I0428 06:05:05.828208 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 06:05:05.828294 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 06:05:05.828352 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 06:05:05.831409 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 06:05:05.831764 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 06:05:05.831850 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 06:05:05.831948 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 06:05:05.838443 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 06:05:05.856981 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 06:05:05.857361 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 06:05:05.857416 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 06:05:05.857446 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 06:05:05.862553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 06:05:05.865099 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 06:05:05.865172 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 06:05:05.868064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 06:05:05.870218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 06:05:05.875736 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 06:05:05.879617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 06:05:05.882144 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 06:05:05.882300 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 06:05:05.884187 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 06:05:05.885944 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 06:05:05.887723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 06:05:05.889495 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 06:05:05.892563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 06:05:05.897497 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 06:05:05.897564 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 06:05:05.900265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 06:05:05.902938 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 06:05:05.905466 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 06:05:05.908103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 06:05:05.910227 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 06:05:05.912737 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:05.913529 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:05.913538 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:05.913882 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:05.914329 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:05.914446 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:05.914707 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:05.915093 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:05.915433 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:06.024688 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 06:05:21.011900 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 06:05:21.011886125 +0000 UTC m=+15.214309648 I0428 06:05:21.826149 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:05:21.826139086 +0000 UTC m=+16.028562589 I0428 06:05:21.826879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:05:21.826923 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 06:05:21.826916789 +0000 UTC m=+16.029340292 E0428 06:05:21.844497 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:05:21.844546 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 06:05:21.84454147 +0000 UTC m=+16.046964963 E0428 06:05:21.844563 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:05:21.850284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:21.850356 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:05:21.850350449 +0000 UTC m=+16.052773952 E0428 06:05:21.863776 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 06:05:21.863898 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:05:21.863981 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:05:21.864032 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 06:05:21.867064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:21.867132 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 06:05:21.867123975 +0000 UTC m=+16.069547498 I0428 06:05:21.889160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-js8sg" condition "Approved" to 2026-04-28 06:05:21.889150191 +0000 UTC m=+16.091573684 I0428 06:05:21.900734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-js8sg" condition "Ready" to 2026-04-28 06:05:21.900710749 +0000 UTC m=+16.103134242 I0428 06:05:21.925213 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:05:21.925203087 +0000 UTC m=+16.127626590 I0428 06:05:21.947195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:26.864202 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:05:26.864184291 +0000 UTC m=+21.066607814 I0428 06:05:27.068761 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 06:05:27.068747004 +0000 UTC m=+21.271170517 I0428 06:05:27.068816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:05:27.068874 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 06:05:27.068862486 +0000 UTC m=+21.271286009 I0428 06:05:27.087170 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 06:05:27.087155378 +0000 UTC m=+21.289578891 I0428 06:05:27.104167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:27.104216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:05:27.104232 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 06:05:27.10422725 +0000 UTC m=+21.306650743 I0428 06:05:27.268226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vqqc5" condition "Approved" to 2026-04-28 06:05:27.268210299 +0000 UTC m=+21.470633832 I0428 06:05:27.301181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-vqqc5" condition "Ready" to 2026-04-28 06:05:27.301170392 +0000 UTC m=+21.503593895 I0428 06:05:27.344632 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:05:27.344619064 +0000 UTC m=+21.547042577 I0428 06:05:27.365820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:27.420685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:32.398870 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 06:05:32.398855785 +0000 UTC m=+26.601279268 I0428 06:05:32.398976 