I0630 17:54:54.045190 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0630 17:54:54.045303 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0630 17:54:54.045380 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0630 17:54:54.049414 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0630 17:54:54.049760 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0630 17:54:54.049896 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0630 17:54:54.049911 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0630 17:54:54.052455 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0630 17:54:54.068349 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0630 17:54:54.068709 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0630 17:54:54.075189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0630 17:54:54.077892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0630 17:54:54.080296 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0630 17:54:54.082595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0630 17:54:54.085215 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0630 17:54:54.085245 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0630 17:54:54.085253 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0630 17:54:54.085326 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0630 17:54:54.088042 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0630 17:54:54.092151 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0630 17:54:54.094651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0630 17:54:54.096995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0630 17:54:54.099072 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0630 17:54:54.100638 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0630 17:54:54.100731 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0630 17:54:54.102569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0630 17:54:54.104205 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0630 17:54:54.106170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0630 17:54:54.108614 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0630 17:54:54.113308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0630 17:54:54.117044 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0630 17:54:54.117112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0630 17:54:54.121048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0630 17:54:54.123988 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.124160 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.124576 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.125362 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.137841 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.156334 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.175376 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.195098 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.203825 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:54:54.212587 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0630 17:55:05.982330 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-30 17:55:05.982314057 +0000 UTC m=+11.965465405 I0630 17:55:06.670124 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:55:06.670112 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-30 17:55:06.670093202 +0000 UTC m=+12.653244600 I0630 17:55:06.670169 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 17:55:06.670161844 +0000 UTC m=+12.653313222 E0630 17:55:06.682334 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 17:55:06.682526 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-30 17:55:06.682513151 +0000 UTC m=+12.665664539 E0630 17:55:06.682568 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 17:55:06.683390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:06.683465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:55:06.683568 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-30 17:55:06.683485828 +0000 UTC m=+12.666637216 E0630 17:55:06.695800 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0630 17:55:06.695906 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 17:55:06.695961 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 17:55:06.696001 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0630 17:55:06.718208 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tqnnj" condition "Approved" to 2026-06-30 17:55:06.718196034 +0000 UTC m=+12.701347392 I0630 17:55:06.728780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tqnnj" condition "Ready" to 2026-06-30 17:55:06.728768953 +0000 UTC m=+12.711920321 I0630 17:55:06.753814 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:06.753798245 +0000 UTC m=+12.736949623 I0630 17:55:06.769786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:06.770526 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:06.7704833 +0000 UTC m=+12.753634708 I0630 17:55:06.772925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:06.781472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:06.781829 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:06.781817629 +0000 UTC m=+12.764968987 I0630 17:55:11.696954 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:11.696939423 +0000 UTC m=+17.680090811 I0630 17:55:29.340477 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:55:29.340542 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-30 17:55:29.340526829 +0000 UTC m=+35.323678187 I0630 17:55:29.341231 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 17:55:29.341221089 +0000 UTC m=+35.324372447 I0630 17:55:29.348757 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-30 17:55:29.348745448 +0000 UTC m=+35.331896796 I0630 17:55:29.366362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:29.366457 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-30 17:55:29.366447068 +0000 UTC m=+35.349598416 I0630 17:55:29.443636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:55:29.481328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-66z46" condition "Approved" to 2026-06-30 17:55:29.481307963 +0000 UTC m=+35.464459321 I0630 17:55:29.511295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-66z46" condition "Ready" to 2026-06-30 17:55:29.511279004 +0000 UTC m=+35.494430392 I0630 17:55:29.543334 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:55:29.543323092 +0000 UTC m=+35.526474450 I0630 17:55:29.567491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:59:40.796691 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-06-30 17:59:40.796653515 +0000 UTC m=+286.779804903 I0630 17:59:40.796762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-240.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 17:59:40.796821 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Issuing" to 2026-06-30 17:59:40.79681576 +0000 UTC m=+286.779967108 I0630 17:59:40.814006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:59:40.814063 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready" to 2026-06-30 17:59:40.814058582 +0000 UTC m=+286.797209940 I0630 17:59:41.002388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:59:41.030587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-5664q" condition "Approved" to 2026-06-30 17:59:41.030570702 +0000 UTC m=+287.013722090 I0630 17:59:41.057595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-240.nip.io-tls-5664q" condition "Ready" to 2026-06-30 17:59:41.057579917 +0000 UTC m=+287.040731295 I0630 17:59:41.085582 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:59:41.085569401 +0000 UTC m=+287.068720779 I0630 17:59:41.111179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:59:41.111566 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:59:41.111559168 +0000 UTC m=+287.094710546 I0630 17:59:41.128409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 17:59:41.128834 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-240.