I0708 09:08:26.390468 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0708 09:08:26.390752 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0708 09:08:26.390875 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0708 09:08:26.395946 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0708 09:08:26.396434 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0708 09:08:26.396571 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0708 09:08:26.396575 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0708 09:08:26.399062 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0708 09:08:26.423909 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0708 09:08:26.424200 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0708 09:08:26.424245 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0708 09:08:26.424305 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0708 09:08:26.424315 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0708 09:08:26.429655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0708 09:08:26.436059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0708 09:08:26.439743 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0708 09:08:26.442372 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0708 09:08:26.445319 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0708 09:08:26.448848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0708 09:08:26.450749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0708 09:08:26.454182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0708 09:08:26.458204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0708 09:08:26.460014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0708 09:08:26.462036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0708 09:08:26.463820 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0708 09:08:26.466209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0708 09:08:26.468781 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0708 09:08:26.468836 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0708 09:08:26.471516 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0708 09:08:26.473392 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0708 09:08:26.473484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0708 09:08:26.477470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0708 09:08:26.483752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0708 09:08:26.494848 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.495277 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.495865 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.498021 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.510313 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.536317 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.556023 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.569951 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.585627 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:26.601170 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0708 09:08:41.265170 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-08 09:08:41.265126224 +0000 UTC m=+14.915381463 I0708 09:08:42.036175 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 09:08:42.036153764 +0000 UTC m=+15.686408993 I0708 09:08:42.036351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:08:42.036448 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-08 09:08:42.0364367 +0000 UTC m=+15.686691919 E0708 09:08:42.054958 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 09:08:42.055021 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-08 09:08:42.055010316 +0000 UTC m=+15.705265535 E0708 09:08:42.055054 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 09:08:42.058331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:08:42.058447 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-08 09:08:42.058440046 +0000 UTC m=+15.708695265 E0708 09:08:42.069342 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0708 09:08:42.069437 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 09:08:42.069471 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 09:08:42.069513 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0708 09:08:42.084680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:08:42.112411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s8kt6" condition "Approved" to 2026-07-08 09:08:42.112387597 +0000 UTC m=+15.762642826 I0708 09:08:42.131911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s8kt6" condition "Ready" to 2026-07-08 09:08:42.131883893 +0000 UTC m=+15.782139112 I0708 09:08:42.162723 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:08:42.162704674 +0000 UTC m=+15.812959913 I0708 09:08:42.183594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:08:42.184106 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:08:42.184095925 +0000 UTC m=+15.834351174 I0708 09:08:42.206632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:08:47.071372 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:08:47.071349995 +0000 UTC m=+20.721605214 I0708 09:09:17.717495 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-08 09:09:17.717470256 +0000 UTC m=+51.367725475 I0708 09:09:17.717739 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:09:17.717823 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 09:09:17.717813044 +0000 UTC m=+51.368068263 I0708 09:09:17.729840 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-08 09:09:17.729821067 +0000 UTC m=+51.380076286 I0708 09:09:17.737308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:09:17.737421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:09:17.737447 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-08 09:09:17.73744053 +0000 UTC m=+51.387695749 I0708 09:09:18.074185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:09:18.091428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wdztq" condition "Approved" to 2026-07-08 09:09:18.09141531 +0000 UTC m=+51.741670539 I0708 09:09:18.122715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wdztq" condition "Ready" to 2026-07-08 09:09:18.122704621 +0000 UTC m=+51.772959830 I0708 09:09:18.158847 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:09:18.158833773 +0000 UTC m=+51.809089012 I0708 09:09:18.188199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:09:18.188420 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:09:18.188414275 +0000 UTC m=+51.838669484 I0708 09:09:18.210738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:09:18.212335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:09:18.212807 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:09:18.212795619 +0000 UTC m=+51.863050828 I0708 09:14:54.405925 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-07-08 09:14:54.405880243 +0000 UTC m=+388.056135482 I0708 09:14:54.406064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:14:54.406458 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-07-08 09:14:54.406441496 +0000 UTC m=+388.056696735 I0708 