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:05:32.399007 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 06:05:32.399000447 +0000 UTC m=+26.601423960 I0428 06:05:32.418448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:32.418536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:05:32.418559 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 06:05:32.418552561 +0000 UTC m=+26.620976064 I0428 06:05:32.470265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-ffhck" condition "Approved" to 2026-04-28 06:05:32.470246244 +0000 UTC m=+26.672669777 I0428 06:05:32.495401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-ffhck" condition "Ready" to 2026-04-28 06:05:32.495383353 +0000 UTC m=+26.697806886 I0428 06:05:32.524793 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:05:32.524770855 +0000 UTC m=+26.727194358 I0428 06:05:32.547324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:32.547574 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:05:32.547566564 +0000 UTC m=+26.749990067 I0428 06:05:32.578661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:33.156207 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 06:05:33.156187585 +0000 UTC m=+27.358611108 I0428 06:05:33.156650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:05:33.156677 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 06:05:33.156671673 +0000 UTC m=+27.359095206 I0428 06:05:33.172424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:33.172506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:05:33.172526 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 06:05:33.172518224 +0000 UTC m=+27.374941757 I0428 06:05:33.229162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:33.257685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-br48z" condition "Approved" to 2026-04-28 06:05:33.257667117 +0000 UTC m=+27.460090650 I0428 06:05:33.315478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-br48z" condition "Ready" to 2026-04-28 06:05:33.315462405 +0000 UTC m=+27.517885928 I0428 06:05:33.361880 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:05:33.361864697 +0000 UTC m=+27.564288230 I0428 06:05:33.394612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:33.394988 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:05:33.394976982 +0000 UTC m=+27.597400505 I0428 06:05:33.412842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:05:33.413256 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:05:33.413243154 +0000 UTC m=+27.615666677 I0428 06:05:33.889680 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-28 06:05:33.889670658 +0000 UTC m=+28.092094151 I0428 06:05:34.645518 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-28 06:05:34.645503253 +0000 UTC m=+28.847926786 I0428 06:08:25.109343 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-28 06:08:25.109323417 +0000 UTC m=+199.311746920 I0428 06:08:25.109367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:08:25.109411 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-28 06:08:25.109403729 +0000 UTC m=+199.311827232 E0428 06:08:25.123290 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 06:08:25.123340 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-28 06:08:25.123332931 +0000 UTC m=+199.325756424 I0428 06:08:25.123365 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 06:08:25.125695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:25.125791 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-28 06:08:25.125783816 +0000 UTC m=+199.328207309 E0428 06:08:25.133758 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0428 06:08:25.134025 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 06:08:25.134082 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 06:08:25.134247 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0428 06:08:25.141255 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-28 06:08:25.141242489 +0000 UTC m=+199.343665992 I0428 06:08:25.141594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:08:25.141608 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-28 06:08:25.141603549 +0000 UTC m=+199.344027052 I0428 06:08:25.165082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:25.165154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:08:25.165175 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-28 06:08:25.165166928 +0000 UTC m=+199.367590431 I0428 06:08:25.325057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-lcrvc" condition "Approved" to 2026-04-28 06:08:25.325047276 +0000 UTC m=+199.527470779 I0428 06:08:25.343965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-lcrvc" condition "Ready" to 2026-04-28 06:08:25.34394946 +0000 UTC m=+199.546372953 I0428 06:08:25.541847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:25.577700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rhnk7" condition "Approved" to 2026-04-28 06:08:25.577679859 +0000 UTC m=+199.780103362 I0428 06:08:25.604448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rhnk7" condition "Ready" to 2026-04-28 06:08:25.604435003 +0000 UTC m=+199.806858506 I0428 06:08:25.641511 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:08:25.641498783 +0000 UTC m=+199.843922276 I0428 06:08:25.663148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:25.663735 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:08:25.663722266 +0000 UTC m=+199.866145809 I0428 06:08:25.688782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:08:30.135362 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:08:30.135350509 +0000 UTC m=+204.337774002 I0428 06:08:30.151174 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-lcrvc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:08:30.151162451 +0000 UTC m=+204.353585944 I0428 06:08:30.198579 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:08:30.198567526 +0000 UTC m=+204.400991029 I0428 06:08:30.219232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:12:55.354390 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready" to 2026-04-28 06:12:55.354362877 +0000 UTC m=+469.556786400 I0428 06:12:55.354637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:12:55.354763 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-28 06:12:55.354751868 +0000 UTC m=+469.557175391 I0428 06:12:55.372911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:12:55.372973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-116.