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 17:59:41.128825731 +0000 UTC m=+287.111977089 I0630 17:59:41.139745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-240.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-240.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:46.692333 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-30 18:00:46.692299224 +0000 UTC m=+352.675450602 I0630 18:00:46.692359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:00:46.692407 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-30 18:00:46.692395857 +0000 UTC m=+352.675547235 E0630 18:00:46.704675 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 18:00:46.704710 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-30 18:00:46.70470177 +0000 UTC m=+352.687853128 E0630 18:00:46.704753 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0630 18:00:46.706954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:46.707080 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:00:46.707170 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-30 18:00:46.707160619 +0000 UTC m=+352.690312007 E0630 18:00:46.716490 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0630 18:00:46.716587 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 18:00:46.716626 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0630 18:00:46.716714 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0630 18:00:46.742019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:46.746398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k776x" condition "Approved" to 2026-06-30 18:00:46.746377653 +0000 UTC m=+352.729529041 I0630 18:00:46.758925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k776x" condition "Ready" to 2026-06-30 18:00:46.758888922 +0000 UTC m=+352.742040310 I0630 18:00:46.779511 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:46.779498237 +0000 UTC m=+352.762649625 I0630 18:00:46.796212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:46.796660 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:46.796650066 +0000 UTC m=+352.779801444 I0630 18:00:46.809274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:00:46.809597 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:46.809587947 +0000 UTC m=+352.792739335 I0630 18:00:51.717845 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:00:51.717834627 +0000 UTC m=+357.700985975 I0630 18:01:28.971810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:01:28.971843 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-30 18:01:28.971836266 +0000 UTC m=+394.954987624 I0630 18:01:28.972191 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 18:01:28.972185655 +0000 UTC m=+394.955337013 I0630 18:01:28.976318 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-30 18:01:28.97631046 +0000 UTC m=+394.959461828 I0630 18:01:28.976532 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-30 18:01:28.976528097 +0000 UTC m=+394.959679455 I0630 18:01:28.976715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:01:28.976739 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 18:01:28.976732452 +0000 UTC m=+394.959883810 I0630 18:01:28.977007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:01:28.977028 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-30 18:01:28.9770245 +0000 UTC m=+394.960175858 I0630 18:01:29.016181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:29.016247 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-30 18:01:29.016240605 +0000 UTC m=+394.999391953 I0630 18:01:29.016638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:29.016673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:01:29.016687 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-30 18:01:29.016683267 +0000 UTC m=+394.999834615 I0630 18:01:29.037400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:29.037483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:01:29.037508 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-30 18:01:29.037503468 +0000 UTC m=+395.020654816 I0630 18:01:29.235539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:29.243707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lgc5h" condition "Approved" to 2026-06-30 18:01:29.243692802 +0000 UTC m=+395.226844190 I0630 18:01:29.276876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lgc5h" condition "Ready" to 2026-06-30 18:01:29.276864618 +0000 UTC m=+395.260015976 I0630 18:01:29.309499 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:29.309491048 +0000 UTC m=+395.292642386 I0630 18:01:29.343836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:29.360483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:29.377393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:29.385200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cl82x" condition "Approved" to 2026-06-30 18:01:29.385191051 +0000 UTC m=+395.368342399 I0630 18:01:29.392808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xf4x4" condition "Approved" to 2026-06-30 18:01:29.392793743 +0000 UTC m=+395.375945101 I0630 18:01:29.406797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cl82x" condition "Ready" to 2026-06-30 18:01:29.406788884 +0000 UTC m=+395.389940242 I0630 18:01:29.472356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xf4x4" condition "Ready" to 2026-06-30 18:01:29.472332632 +0000 UTC m=+395.455484010 I0630 18:01:30.050674 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:30.050666832 +0000 UTC m=+396.033818170 I0630 18:01:30.065880 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:30.065870886 +0000 UTC m=+396.049022244 I0630 18:01:30.214293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:30.214645 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:30.214638927 +0000 UTC m=+396.197790285 I0630 18:01:30.317225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:30.318206 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:30.318194417 +0000 UTC m=+396.301345775 I0630 18:01:30.716044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:30.816278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:30.865576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:30.914247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:38.817206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:01:38.817249 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls" condition "Issuing" to 2026-06-30 18:01:38.817237963 +0000 UTC m=+404.800389341 I0630 18:01:38.817306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls" condition "Ready" to 2026-06-30 18:01:38.817284454 +0000 UTC m=+404.800435842 I0630 18:01:38.840778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:38.840894 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls" condition "Ready" to 2026-06-30 18:01:38.840885463 +0000 UTC m=+404.824036821 I0630 18:01:39.037121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:01:39.068219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lkp2p-dwhjt" condition "Approved" to 2026-06-30 18:01:39.068205447 +0000 UTC m=+405.051356805 I0630 18:01:39.088580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lkp2p-dwhjt" condition "Ready" to 2026-06-30 18:01:39.088569775 +0000 UTC m=+405.071721133 I0630 18:01:39.116750 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:01:39.116737411 +0000 UTC m=+405.099888769 I0630 18:01:39.141027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lkp2p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:12.043507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:12.043540 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-30 18:02:12.043532538 +0000 UTC m=+438.026683896 I0630 18:02:12.043862 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-30 18:02:12.043857377 +0000 UTC m=+438.027008735 I0630 18:02:12.059325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:12.059429 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:02:12.059459 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-30 18:02:12.059451602 +0000 UTC m=+438.042602960 I0630 18:02:12.410229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:12.419783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6kq5c" condition "Approved" to 2026-06-30 18:02:12.419766082 +0000 UTC m=+438.402917470 I0630 18:02:12.440203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6kq5c" condition "Ready" to 2026-06-30 18:02:12.440191603 +0000 UTC m=+438.423342961 I0630 18:02:12.471152 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:12.471141057 +0000 UTC m=+438.454292405 I0630 18:02:12.493280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:12.493660 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:02:12.493650515 +0000 UTC m=+438.476801873 I0630 18:02:12.500517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:02:12.513240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:05:25.110094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:05:25.110103 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-30 18:05:25.110085516 +0000 UTC m=+631.093236914 I0630 18:05:25.110157 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-30 18:05:25.110151818 +0000 UTC m=+631.093303176 I0630 18:05:25.124889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:05:25.124969 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-30 18:05:25.124961801 +0000 UTC m=+631.108113159 I0630 18:05:25.239154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:05:25.266657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9j6d6" condition "Approved" to 2026-06-30 18:05:25.266645027 +0000 UTC m=+631.249796385 I0630 18:05:25.287089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9j6d6" condition "Ready" to 2026-06-30 18:05:25.287074557 +0000 UTC m=+631.270225945 I0630 18:05:25.314177 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:05:25.314164263 +0000 UTC m=+631.297315651 I0630 18:05:25.336223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:05:25.336587 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:05:25.33657851 +0000 UTC m=+631.319729868 I0630 18:05:25.358486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:05:25.361901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:43.225430 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-30 18:07:43.225381031 +0000 UTC m=+769.208532399 I0630 18:07:43.225590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:07:43.225672 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-30 18:07:43.225662269 +0000 UTC m=+769.208813657 I0630 18:07:43.241715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:43.241806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:07:43.241856 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-30 18:07:43.241850381 +0000 UTC m=+769.225001719 I0630 18:07:43.653358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:43.663946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-n4mdz" condition "Approved" to 2026-06-30 18:07:43.663935801 +0000 UTC m=+769.647087159 I0630 18:07:43.681944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-n4mdz" condition "Ready" to 2026-06-30 18:07:43.681929684 +0000 UTC m=+769.665081062 I0630 18:07:43.707972 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:07:43.707959381 +0000 UTC m=+769.691110749 I0630 18:07:43.738399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:43.738879 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:07:43.738869935 +0000 UTC m=+769.722021293 I0630 18:07:43.759458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:43.761158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:07:43.762160 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:07:43.762117854 +0000 UTC m=+769.745269242 I0630 18:08:38.754002 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-30 18:08:38.753987346 +0000 UTC m=+824.737138704 I0630 18:08:38.754062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:08:38.754092 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-30 18:08:38.754084439 +0000 UTC m=+824.737235797 I0630 18:08:38.780037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:08:38.780092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:08:38.780106 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-30 18:08:38.780102055 +0000 UTC m=+824.763253413 I0630 18:08:38.981952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hwvvz" condition "Approved" to 2026-06-30 18:08:38.981942466 +0000 UTC m=+824.965093814 I0630 18:08:39.000414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hwvvz" condition "Ready" to 2026-06-30 18:08:39.000401711 +0000 UTC m=+824.983553059 I0630 18:08:39.039902 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:08:39.039884032 +0000 UTC m=+825.023035410 I0630 18:08:39.063749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:11:31.352582 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-30 18:11:31.352545435 +0000 UTC m=+997.335696813 I0630 18:11:31.352678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:11:31.352741 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-30 18:11:31.35273417 +0000 UTC m=+997.335885558 I0630 18:11:31.368996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:11:31.369132 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-30 18:11:31.369122376 +0000 UTC m=+997.352273754 I0630 18:11:31.500047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:11:31.528951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-p9np7" condition "Approved" to 2026-06-30 18:11:31.528929267 +0000 UTC m=+997.512080665 I0630 18:11:31.548371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-p9np7" condition "Ready" to 2026-06-30 18:11:31.548360009 +0000 UTC m=+997.531511367 I0630 18:11:31.572882 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:11:31.572873061 +0000 UTC m=+997.556024409 I0630 18:11:31.592392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:11:31.592917 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:11:31.592911269 +0000 UTC m=+997.576062617 I0630 18:11:31.613448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:17:50.271218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:17:50.271252 