157977 +0000 UTC m=+1434.651999582 I0224 07:10:33.667619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:10:33.710905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:10:34.705548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:10:34.705579 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-02-24 07:10:34.705572151 +0000 UTC m=+1435.715991973 I0224 07:10:34.705785 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-02-24 07:10:34.705762076 +0000 UTC m=+1435.716181928 I0224 07:10:34.720676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:10:34.720780 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-02-24 07:10:34.720771905 +0000 UTC m=+1435.731191717 I0224 07:10:34.800442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:10:34.829023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-s9prp" condition "Approved" to 2026-02-24 07:10:34.829005509 +0000 UTC m=+1435.839425321 I0224 07:10:34.850634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-s9prp" condition "Ready" to 2026-02-24 07:10:34.850621465 +0000 UTC m=+1435.861041287 I0224 07:10:34.880123 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:10:34.880107941 +0000 UTC m=+1435.890527793 I0224 07:10:34.903186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:52.494545 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-02-24 07:12:52.494525798 +0000 UTC m=+1573.504945640 I0224 07:12:52.494797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:12:52.494915 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-02-24 07:12:52.494906658 +0000 UTC m=+1573.505326480 I0224 07:12:52.510340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:52.510407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:12:52.510421 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-02-24 07:12:52.51041584 +0000 UTC m=+1573.520835662 E0224 07:12:52.510883 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0224 07:12:52.510939 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-02-24 07:12:52.510934632 +0000 UTC m=+1573.521354454 I0224 07:12:52.510956 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0224 07:12:52.522427 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0224 07:12:52.522641 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0224 07:12:52.522719 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0224 07:12:52.522799 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0224 07:12:52.553938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:52.559573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-ksw94" condition "Approved" to 2026-02-24 07:12:52.559561361 +0000 UTC m=+1573.569981173 I0224 07:12:52.579719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-ksw94" condition "Ready" to 2026-02-24 07:12:52.57970265 +0000 UTC m=+1573.590122472 I0224 07:12:52.611123 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:12:52.611109373 +0000 UTC m=+1573.621529185 I0224 07:12:52.628701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:53.171650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:12:53.171718 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-02-24 07:12:53.171703894 +0000 UTC m=+1574.182123736 I0224 07:12:53.172290 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-02-24 07:12:53.172264958 +0000 UTC m=+1574.182684810 E0224 07:12:53.184333 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0224 07:12:53.184369 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-02-24 07:12:53.184361154 +0000 UTC m=+1574.194780976 I0224 07:12:53.184463 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0224 07:12:53.188372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:53.188491 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-02-24 07:12:53.188484908 +0000 UTC m=+1574.198904730 E0224 07:12:53.201485 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0224 07:12:53.201616 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0224 07:12:53.201677 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0224 07:12:53.201712 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0224 07:12:53.219716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:53.243420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-qt4dq" condition "Approved" to 2026-02-24 07:12:53.243401475 +0000 UTC m=+1574.253821297 I0224 07:12:53.272987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-qt4dq" condition "Ready" to 2026-02-24 07:12:53.272974452 +0000 UTC m=+1574.283394274 I0224 07:12:53.320147 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:12:53.320131383 +0000 UTC m=+1574.330551185 I0224 07:12:53.353969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:53.894261 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-02-24 07:12:53.894233665 +0000 UTC m=+1574.904653517 I0224 07:12:53.894957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:12:53.895049 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-02-24 07:12:53.895040765 +0000 UTC m=+1574.905460617 I0224 07:12:53.914044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:53.914154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:12:53.914178 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-02-24 07:12:53.914170929 +0000 UTC m=+1574.924590741 I0224 07:12:53.962132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-v9dj4" condition "Approved" to 2026-02-24 07:12:53.962103579 +0000 UTC m=+1574.972523431 I0224 07:12:53.978076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-v9dj4" condition "Ready" to 2026-02-24 07:12:53.978057373 +0000 UTC m=+1574.988477205 I0224 07:12:57.523166 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:12:57.523147143 +0000 UTC m=+1578.533566985 I0224 07:12:57.535030 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-v9dj4" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:12:57.535013982 +0000 UTC m=+1578.545433804 I0224 07:12:57.569932 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:12:57.569919134 +0000 UTC m=+1578.580338956 I0224 07:12:57.597819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:57.598161 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:12:57.598152107 +0000 UTC m=+1578.608571929 I0224 07:12:57.601296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:57.617527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:12:57.617766 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:12:57.617751732 +0000 UTC m=+1578.628171554 I0224 07:12:58.203265 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:12:58.203255632 +0000 UTC m=+1579.213675444 I0224 07:15:21.469068 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-02-24 07:15:21.469053196 +0000 UTC m=+1722.479473038 I0224 07:15:21.469134 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:15:21.469171 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-02-24 07:15:21.46916164 +0000 UTC m=+1722.479581482 I0224 07:15:21.485120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:15:21.485185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:15:21.485201 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-02-24 07:15:21.485193834 +0000 UTC m=+1722.495613656 I0224 07:15:21.766520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-z46kx" condition "Approved" to 2026-02-24 07:15:21.766507691 +0000 UTC m=+1722.776927513 I0224 07:15:21.787642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-z46kx" condition "Ready" to 2026-02-24 07:15:21.787629223 +0000 UTC m=+1722.798049045 I0224 07:15:21.821406 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:15:21.821390767 +0000 UTC m=+1722.831810589 I0224 07:15:21.848470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:07.014803 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-02-24 07:16:07.014784245 +0000 UTC m=+1768.025204097 I0224 07:16:07.037238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:16:07.037282 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-02-24 07:16:07.037273423 +0000 UTC m=+1768.047693275 I0224 07:16:07.037720 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-02-24 07:16:07.037710644 +0000 UTC m=+1768.048130486 I0224 07:16:07.055719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:07.055878 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-02-24 07:16:07.055867162 +0000 UTC m=+1768.066287004 E0224 07:16:07.069305 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0224 07:16:07.119305 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-02-24 07:16:07.119290365 +0000 UTC m=+1768.129710167 I0224 07:16:07.136232 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-02-24 07:16:07.136220632 +0000 UTC m=+1768.146640454 I0224 07:16:07.139157 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:16:07.139213 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-02-24 07:16:07.139202108 +0000 UTC m=+1768.149621940 I0224 07:16:07.155270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:07.155351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:16:07.155371 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-02-24 07:16:07.155365866 +0000 UTC m=+1768.165785668 E0224 07:16:07.387489 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0224 07:16:07.714939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-xs5r9" condition "Approved" to 2026-02-24 07:16:07.714930411 +0000 UTC m=+1768.725350223 I0224 07:16:07.740540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-xs5r9" condition "Ready" to 2026-02-24 07:16:07.740525077 +0000 UTC m=+1768.750944909 I0224 07:16:07.774594 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:16:07.774582857 +0000 UTC m=+1768.785002679 I0224 07:16:07.810696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:07.958106 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-02-24 07:16:07.958089783 +0000 UTC m=+1768.968509595 I0224 07:16:07.992035 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-02-24 07:16:07.9920222 +0000 UTC m=+1769.002442002 I0224 07:16:07.992344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:16:07.992359 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-02-24 07:16:07.992356729 +0000 UTC m=+1769.002776541 I0224 07:16:08.012230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:08.012289 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-02-24 07:16:08.012281402 +0000 UTC m=+1769.022701214 I0224 07:16:08.435458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:08.443966 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-02-24 07:16:08.443949046 +0000 UTC m=+1769.454368858 I0224 07:16:08.465997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-95srn" condition "Approved" to 2026-02-24 07:16:08.465985683 +0000 UTC m=+1769.476405505 I0224 07:16:08.466272 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-02-24 07:16:08.46626385 +0000 UTC m=+1769.476683672 I0224 07:16:08.466373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:16:08.466407 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-02-24 07:16:08.466398363 +0000 UTC m=+1769.476818195 I0224 07:16:08.487345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-95srn" condition "Ready" to 2026-02-24 07:16:08.487328791 +0000 UTC m=+1769.497748633 I0224 07:16:08.503835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:08.503927 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-02-24 07:16:08.503918561 +0000 UTC m=+1769.514338383 I0224 07:16:08.555056 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:16:08.555042413 +0000 UTC m=+1769.565462225 I0224 07:16:08.567461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:08.574336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:08.574740 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:16:08.57472936 +0000 UTC m=+1769.585149192 I0224 07:16:08.596436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:08.599644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-q7h9w" condition "Approved" to 2026-02-24 07:16:08.599637589 +0000 UTC m=+1769.610057401 I0224 07:16:08.635889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-q7h9w" condition "Ready" to 2026-02-24 07:16:08.635870634 +0000 UTC m=+1769.646290476 I0224 07:16:08.727091 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:16:08.727053527 +0000 UTC m=+1769.737473349 I0224 07:16:08.812188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:08.812463 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:16:08.812455224 +0000 UTC m=+1769.822875066 I0224 07:16:08.902823 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-02-24 07:16:08.902806407 +0000 UTC m=+1769.913226229 I0224 07:16:08.925928 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:16:08.925964 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-02-24 07:16:08.925956361 +0000 UTC m=+1769.936376183 I0224 07:16:08.926085 