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:12:55.372989 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Issuing" to 2026-04-28 06:12:55.372984348 +0000 UTC m=+469.575407841 I0428 06:12:55.698503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:12:55.703080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-tjtkw" condition "Approved" to 2026-04-28 06:12:55.703069024 +0000 UTC m=+469.905492517 I0428 06:12:55.719984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-116.nip.io-tls-tjtkw" condition "Ready" to 2026-04-28 06:12:55.719968258 +0000 UTC m=+469.922391761 I0428 06:12:55.750737 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-116.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:12:55.750713981 +0000 UTC m=+469.953137504 I0428 06:12:55.772724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-116.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-116.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:15:21.314492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:15:21.314555 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 06:15:21.314548421 +0000 UTC m=+615.516971924 I0428 06:15:21.314874 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 06:15:21.314849399 +0000 UTC m=+615.517272942 I0428 06:15:21.335171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:15:21.335858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:15:21.335985 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 06:15:21.335892144 +0000 UTC m=+615.538315647 I0428 06:15:21.471193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-696vh" condition "Approved" to 2026-04-28 06:15:21.47117452 +0000 UTC m=+615.673598023 I0428 06:15:21.489749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-696vh" condition "Ready" to 2026-04-28 06:15:21.489734397 +0000 UTC m=+615.692157920 I0428 06:15:21.517745 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:15:21.517727571 +0000 UTC m=+615.720151074 I0428 06:15:21.538721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:15:21.539030 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:15:21.539023513 +0000 UTC m=+615.741447016 I0428 06:15:21.548156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:15:21.555174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:02.892828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:16:02.892874 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 06:16:02.892864683 +0000 UTC m=+657.095288196 I0428 06:16:02.892884 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 06:16:02.892876143 +0000 UTC m=+657.095299686 I0428 06:16:02.908478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:02.908580 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 06:16:02.908569843 +0000 UTC m=+657.110993366 I0428 06:16:03.104057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:03.134474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4jbz5" condition "Approved" to 2026-04-28 06:16:03.134458657 +0000 UTC m=+657.336882160 I0428 06:16:03.157337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-4jbz5" condition "Ready" to 2026-04-28 06:16:03.157326514 +0000 UTC m=+657.359750017 I0428 06:16:03.188563 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:16:03.188552438 +0000 UTC m=+657.390975931 I0428 06:16:03.211935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:03.213287 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:16:03.213278795 +0000 UTC m=+657.415702308 I0428 06:16:03.235397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:33.857251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:16:33.857285 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 06:16:33.85727751 +0000 UTC m=+688.059701013 I0428 06:16:33.858436 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 06:16:33.858421852 +0000 UTC m=+688.060845345 I0428 06:16:33.879078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:33.879245 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 06:16:33.879233672 +0000 UTC m=+688.081657195 I0428 06:16:34.148568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:34.186137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fh7nk" condition "Approved" to 2026-04-28 06:16:34.186119593 +0000 UTC m=+688.388543136 I0428 06:16:34.208543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fh7nk" condition "Ready" to 2026-04-28 06:16:34.208528168 +0000 UTC m=+688.410951691 I0428 06:16:34.242434 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:16:34.242423487 +0000 UTC m=+688.444846990 I0428 06:16:34.268730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:34.269054 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:16:34.269047137 +0000 UTC m=+688.471470640 I0428 06:16:34.276187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:34.284453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:34.284839 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:16:34.284828599 +0000 UTC m=+688.487252122 I0428 06:16:35.278904 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 06:16:35.278889978 +0000 UTC m=+689.481313481 I0428 06:16:35.278923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:16:35.279108 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 06:16:35.279090794 +0000 UTC m=+689.481514297 I0428 06:16:35.296317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:35.296390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:16:35.296445 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 06:16:35.296438769 +0000 UTC m=+689.498862272 E0428 06:16:35.296758 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 06:16:35.296778 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 06:16:35.296773758 +0000 UTC m=+689.499197261 E0428 06:16:35.296817 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:16:35.317596 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 06:16:35.317673 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:16:35.317696 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 06:16:35.317730 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 06:16:35.359559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bj4f2" condition "Approved" to 2026-04-28 06:16:35.359539629 +0000 UTC m=+689.561963122 