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-30 18:17:50.271245388 +0000 UTC m=+1376.254396746 I0630 18:17:50.271489 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-30 18:17:50.271467174 +0000 UTC m=+1376.254618552 I0630 18:17:50.286953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:17:50.287047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:17:50.287068 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-30 18:17:50.287062229 +0000 UTC m=+1376.270213577 I0630 18:17:50.782005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-tcgkt" condition "Approved" to 2026-06-30 18:17:50.781995188 +0000 UTC m=+1376.765146546 I0630 18:17:50.799160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-tcgkt" condition "Ready" to 2026-06-30 18:17:50.799142245 +0000 UTC m=+1376.782293633 I0630 18:17:50.824017 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:17:50.824003228 +0000 UTC m=+1376.807154586 I0630 18:17:50.847269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:17:50.894602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:19:11.279003 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-30 18:19:11.2789853 +0000 UTC m=+1457.262136658 I0630 18:19:11.279004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:19:11.279060 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-30 18:19:11.279053042 +0000 UTC m=+1457.262204400 I0630 18:19:11.298221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:19:11.298319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:19:11.298352 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-30 18:19:11.298342669 +0000 UTC m=+1457.281494037 I0630 18:19:11.716776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:19:11.720818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-gzggb" condition "Approved" to 2026-06-30 18:19:11.720800572 +0000 UTC m=+1457.703951960 I0630 18:19:11.740070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-gzggb" condition "Ready" to 2026-06-30 18:19:11.740053577 +0000 UTC m=+1457.723204925 I0630 18:19:11.767167 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:19:11.76715611 +0000 UTC m=+1457.750307448 I0630 18:19:11.786508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:19:11.787752 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:19:11.787742323 +0000 UTC m=+1457.770893681 I0630 18:19:11.803961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:19:11.805839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:19:11.806248 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:19:11.806239327 +0000 UTC m=+1457.789390675 I0630 18:20:02.985988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:20:02.986065 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-30 18:20:02.986048377 +0000 UTC m=+1508.969199745 I0630 18:20:02.986072 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-30 18:20:02.986061757 +0000 UTC m=+1508.969213135 I0630 18:20:03.000732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:03.000833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:20:03.000852 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-30 18:20:03.000844688 +0000 UTC m=+1508.983996046 I0630 18:20:03.049894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-jwjb9" condition "Approved" to 2026-06-30 18:20:03.049879961 +0000 UTC m=+1509.033031319 I0630 18:20:03.070132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-jwjb9" condition "Ready" to 2026-06-30 18:20:03.070115974 +0000 UTC m=+1509.053267362 I0630 18:20:03.099688 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:20:03.099670276 +0000 UTC m=+1509.082821664 I0630 18:20:03.121532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:03.172523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:03.655589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:20:03.655645 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-30 18:20:03.655632951 +0000 UTC m=+1509.638784329 I0630 18:20:03.655662 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-30 18:20:03.655644442 +0000 UTC m=+1509.638795810 I0630 18:20:03.675458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:03.675592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:20:03.675629 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-30 18:20:03.675619257 +0000 UTC m=+1509.658770615 I0630 18:20:03.724585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-z86kj" condition "Approved" to 2026-06-30 18:20:03.724562887 +0000 UTC m=+1509.707714275 I0630 18:20:03.737647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-z86kj" condition "Ready" to 2026-06-30 18:20:03.737636841 +0000 UTC m=+1509.720788189 I0630 18:20:03.763381 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:20:03.763366356 +0000 UTC m=+1509.746517714 I0630 18:20:03.783606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:03.784011 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:20:03.78400456 +0000 UTC m=+1509.767155918 I0630 18:20:03.807732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:04.379454 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-06-30 18:20:04.379439063 +0000 UTC m=+1510.362590451 I0630 18:20:05.013805 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-06-30 18:20:05.013794368 +0000 UTC m=+1510.996945726 I0630 18:20:49.987717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:20:49.987771 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-30 18:20:49.987764481 +0000 UTC m=+1555.970915829 I0630 18:20:49.988156 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-30 18:20:49.988152492 +0000 UTC m=+1555.971303840 I0630 18:20:50.014585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:50.014642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:20:50.014659 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-30 18:20:50.014652738 +0000 UTC m=+1555.997804106 I0630 18:20:50.880101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:50.903352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-4bghn" condition "Approved" to 2026-06-30 18:20:50.903335773 +0000 UTC m=+1556.886487131 I0630 18:20:50.925874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-4bghn" condition "Ready" to 2026-06-30 18:20:50.92586401 +0000 UTC m=+1556.909015358 I0630 18:20:50.958315 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:20:50.958302131 +0000 UTC m=+1556.941453479 I0630 18:20:50.981326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:50.981988 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:20:50.98198196 +0000 UTC m=+1556.965133318 I0630 18:20:50.996256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:20:51.010627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:11.393846 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-30 18:23:11.393803111 +0000 UTC m=+1697.376954469 I0630 18:23:11.394049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:23:11.394105 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-30 18:23:11.39409871 +0000 UTC m=+1697.377250068 I0630 18:23:11.413402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:11.413485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:23:11.413513 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-30 18:23:11.413505138 +0000 UTC m=+1697.396656526 I0630 