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-02-24 07:16:08.926062594 +0000 UTC m=+1769.936482446 I0224 07:16:09.013539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:09.212729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:09.212810 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-02-24 07:16:09.212802237 +0000 UTC m=+1770.223222049 I0224 07:16:09.412634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:09.571346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-78mbf" condition "Approved" to 2026-02-24 07:16:09.571330674 +0000 UTC m=+1770.581750496 I0224 07:16:09.929664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-78mbf" condition "Ready" to 2026-02-24 07:16:09.929652575 +0000 UTC m=+1770.940072397 I0224 07:16:10.169920 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:16:10.169898824 +0000 UTC m=+1771.180318666 I0224 07:16:10.267311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:16:10.267746 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:16:10.267737865 +0000 UTC m=+1771.278157677 I0224 07:16:10.475298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:19:39.923717 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-02-24 07:19:39.923702356 +0000 UTC m=+1980.934122168 I0224 07:19:39.923944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:19:39.924056 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-02-24 07:19:39.924042754 +0000 UTC m=+1980.934462626 I0224 07:19:39.939583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:19:39.939629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:19:39.939641 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-02-24 07:19:39.939635757 +0000 UTC m=+1980.950055569 I0224 07:19:40.256331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-82xjl" condition "Approved" to 2026-02-24 07:19:40.256314904 +0000 UTC m=+1981.266734726 I0224 07:19:40.295928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-82xjl" condition "Ready" to 2026-02-24 07:19:40.295918278 +0000 UTC m=+1981.306338080 I0224 07:19:40.324557 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:19:40.324547417 +0000 UTC m=+1981.334967229 I0224 07:19:40.346792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:19:40.347089 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:19:40.347084004 +0000 UTC m=+1981.357503816 I0224 07:19:40.372873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:19:40.373196 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:19:40.37318744 +0000 UTC m=+1981.383607262 I0224 07:19:42.386975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:19:42.387074 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-02-24 07:19:42.387063861 +0000 UTC m=+1983.397483693 I0224 07:19:42.387564 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-02-24 07:19:42.387559453 +0000 UTC m=+1983.397979265 I0224 07:19:42.406257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:19:42.406522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:19:42.406593 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-02-24 07:19:42.406582951 +0000 UTC m=+1983.417002793 I0224 07:19:42.624625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:19:42.629255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-jmcp2" condition "Approved" to 2026-02-24 07:19:42.629242016 +0000 UTC m=+1983.639661848 I0224 07:19:42.652344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-jmcp2" condition "Ready" to 2026-02-24 07:19:42.652335516 +0000 UTC m=+1983.662755328 I0224 07:19:42.688905 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:19:42.688892144 +0000 UTC m=+1983.699311946 I0224 07:19:42.716023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:19:42.716377 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:19:42.716370125 +0000 UTC m=+1983.726789927 I0224 07:19:42.737947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:19:42.752966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:26:14.033431 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:26:14.033519 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-02-24 07:26:14.033508445 +0000 UTC m=+2375.043928287 I0224 07:26:14.033785 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-02-24 07:26:14.033773592 +0000 UTC m=+2375.044193434 I0224 07:26:14.050973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:26:14.051071 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-02-24 07:26:14.051063367 +0000 UTC m=+2375.061483179 I0224 07:26:14.221306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:26:14.250732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-8fjg4" condition "Approved" to 2026-02-24 07:26:14.250714233 +0000 UTC m=+2375.261134045 I0224 07:26:14.271300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-8fjg4" condition "Ready" to 2026-02-24 07:26:14.271287339 +0000 UTC m=+2375.281707161 I0224 07:26:14.299626 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:26:14.299614491 +0000 UTC m=+2375.310034323 I0224 07:26:14.329201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:26:51.607187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 07:26:51.607229 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-02-24 07:26:51.607220785 +0000 UTC m=+2412.617640607 I0224 07:26:51.607188 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-02-24 07:26:51.607174124 +0000 UTC m=+2412.617593936 I0224 07:26:51.625675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:26:51.625949 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-02-24 07:26:51.625939535 +0000 UTC m=+2412.636359377 I0224 07:26:52.202346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:26:52.238417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-52rvr" condition "Approved" to 2026-02-24 07:26:52.238406594 +0000 UTC m=+2413.248826406 I0224 07:26:52.254603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-52rvr" condition "Ready" to 2026-02-24 07:26:52.25458973 +0000 UTC m=+2413.265009542 I0224 07:26:52.289058 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:26:52.289040466 +0000 UTC m=+2413.299460318 I0224 07:26:52.309864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:26:52.310305 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 07:26:52.31029749 +0000 UTC m=+2413.320717312 I0224 07:26:52.326551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 07:26:52.336596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"