I0428 06:16:35.377470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bj4f2" condition "Ready" to 2026-04-28 06:16:35.37744345 +0000 UTC m=+689.579866943 I0428 06:16:35.403078 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:16:35.403064872 +0000 UTC m=+689.605488355 I0428 06:16:35.420770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:35.421496 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:16:35.421461336 +0000 UTC m=+689.623884829 I0428 06:16:35.435947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:16:40.318248 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:16:40.318233435 +0000 UTC m=+694.520656938 I0428 06:17:17.368614 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 06:17:17.368601061 +0000 UTC m=+731.571024544 I0428 06:17:17.368974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:17.368983 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 06:17:17.368980881 +0000 UTC m=+731.571404374 I0428 06:17:17.407120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:17.407199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:17.407213 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 06:17:17.407208909 +0000 UTC m=+731.609632402 I0428 06:17:18.089441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-z8clb" condition "Approved" to 2026-04-28 06:17:18.08943047 +0000 UTC m=+732.291853963 I0428 06:17:18.115605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-z8clb" condition "Ready" to 2026-04-28 06:17:18.115591427 +0000 UTC m=+732.318014920 I0428 06:17:18.152415 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:18.152398676 +0000 UTC m=+732.354822199 I0428 06:17:18.179681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:18.180865 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:18.180857076 +0000 UTC m=+732.383280569 I0428 06:17:18.223117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" E0428 06:17:18.225889 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"placement-api-certs-rmxp4\" not found" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" I0428 06:17:24.012103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:24.012139 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 06:17:24.012133611 +0000 UTC m=+738.214557104 I0428 06:17:24.012381 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:17:24.012377338 +0000 UTC m=+738.214800831 I0428 06:17:24.012572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:24.012581 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 06:17:24.012578373 +0000 UTC m=+738.215001866 I0428 06:17:24.012750 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:24.012759 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 06:17:24.012756938 +0000 UTC m=+738.215180421 I0428 06:17:24.013608 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:17:24.013592491 +0000 UTC m=+738.216016004 I0428 06:17:24.015260 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 06:17:24.015245736 +0000 UTC m=+738.217669219 I0428 06:17:24.073654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.073968 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 06:17:24.073959156 +0000 UTC m=+738.276382679 I0428 06:17:24.084964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.085022 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 06:17:24.085016109 +0000 UTC m=+738.287439602 I0428 06:17:24.086397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.089036 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 06:17:24.089026289 +0000 UTC m=+738.291449802 I0428 06:17:24.297754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.375862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rp6vw" condition "Approved" to 2026-04-28 06:17:24.37585268 +0000 UTC m=+738.578276173 I0428 06:17:24.417790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.419678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rp6vw" condition "Ready" to 2026-04-28 06:17:24.419672252 +0000 UTC m=+738.622095745 I0428 06:17:24.504401 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:24.504383874 +0000 UTC m=+738.706807387 I0428 06:17:24.536457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8qbf5" condition "Approved" to 2026-04-28 06:17:24.536441922 +0000 UTC m=+738.738865435 I0428 06:17:24.562767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.563097 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:24.563091633 +0000 UTC m=+738.765515126 I0428 06:17:24.567629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8qbf5" condition "Ready" to 2026-04-28 06:17:24.567618357 +0000 UTC m=+738.770041860 I0428 06:17:24.595200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.606322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.657732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:24.657766 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 06:17:24.657759858 +0000 UTC m=+738.860183351 I0428 06:17:24.696941 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:24.696933421 +0000 UTC m=+738.899356914 I0428 06:17:24.785458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4pv5x" condition "Approved" to 2026-04-28 06:17:24.785447018 +0000 UTC m=+738.987870521 I0428 06:17:24.827019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:24.932670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rn755" condition "Approved" to 2026-04-28 06:17:24.932657143 +0000 UTC m=+739.135080636 I0428 06:17:25.057287 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:25.057273809 +0000 UTC m=+739.259697302 I0428 06:17:25.059993 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:25.060033 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls" condition "Issuing" to 2026-04-28 06:17:25.060025515 +0000 UTC m=+739.262449008 I0428 06:17:25.060053 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls" condition "Ready" to 2026-04-28 06:17:25.060027125 +0000 UTC m=+739.262450648 I0428 06:17:25.104512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4pv5x" condition "Ready" to 2026-04-28 06:17:25.104497524 +0000 UTC m=+739.306921027 I0428 06:17:25.435035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rn755" condition "Ready" to 2026-04-28 06:17:25.435022094 +0000 UTC m=+739.637445607 I0428 06:17:25.483331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:25.568210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:25.568310 