18:23:11.702399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:11.707480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-7lg9p" condition "Approved" to 2026-06-30 18:23:11.70747205 +0000 UTC m=+1697.690623398 I0630 18:23:11.727131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-7lg9p" condition "Ready" to 2026-06-30 18:23:11.727120416 +0000 UTC m=+1697.710271774 I0630 18:23:11.751454 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:23:11.751437942 +0000 UTC m=+1697.734589330 I0630 18:23:11.771011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:11.771396 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:23:11.771389897 +0000 UTC m=+1697.754541255 I0630 18:23:11.780250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:11.790399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:12.760103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:23:12.760133 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-06-30 18:23:12.760126324 +0000 UTC m=+1698.743277672 I0630 18:23:12.760367 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-30 18:23:12.76034685 +0000 UTC m=+1698.743498228 I0630 18:23:12.778212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:12.778301 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-30 18:23:12.778292309 +0000 UTC m=+1698.761443667 I0630 18:23:12.937643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:12.971821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-zjgjl" condition "Approved" to 2026-06-30 18:23:12.971803298 +0000 UTC m=+1698.954954676 I0630 18:23:12.987968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-zjgjl" condition "Ready" to 2026-06-30 18:23:12.987955377 +0000 UTC m=+1698.971106735 I0630 18:23:13.014349 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:23:13.014337451 +0000 UTC m=+1698.997488799 I0630 18:23:13.030684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:13.031036 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:23:13.031029395 +0000 UTC m=+1699.014180733 I0630 18:23:13.053992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:23:13.055850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:06.828521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:26:06.828553 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-30 18:26:06.828545929 +0000 UTC m=+1872.811697287 I0630 18:26:06.828690 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-30 18:26:06.828669432 +0000 UTC m=+1872.811820820 I0630 18:26:06.846996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:06.847219 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-30 18:26:06.847209735 +0000 UTC m=+1872.830361113 I0630 18:26:06.957370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:06.987414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-8q8jg" condition "Approved" to 2026-06-30 18:26:06.987405714 +0000 UTC m=+1872.970557072 I0630 18:26:07.005562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-8q8jg" condition "Ready" to 2026-06-30 18:26:07.005555477 +0000 UTC m=+1872.988706845 I0630 18:26:07.037672 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:26:07.037655685 +0000 UTC m=+1873.020807063 I0630 18:26:07.060799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:07.061132 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:26:07.061092683 +0000 UTC m=+1873.044244041 I0630 18:26:07.074849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:07.075203 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:26:07.075194684 +0000 UTC m=+1873.058346072 I0630 18:26:55.498174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7tfxd-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:26:55.498210 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7tfxd-api" condition "Issuing" to 2026-06-30 18:26:55.498203006 +0000 UTC m=+1921.481354364 I0630 18:26:55.498893 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7tfxd-api" condition "Ready" to 2026-06-30 18:26:55.498887695 +0000 UTC m=+1921.482039043 I0630 18:26:55.498960 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7tfxd-vnc" condition "Ready" to 2026-06-30 18:26:55.498946677 +0000 UTC m=+1921.482098015 I0630 18:26:55.499063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7tfxd-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:26:55.499106 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7tfxd-vnc" condition "Issuing" to 2026-06-30 18:26:55.499097551 +0000 UTC m=+1921.482248909 I0630 18:26:55.528998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7tfxd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7tfxd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:55.529106 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7tfxd-vnc" condition "Ready" to 2026-06-30 18:26:55.529098391 +0000 UTC m=+1921.512249749 I0630 18:26:55.530574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7tfxd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7tfxd-api\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:55.530669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7tfxd-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:26:55.530693 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7tfxd-api" condition "Issuing" to 2026-06-30 18:26:55.530687165 +0000 UTC m=+1921.513838523 I0630 18:26:55.709738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7tfxd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7tfxd-api\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:55.722556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7tfxd-api-4mk84" condition "Approved" to 2026-06-30 18:26:55.722546464 +0000 UTC m=+1921.705697812 I0630 18:26:55.745324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7tfxd-api-4mk84" condition "Ready" to 2026-06-30 18:26:55.745314534 +0000 UTC m=+1921.728465892 I0630 18:26:55.761910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7tfxd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7tfxd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:55.776271 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7tfxd-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:26:55.77625882 +0000 UTC m=+1921.759410178 I0630 18:26:55.794280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7tfxd-vnc-sclj6" condition "Approved" to 2026-06-30 18:26:55.794269719 +0000 UTC m=+1921.777421067 I0630 18:26:55.796636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-7tfxd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7tfxd-api\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:26:55.814508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7tfxd-vnc-sclj6" condition "Ready" to 2026-06-30 18:26:55.814493218 +0000 UTC m=+1921.797644596 I0630 18:26:55.853160 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7tfxd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:26:55.853148187 +0000 UTC m=+1921.836299535 I0630 18:26:55.873135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-7tfxd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7tfxd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:29:03.788119 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-06-30 18:29:03.78808647 +0000 UTC m=+2049.771237848 I0630 18:29:03.788787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:29:03.788821 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-06-30 18:29:03.78881463 +0000 UTC m=+2049.771966018 I0630 