09:14:54.439799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:14:54.439892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:14:54.439915 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-07-08 09:14:54.439906062 +0000 UTC m=+388.090161301 I0708 09:14:54.625176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-7bcjk" condition "Approved" to 2026-07-08 09:14:54.625161101 +0000 UTC m=+388.275416350 I0708 09:14:54.660511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-7bcjk" condition "Ready" to 2026-07-08 09:14:54.660488941 +0000 UTC m=+388.310744190 I0708 09:14:54.695723 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:14:54.695707328 +0000 UTC m=+388.345962567 I0708 09:14:54.728091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:14:54.795900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:04.717056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:16:04.717101 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 09:16:04.717090348 +0000 UTC m=+458.367345587 I0708 09:16:04.717411 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-08 09:16:04.717239342 +0000 UTC m=+458.367494591 E0708 09:16:04.732872 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 09:16:04.732925 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-08 09:16:04.732917013 +0000 UTC m=+458.383172232 E0708 09:16:04.732979 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0708 09:16:04.734683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:04.734838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:16:04.734884 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-08 09:16:04.734873238 +0000 UTC m=+458.385128487 E0708 09:16:04.744908 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0708 09:16:04.745039 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 09:16:04.745099 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0708 09:16:04.745137 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0708 09:16:04.779349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:04.779516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9gm7v" condition "Approved" to 2026-07-08 09:16:04.779490676 +0000 UTC m=+458.429745885 I0708 09:16:04.791716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9gm7v" condition "Ready" to 2026-07-08 09:16:04.791703648 +0000 UTC m=+458.441958867 I0708 09:16:04.814714 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:16:04.814698027 +0000 UTC m=+458.464953236 I0708 09:16:04.833979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:04.834437 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:16:04.834428352 +0000 UTC m=+458.484683551 I0708 09:16:04.847726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:04.853861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:09.745820 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:16:09.745801687 +0000 UTC m=+463.396056926 I0708 09:16:54.356354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:16:54.356406 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-08 09:16:54.356395694 +0000 UTC m=+508.006650913 I0708 09:16:54.356846 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 09:16:54.356840654 +0000 UTC m=+508.007095873 I0708 09:16:54.357179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:16:54.357202 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 09:16:54.357198512 +0000 UTC m=+508.007453731 I0708 09:16:54.357433 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-08 09:16:54.357428207 +0000 UTC m=+508.007683436 I0708 09:16:54.357978 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 09:16:54.35797302 +0000 UTC m=+508.008228239 I0708 09:16:54.358209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:16:54.358229 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-08 09:16:54.358224586 +0000 UTC m=+508.008479805 I0708 09:16:54.519539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:54.519626 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-08 09:16:54.519617772 +0000 UTC m=+508.169872991 I0708 09:16:54.549570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:54.549628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:16:54.549646 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-08 09:16:54.549640351 +0000 UTC m=+508.199895550 I0708 09:16:54.550832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:54.550881 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-08 09:16:54.550876889 +0000 UTC m=+508.201132098 I0708 09:16:54.702971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:55.052240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jfm2g" condition "Approved" to 2026-07-08 09:16:55.052214605 +0000 UTC m=+508.702469844 I0708 09:16:55.208244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:55.390800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jfm2g" condition "Ready" to 2026-07-08 09:16:55.390787164 +0000 UTC m=+509.041042383 I0708 09:16:55.391521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nfgc8" condition "Approved" to 2026-07-08 09:16:55.391510481 +0000 UTC m=+509.041765700 I0708 09:16:55.413229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x7xd8" condition "Approved" to 2026-07-08 09:16:55.413212066 +0000 UTC m=+509.063467285 I0708 09:16:55.444328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nfgc8" condition "Ready" to 2026-07-08 09:16:55.44431929 +0000 UTC m=+509.094574509 I0708 09:16:55.444969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x7xd8" condition "Ready" to 2026-07-08 09:16:55.444956874 +0000 UTC m=+509.095212103 I0708 09:16:55.814968 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:16:55.814949044 +0000 UTC m=+509.465204293 I0708 09:16:55.838080 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:16:55.838054331 +0000 UTC m=+509.488309570 I0708 09:16:55.842735 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:16:55.84272168 +0000 UTC m=+509.492976889 I0708 09:16:55.866881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:55.872830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:55.873128 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:16:55.873119358 +0000 UTC m=+509.523374587 I0708 09:16:55.882189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:55.882722 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:16:55.88270977 +0000 UTC m=+509.532965019 I0708 09:16:55.945703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:55.946047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:55.948720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:55.964902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:16:56.353166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:19.525332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:17:19.525385 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" condition "Issuing" to 2026-07-08 09:17:19.525373191 +0000 UTC m=+533.175628400 I0708 09:17:19.525669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" condition "Ready" to 2026-07-08 09:17:19.525647747 +0000 UTC m=+533.175902966 I0708 09:17:19.564321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jc48q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:19.564452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:17:19.564490 