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls" condition "Ready" to 2026-04-28 06:17:25.568300507 +0000 UTC m=+739.770724030 E0428 06:17:26.075139 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-h858c\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0428 06:17:26.334148 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:26.33413054 +0000 UTC m=+740.536554063 I0428 06:17:26.574290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:26.575172 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:26.575165777 +0000 UTC m=+740.777589270 I0428 06:17:26.627150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:26.866940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:27.240601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:27.331144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:27.392205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s4r6z-tnfzt" condition "Approved" to 2026-04-28 06:17:27.392196374 +0000 UTC m=+741.594619867 I0428 06:17:27.443157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:27.605547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s4r6z-tnfzt" condition "Ready" to 2026-04-28 06:17:27.605536612 +0000 UTC m=+741.807960105 I0428 06:17:28.103948 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:28.103935633 +0000 UTC m=+742.306359126 I0428 06:17:28.180055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s4r6z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:34.515165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:34.515196 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:17:34.515189866 +0000 UTC m=+748.717613349 I0428 06:17:34.515600 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 06:17:34.515595297 +0000 UTC m=+748.718018790 I0428 06:17:34.533654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:34.533744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:17:34.533767 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 06:17:34.533760875 +0000 UTC m=+748.736184388 I0428 06:17:34.723502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zlr6k" condition "Approved" to 2026-04-28 06:17:34.723488076 +0000 UTC m=+748.925911589 I0428 06:17:34.744959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zlr6k" condition "Ready" to 2026-04-28 06:17:34.744946174 +0000 UTC m=+748.947369677 I0428 06:17:34.772463 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:34.772448127 +0000 UTC m=+748.974871620 I0428 06:17:34.797359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:17:34.797579 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:17:34.797572796 +0000 UTC m=+748.999996279 I0428 06:17:34.830597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:18:10.030832 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 06:18:10.030819674 +0000 UTC m=+784.233243187 I0428 06:18:10.031205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:18:10.031221 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 06:18:10.031218195 +0000 UTC m=+784.233641688 I0428 06:18:10.046207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:18:10.046481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:18:10.046634 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 06:18:10.046580956 +0000 UTC m=+784.249004469 I0428 06:18:10.450883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vg87r" condition "Approved" to 2026-04-28 06:18:10.450873955 +0000 UTC m=+784.653297448 I0428 06:18:10.470721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vg87r" condition "Ready" to 2026-04-28 06:18:10.470710818 +0000 UTC m=+784.673134321 I0428 06:18:10.497446 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:18:10.49743458 +0000 UTC m=+784.699858073 I0428 06:18:10.518156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:18:10.568234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:18:30.330673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:18:30.330730 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 06:18:30.330717621 +0000 UTC m=+804.533141164 I0428 06:18:30.332469 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 06:18:30.332455598 +0000 UTC m=+804.534879131 I0428 06:18:30.357122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:18:30.357227 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 06:18:30.357219317 +0000 UTC m=+804.559642820 I0428 06:18:30.523969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:18:30.563786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-m9vgg" condition "Approved" to 2026-04-28 06:18:30.563772217 +0000 UTC m=+804.766195750 I0428 06:18:30.585342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-m9vgg" condition "Ready" to 2026-04-28 06:18:30.585337358 +0000 UTC m=+804.787760851 I0428 06:18:30.614860 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:18:30.614840606 +0000 UTC m=+804.817264129 I0428 06:18:30.638081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:18:30.638454 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:18:30.638445983 +0000 UTC m=+804.840869476 I0428 06:18:30.660429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:18:30.660661 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:18:30.660654332 +0000 UTC m=+804.863077825 I0428 06:19:19.169002 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 06:19:19.168988644 +0000 UTC m=+853.371412137 I0428 06:19:19.169306 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:19.169322 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 06:19:19.169319913 +0000 UTC m=+853.371743406 I0428 06:19:19.219069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:19.220027 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 06:19:19.220015185 +0000 UTC m=+853.422438678 I0428 06:19:20.367417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:20.433985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-lbsxq" condition "Approved" to 2026-04-28 06:19:20.433962488 +0000 UTC m=+854.636385981 I0428 06:19:20.455639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-lbsxq" condition "Ready" to 2026-04-28 06:19:20.455627672 +0000 UTC m=+854.658051165 I0428 06:19:20.501056 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:20.501044389 +0000 UTC m=+854.703467882 I0428 06:19:20.543340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:20.544186 