18:29:03.810456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:29:03.810572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:29:03.810594 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-06-30 18:29:03.810586945 +0000 UTC m=+2049.793738293 I0630 18:29:04.451326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-jhcgg" condition "Approved" to 2026-06-30 18:29:04.45131413 +0000 UTC m=+2050.434465488 I0630 18:29:04.469540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-jhcgg" condition "Ready" to 2026-06-30 18:29:04.469530357 +0000 UTC m=+2050.452681705 I0630 18:29:04.502138 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:29:04.502129503 +0000 UTC m=+2050.485280861 I0630 18:29:04.526454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:29:04.526780 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:29:04.526773278 +0000 UTC m=+2050.509924646 I0630 18:29:04.541958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:29:04.542272 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:29:04.542260739 +0000 UTC m=+2050.525412097 I0630 18:32:34.348103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:32:34.348220 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-30 18:32:34.348213744 +0000 UTC m=+2260.331365092 I0630 18:32:34.348105 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-30 18:32:34.34808328 +0000 UTC m=+2260.331234638 I0630 18:32:34.367508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:32:34.367622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:32:34.367656 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-30 18:32:34.367646552 +0000 UTC m=+2260.350797940 I0630 18:32:34.662246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-k44ml" condition "Approved" to 2026-06-30 18:32:34.662230678 +0000 UTC m=+2260.645382046 I0630 18:32:34.680695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-k44ml" condition "Ready" to 2026-06-30 18:32:34.680683659 +0000 UTC m=+2260.663835017 I0630 18:32:34.705234 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:32:34.70522193 +0000 UTC m=+2260.688373288 I0630 18:32:34.727114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:32:35.840755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:32:35.840770 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-30 18:32:35.840751836 +0000 UTC m=+2261.823903204 I0630 18:32:35.840803 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-30 18:32:35.840791657 +0000 UTC m=+2261.823943035 I0630 18:32:35.857304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:32:35.857401 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-30 18:32:35.857393717 +0000 UTC m=+2261.840545075 I0630 18:32:36.061472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:32:36.097050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-7zqdx" condition "Approved" to 2026-06-30 18:32:36.09703827 +0000 UTC m=+2262.080189628 I0630 18:32:36.116607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-7zqdx" condition "Ready" to 2026-06-30 18:32:36.116593212 +0000 UTC m=+2262.099744570 I0630 18:32:36.161461 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:32:36.161449565 +0000 UTC m=+2262.144600923 I0630 18:32:36.187118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:32:36.187409 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:32:36.187399784 +0000 UTC m=+2262.170551132 I0630 18:32:36.201684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:32:36.201949 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:32:36.201941188 +0000 UTC m=+2262.185092536 I0630 18:34:35.975129 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-30 18:34:35.975088322 +0000 UTC m=+2381.958239700 I0630 18:34:35.975640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:34:35.975724 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-30 18:34:35.975717689 +0000 UTC m=+2381.958869067 E0630 18:34:35.987606 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0630 18:34:35.987681 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-06-30 18:34:35.98767252 +0000 UTC m=+2381.970823888 I0630 18:34:35.987714 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0630 18:34:35.997249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:35.997870 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-30 18:34:35.997859583 +0000 UTC m=+2381.981010991 E0630 18:34:36.001348 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0630 18:34:36.001525 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0630 18:34:36.001546 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0630 18:34:36.001578 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0630 18:34:36.026306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-tw2wv" condition "Approved" to 2026-06-30 18:34:36.026291751 +0000 UTC m=+2382.009443119 I0630 18:34:36.030401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:36.030502 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-30 18:34:36.030494717 +0000 UTC m=+2382.013646075 I0630 18:34:36.045245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-tw2wv" condition "Ready" to 2026-06-30 18:34:36.045234966 +0000 UTC m=+2382.028386334 I0630 18:34:36.082124 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:36.082111578 +0000 UTC m=+2382.065262936 I0630 18:34:36.102172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:36.102360 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:36.102355429 +0000 UTC m=+2382.085506777 I0630 18:34:36.126659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:36.605204 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-30 18:34:36.605191148 +0000 UTC m=+2382.588342496 I0630 18:34:36.605513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:34:36.605527 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-30 18:34:36.605524467 +0000 UTC m=+2382.588675815 E0630 18:34:36.617791 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0630 18:34:36.617836 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-06-30 18:34:36.617826178 +0000 UTC m=+2382.600977536 I0630 18:34:36.617897 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0630 18:34:36.623101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:36.623169 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-30 18:34:36.623161976 +0000 UTC m=+2382.606313354 E0630 18:34:36.628180 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0630 18:34:36.628279 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0630 18:34:36.628314 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0630 18:34:36.628346 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0630 18:34:36.645319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:36.645524 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-30 18:34:36.645515295 +0000 UTC m=+2382.628666643 I0630 18:34:36.654932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-vsv65" condition "Approved" to 2026-06-30 18:34:36.654921326 +0000 UTC m=+2382.638072684 I0630 18:34:36.669402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-vsv65" condition "Ready" to 2026-06-30 18:34:36.669393947 +0000 UTC m=+2382.652545295 I0630 18:34:36.697387 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:36.697375693 +0000 UTC m=+2382.680527051 I0630 18:34:36.714738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:36.714926 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:36.714920159 +0000 UTC m=+2382.698071507 I0630 18:34:36.733661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:36.733828 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:36.733822623 +0000 UTC m=+2382.716973971 I0630 18:34:37.366875 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-30 18:34:37.366856111 +0000 UTC m=+2383.350007489 I0630 18:34:37.366942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:34:37.367269 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-30 18:34:37.367252492 +0000 UTC m=+2383.350403890 I0630 18:34:37.387134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:37.387196 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-30 18:34:37.387190104 +0000 UTC m=+2383.370341462 I0630 18:34:37.403239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:37.403278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:37.403466 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-30 18:34:37.403460335 +0000 UTC m=+2383.386611693 I0630 18:34:37.405849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-kmv6q" condition "Approved" to 2026-06-30 18:34:37.405840651 +0000 UTC m=+2383.388992009 I0630 18:34:37.421446 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-30 18:34:37.421414553 +0000 UTC m=+2383.404565951 I0630 18:34:37.549349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-kmv6q" condition "Ready" to 2026-06-30 18:34:37.549332609 +0000 UTC m=+2383.532483967 I0630 18:34:37.582700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:41.002562 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:41.002546928 +0000 UTC m=+2386.985698316 I0630 18:34:41.017858 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-kmv6q" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:41.017844552 +0000 UTC m=+2387.000995940 I0630 18:34:41.043435 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:41.043417931 +0000 UTC m=+2387.026569319 I0630 18:34:41.061196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:34:41.628780 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:34:41.628767446 +0000 UTC m=+2387.611918804 I0630 18:36:48.068403 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-30 18:36:48.068375942 +0000 UTC m=+2514.051527320 I0630 18:36:48.069000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:36:48.069027 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-30 18:36:48.069020389 +0000 UTC m=+2514.052171767 I0630 18:36:48.090000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:36:48.090128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:36:48.090171 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-30 18:36:48.090163986 +0000 UTC m=+2514.073315344 I0630 18:36:48.412512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:36:48.425142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-pkrfg" condition "Approved" to 2026-06-30 18:36:48.425133281 +0000 UTC m=+2514.408284629 I0630 18:36:48.448203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-pkrfg" condition "Ready" to 2026-06-30 18:36:48.4481925 +0000 UTC m=+2514.431343858 I0630 18:36:48.476001 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:36:48.475990861 +0000 UTC m=+2514.459142219 I0630 18:36:48.497491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:34.102674 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-30 18:37:34.102657644 +0000 UTC m=+2560.085809002 I0630 18:37:34.121555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:37:34.121581 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-30 18:37:34.121574638 +0000 UTC m=+2560.104725996 I0630 18:37:34.121666 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-30 18:37:34.121634449 +0000 UTC m=+2560.104785827 I0630 18:37:34.142678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:34.142784 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:37:34.142815 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-30 18:37:34.142805447 +0000 UTC m=+2560.125956835 E0630 18:37:34.156968 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0630 18:37:34.210959 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-30 18:37:34.210941185 +0000 UTC m=+2560.194092563 I0630 18:37:34.233617 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-30 18:37:34.233593003 +0000 UTC m=+2560.216744361 I0630 18:37:34.233897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:37:34.234079 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-30 18:37:34.234061646 +0000 UTC m=+2560.217213034 I0630 18:37:34.250396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:34.250502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:37:34.250530 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-30 18:37:34.250521732 +0000 UTC m=+2560.233673090 E0630 18:37:34.325373 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0630 18:37:34.398869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:34.412166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-qpfmn" condition "Approved" to 2026-06-30 18:37:34.412137362 +0000 UTC m=+2560.395288720 I0630 18:37:34.439752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-qpfmn" condition "Ready" to 2026-06-30 18:37:34.439731917 +0000 UTC m=+2560.422883275 I0630 18:37:34.472965 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:37:34.472952118 +0000 UTC m=+2560.456103476 I0630 18:37:34.502446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:34.502816 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:37:34.502809016 +0000 UTC m=+2560.485960374 I0630 18:37:34.529022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:35.031967 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-30 18:37:35.031954763 +0000 UTC m=+2561.015106121 I0630 18:37:35.058587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:37:35.058581 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-30 18:37:35.058567051 +0000 UTC m=+2561.041718419 I0630 18:37:35.058622 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-30 18:37:35.058618932 +0000 UTC m=+2561.041770280 I0630 18:37:35.078279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:35.078362 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-30 18:37:35.078352279 +0000 UTC m=+2561.061503627 I0630 18:37:35.306751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:35.359432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-vbdmd" condition "Approved" to 2026-06-30 18:37:35.35942008 +0000 UTC m=+2561.342571418 I0630 18:37:35.379227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-vbdmd" condition "Ready" to 2026-06-30 18:37:35.379214409 +0000 UTC m=+2561.362365757 I0630 18:37:35.428645 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:37:35.428635128 +0000 UTC m=+2561.411786477 I0630 18:37:35.454163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:35.547516 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-30 18:37:35.547498763 +0000 UTC m=+2561.530650111 I0630 18:37:35.567778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:37:35.567796 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-30 18:37:35.567749065 +0000 UTC m=+2561.550900443 I0630 18:37:35.567833 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-30 18:37:35.567824957 +0000 UTC m=+2561.550976345 I0630 18:37:35.586237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:35.586314 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-30 18:37:35.586306789 +0000 UTC m=+2561.569458137 I0630 18:37:35.675462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:35.707668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-gnvtt" condition "Approved" to 2026-06-30 18:37:35.707652603 +0000 UTC m=+2561.690803951 I0630 18:37:35.726115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-gnvtt" condition "Ready" to 2026-06-30 18:37:35.726103684 +0000 UTC m=+2561.709255052 I0630 18:37:35.768426 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:37:35.768412047 +0000 UTC m=+2561.751563405 I0630 18:37:35.870130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:35.870397 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:37:35.870390764 +0000 UTC m=+2561.853542102 I0630 18:37:36.075064 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-30 18:37:36.075047927 +0000 UTC m=+2562.058199295 I0630 18:37:36.094807 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:37:36.094841 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-30 18:37:36.094834185 +0000 UTC m=+2562.077985533 I0630 18:37:36.094875 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-30 18:37:36.094858166 +0000 UTC m=+2562.078009514 I0630 18:37:36.112093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:36.160388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:36.310277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:36.310347 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-30 18:37:36.310341419 +0000 UTC m=+2562.293492767 I0630 18:37:36.568066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:36.716109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rjklp" condition "Approved" to 2026-06-30 18:37:36.716098986 +0000 UTC m=+2562.699250344 I0630 18:37:36.824807 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rjklp" condition "Ready" to 2026-06-30 18:37:36.824795819 +0000 UTC m=+2562.807947177 I0630 18:37:37.264680 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:37:37.264659861 +0000 UTC m=+2563.247811249 I0630 18:37:37.411439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:37:37.411772 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:37:37.411762619 +0000 UTC m=+2563.394913977 I0630 18:37:37.615188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:40:41.313063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:40:41.313148 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-30 18:40:41.313134238 +0000 UTC m=+2747.296285616 I0630 18:40:41.313355 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-30 18:40:41.313332984 +0000 UTC m=+2747.296484372 I0630 18:40:41.332743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:40:41.333001 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-30 18:40:41.332995719 +0000 UTC m=+2747.316147067 I0630 18:40:41.488426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:40:41.519895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-blh6h" condition "Approved" to 2026-06-30 18:40:41.519877132 +0000 UTC m=+2747.503028510 I0630 18:40:41.540301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-blh6h" condition "Ready" to 2026-06-30 18:40:41.540289088 +0000 UTC m=+2747.523440456 I0630 18:40:41.570058 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:40:41.570045973 +0000 UTC m=+2747.553197331 I0630 18:40:41.596726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:40:41.656251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:40:43.599010 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-30 18:40:43.598998273 +0000 UTC m=+2749.582149621 I0630 18:40:43.599326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:40:43.599355 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-06-30 18:40:43.599349122 +0000 UTC m=+2749.582500470 I0630 18:40:43.618136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:40:43.618207 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-30 18:40:43.618200895 +0000 UTC m=+2749.601352233 I0630 18:40:43.965336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:40:44.010302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-56584" condition "Approved" to 2026-06-30 18:40:44.010290588 +0000 UTC m=+2749.993441956 I0630 18:40:44.028181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-56584" condition "Ready" to 2026-06-30 18:40:44.028170744 +0000 UTC m=+2750.011322102 I0630 18:40:44.052853 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:40:44.052840928 +0000 UTC m=+2750.035992286 I0630 18:40:44.070430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:44:51.729905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:44:51.729949 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-30 18:44:51.729943124 +0000 UTC m=+2997.713094472 I0630 18:44:51.730023 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-06-30 18:44:51.729961994 +0000 UTC m=+2997.713113342 I0630 18:44:51.749442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:44:51.749557 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-06-30 18:44:51.749549148 +0000 UTC m=+2997.732700506 I0630 18:44:52.093765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:44:52.136104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-cx8bv" condition "Approved" to 2026-06-30 18:44:52.136091338 +0000 UTC m=+2998.119242706 I0630 18:44:52.156735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-cx8bv" condition "Ready" to 2026-06-30 18:44:52.15672218 +0000 UTC m=+2998.139873528 I0630 18:44:52.184885 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:44:52.18486928 +0000 UTC m=+2998.168020638 I0630 18:44:52.210250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:44:52.210845 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:44:52.210832321 +0000 UTC m=+2998.193983689 I0630 18:44:52.229014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:44:52.229521 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:44:52.229510018 +0000 UTC m=+2998.212661376 I0630 18:44:52.231164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:45:25.386419 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-30 18:45:25.386403907 +0000 UTC m=+3031.369555275 I0630 18:45:25.386601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:45:25.386623 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 18:45:25.386617893 +0000 UTC m=+3031.369769251 I0630 18:45:25.405398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:45:25.405544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0630 18:45:25.405594 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-30 18:45:25.405565229 +0000 UTC m=+3031.388716597 I0630 18:45:25.555714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gxssr" condition "Approved" to 2026-06-30 18:45:25.555698142 +0000 UTC m=+3031.538849500 I0630 18:45:25.574009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gxssr" condition "Ready" to 2026-06-30 18:45:25.57399945 +0000 UTC m=+3031.557150808 I0630 18:45:25.604562 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:45:25.604548607 +0000 UTC m=+3031.587699965 I0630 18:45:25.628535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:45:25.629185 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-30 18:45:25.62917325 +0000 UTC m=+3031.612324638 I0630 18:45:25.645001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0630 18:45:25.658654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"