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:20.543820303 +0000 UTC m=+854.746243786 I0428 06:19:20.570063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:20.570516 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:20.570511106 +0000 UTC m=+854.772934599 I0428 06:19:20.570684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:25.420525 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-28 06:19:25.420511896 +0000 UTC m=+859.622935379 I0428 06:19:25.440628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:25.440665 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 06:19:25.440656349 +0000 UTC m=+859.643079862 I0428 06:19:25.440801 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 06:19:25.440796443 +0000 UTC m=+859.643219946 I0428 06:19:25.456227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:25.456284 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 06:19:25.456276737 +0000 UTC m=+859.658700240 E0428 06:19:25.478637 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0428 06:19:25.547555 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-28 06:19:25.547538932 +0000 UTC m=+859.749962435 I0428 06:19:25.569891 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 06:19:25.569880666 +0000 UTC m=+859.772304149 I0428 06:19:25.570167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:25.570253 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-28 06:19:25.570240096 +0000 UTC m=+859.772663619 I0428 06:19:25.592436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:25.592554 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 06:19:25.592543088 +0000 UTC m=+859.794966591 E0428 06:19:25.751024 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0428 06:19:25.874838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:25.921611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-f9d46" condition "Approved" to 2026-04-28 06:19:25.92160067 +0000 UTC m=+860.124024163 I0428 06:19:25.951107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-f9d46" condition "Ready" to 2026-04-28 06:19:25.951096439 +0000 UTC m=+860.153519932 I0428 06:19:26.067275 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:26.067261628 +0000 UTC m=+860.269685131 I0428 06:19:26.091066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:26.091613 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:26.091593106 +0000 UTC m=+860.294016599 I0428 06:19:26.095744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:26.112019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:26.114282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:26.114592 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:26.114585637 +0000 UTC m=+860.317009130 I0428 06:19:26.513299 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-28 06:19:26.513286561 +0000 UTC m=+860.715710054 I0428 06:19:26.535850 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-28 06:19:26.53583735 +0000 UTC m=+860.738260843 I0428 06:19:26.536057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:26.536103 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 06:19:26.536093937 +0000 UTC m=+860.738517430 I0428 06:19:26.567071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:26.567147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:26.567164 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 06:19:26.56715947 +0000 UTC m=+860.769582963 I0428 06:19:26.865745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-dpxr5" condition "Approved" to 2026-04-28 06:19:26.865732765 +0000 UTC m=+861.068156258 I0428 06:19:26.899065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-dpxr5" condition "Ready" to 2026-04-28 06:19:26.89905635 +0000 UTC m=+861.101479843 I0428 06:19:26.939950 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:26.939938442 +0000 UTC m=+861.142361925 I0428 06:19:26.953828 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-28 06:19:26.953809633 +0000 UTC m=+861.156233156 I0428 06:19:26.971235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:26.980335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:26.980399 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 06:19:26.980393033 +0000 UTC m=+861.182816526 I0428 06:19:26.980574 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 06:19:26.980560967 +0000 UTC m=+861.182984460 I0428 06:19:27.004173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:27.004245 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 06:19:27.004238348 +0000 UTC m=+861.206661841 I0428 06:19:27.215218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:27.267669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-d55rz" condition "Approved" to 2026-04-28 06:19:27.267657668 +0000 UTC m=+861.470081161 I0428 06:19:27.298877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-d55rz" condition "Ready" to 2026-04-28 06:19:27.298868995 +0000 UTC m=+861.501292488 I0428 06:19:27.340773 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:27.340757985 +0000 UTC m=+861.543181488 I0428 06:19:27.367134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:27.470256 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-28 06:19:27.470242649 +0000 UTC m=+861.672666142 I0428 06:19:27.505181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:27.505217 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 06:19:27.505209529 +0000 UTC m=+861.707633042 I0428 06:19:27.505421 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-28 06:19:27.505413405 +0000 UTC m=+861.707836908 I0428 06:19:27.720555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:27.720618 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-28 06:19:27.720610402 +0000 UTC m=+861.923033895 I0428 06:19:28.080631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:28.151442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-jdwtb" condition "Approved" to 2026-04-28 06:19:28.151428327 +0000 UTC m=+862.353851810 I0428 06:19:28.251269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-jdwtb" condition "Ready" to 2026-04-28 06:19:28.251257258 +0000 UTC m=+862.453680751 I0428 06:19:28.581587 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:28.581574085 +0000 UTC m=+862.783997588 I0428 06:19:28.732681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:54.858972 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 06:19:54.858949379 +0000 UTC m=+889.061372912 I0428 06:19:54.859108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:54.859172 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-28 06:19:54.859155895 +0000 UTC m=+889.061579428 I0428 06:19:54.876462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:54.876569 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 06:19:54.87655931 +0000 UTC m=+889.078982813 I0428 06:19:55.015861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:55.044554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-d9fzl" condition "Approved" to 2026-04-28 06:19:55.044540833 +0000 UTC m=+889.246964336 I0428 06:19:55.076391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-d9fzl" condition "Ready" to 2026-04-28 06:19:55.076375681 +0000 UTC m=+889.278799184 I0428 06:19:55.111104 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:55.111093149 +0000 UTC m=+889.313516652 I0428 06:19:55.132611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:56.184355 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 06:19:56.18434017 +0000 UTC m=+890.386763663 I0428 06:19:56.184749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:19:56.184772 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 06:19:56.184768532 +0000 UTC m=+890.387192035 I0428 06:19:56.204148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:56.204246 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 06:19:56.204236304 +0000 UTC m=+890.406659807 I0428 06:19:56.351596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:56.382096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-n6df6" condition "Approved" to 2026-04-28 06:19:56.382070465 +0000 UTC m=+890.584493968 I0428 06:19:56.398914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-n6df6" condition "Ready" to 2026-04-28 06:19:56.398896555 +0000 UTC m=+890.601320088 I0428 06:19:56.431958 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:56.431940466 +0000 UTC m=+890.634363969 I0428 06:19:56.449098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:19:56.449550 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:19:56.449541936 +0000 UTC m=+890.651965439 I0428 06:19:56.475198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:20:59.057265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:20:59.057309 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 06:20:59.057298845 +0000 UTC m=+953.259722368 I0428 06:20:59.058073 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-28 06:20:59.058064076 +0000 UTC m=+953.260487599 I0428 06:20:59.131264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:20:59.131540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:20:59.131621 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 06:20:59.131559092 +0000 UTC m=+953.333982585 I0428 06:20:59.282973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-w97wz" condition "Approved" to 2026-04-28 06:20:59.282955492 +0000 UTC m=+953.485379015 I0428 06:20:59.300815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-w97wz" condition "Ready" to 2026-04-28 06:20:59.300803409 +0000 UTC m=+953.503226942 I0428 06:20:59.327611 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:20:59.327597 +0000 UTC m=+953.530020503 I0428 06:20:59.345485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:20:59.346096 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:20:59.346087234 +0000 UTC m=+953.548510737 I0428 06:20:59.363240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:20:59.365578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:20:59.365946 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:20:59.365936036 +0000 UTC m=+953.568359549 I0428 06:21:53.154979 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-28 06:21:53.154956211 +0000 UTC m=+1007.357379744 I0428 06:21:53.155086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:21:53.155129 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 06:21:53.155119365 +0000 UTC m=+1007.357542878 I0428 06:21:53.172170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:21:53.172358 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-28 06:21:53.172346616 +0000 UTC m=+1007.374770119 I0428 06:21:53.417661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:21:53.445502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-s9h88" condition "Approved" to 2026-04-28 06:21:53.445470297 +0000 UTC m=+1007.647893830 I0428 06:21:53.465415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-s9h88" condition "Ready" to 2026-04-28 06:21:53.465401741 +0000 UTC m=+1007.667825244 I0428 06:21:53.489622 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:21:53.489610472 +0000 UTC m=+1007.692033975 I0428 06:21:53.508854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:21:53.509319 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:21:53.509294389 +0000 UTC m=+1007.711733342 I0428 06:21:53.518458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:21:53.526549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:21:53.526936 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:21:53.5269289 +0000 UTC m=+1007.729352403 I0428 06:21:54.543618 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 06:21:54.543602888 +0000 UTC m=+1008.746026401 I0428 06:21:54.544024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 06:21:54.544065 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-28 06:21:54.54405757 +0000 UTC m=+1008.746481073 I0428 06:21:54.562575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:21:54.562710 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 06:21:54.562702899 +0000 UTC m=+1008.765126402 I0428 06:21:54.719834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 06:21:54.751187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-x7cmf" condition "Approved" to 2026-04-28 06:21:54.751172341 +0000 UTC m=+1008.953595844 I0428 06:21:54.769167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-x7cmf" condition "Ready" to 2026-04-28 06:21:54.769156282 +0000 UTC m=+1008.971579785 I0428 06:21:54.808256 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 06:21:54.808244929 +0000 UTC m=+1009.010668422 I0428 06:21:54.829865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"