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" condition "Issuing" to 2026-07-08 09:17:19.564479291 +0000 UTC m=+533.214734540 I0708 09:17:19.846942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jc48q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:19.857402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jc48q-lnf74" condition "Approved" to 2026-07-08 09:17:19.857389797 +0000 UTC m=+533.507644996 I0708 09:17:19.900916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jc48q-lnf74" condition "Ready" to 2026-07-08 09:17:19.900906619 +0000 UTC m=+533.551161828 I0708 09:17:19.944820 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:17:19.944794641 +0000 UTC m=+533.595049860 I0708 09:17:19.980789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jc48q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:19.981388 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:17:19.981371662 +0000 UTC m=+533.631626921 I0708 09:17:20.001481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jc48q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:20.012970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jc48q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:20.013281 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jc48q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:17:20.013274234 +0000 UTC m=+533.663529443 I0708 09:17:59.214945 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:17:59.215002 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-08 09:17:59.214986714 +0000 UTC m=+572.865241963 I0708 09:17:59.215264 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 09:17:59.21523504 +0000 UTC m=+572.865490279 I0708 09:17:59.233998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:59.234110 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-08 09:17:59.234097931 +0000 UTC m=+572.884353180 I0708 09:17:59.469715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:59.509110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xt7n5" condition "Approved" to 2026-07-08 09:17:59.509091561 +0000 UTC m=+573.159346770 I0708 09:17:59.528694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xt7n5" condition "Ready" to 2026-07-08 09:17:59.528677939 +0000 UTC m=+573.178933158 I0708 09:17:59.561797 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:17:59.561733523 +0000 UTC m=+573.211988762 I0708 09:17:59.582016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:17:59.582658 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:17:59.582647221 +0000 UTC m=+573.232902440 I0708 09:17:59.605520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:21:14.399185 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-08 09:21:14.399167036 +0000 UTC m=+768.049422265 I0708 09:21:14.399236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:21:14.399291 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 09:21:14.399284178 +0000 UTC m=+768.049539397 I0708 09:21:14.419277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:21:14.419357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:21:14.419380 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-08 09:21:14.4193731 +0000 UTC m=+768.069628319 I0708 09:21:14.609064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r6hvm" condition "Approved" to 2026-07-08 09:21:14.609041657 +0000 UTC m=+768.259296876 I0708 09:21:14.630358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r6hvm" condition "Ready" to 2026-07-08 09:21:14.630341136 +0000 UTC m=+768.280596385 I0708 09:21:14.661976 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:21:14.661950401 +0000 UTC m=+768.312205640 I0708 09:21:14.691563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:21:14.691940 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:21:14.691932748 +0000 UTC m=+768.342187967 I0708 09:21:14.697257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:21:14.710436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:21:14.712426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:21:14.712862 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:21:14.712849238 +0000 UTC m=+768.363104457 I0708 09:23:41.837685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:23:41.837743 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-08 09:23:41.837736268 +0000 UTC m=+915.487991487 I0708 09:23:41.838000 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-08 09:23:41.837984234 +0000 UTC m=+915.488239453 I0708 09:23:41.949982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:23:41.950078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:23:41.950104 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-08 09:23:41.950093352 +0000 UTC m=+915.600348591 I0708 09:23:42.240514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-t256t" condition "Approved" to 2026-07-08 09:23:42.240499536 +0000 UTC m=+915.890754755 I0708 09:23:42.363011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-t256t" condition "Ready" to 2026-07-08 09:23:42.363000405 +0000 UTC m=+916.013255604 I0708 09:23:42.448475 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:23:42.448459027 +0000 UTC m=+916.098714246 I0708 09:23:42.514061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:23:42.514453 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:23:42.514444361 +0000 UTC m=+916.164699570 I0708 09:23:42.703895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:23:42.704439 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:23:42.704426717 +0000 UTC m=+916.354681956 I0708 09:23:42.833064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:24:52.008436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:24:52.008475 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-08 09:24:52.008465821 +0000 UTC m=+985.658721040 I0708 09:24:52.009895 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-08 09:24:52.009889364 +0000 UTC m=+985.660144583 I0708 09:24:52.085085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:24:52.085186 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-08 09:24:52.085175662 +0000 UTC m=+985.735430871 I0708 09:24:52.526512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:24:52.587530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-w5wd7" condition "Approved" to 2026-07-08 09:24:52.587518939 +0000 UTC m=+986.237774148 I0708 09:24:52.632027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-w5wd7" condition "Ready" to 2026-07-08 09:24:52.632009446 +0000 UTC m=+986.282264655 I0708 09:24:52.680467 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:24:52.680442014 +0000 UTC m=+986.330697263 I0708 09:24:52.752766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:24:52.902384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:28:12.835212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:28:12.835279 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-08 09:28:12.83527094 +0000 UTC m=+1186.485526169 I0708 09:28:12.835685 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-08 09:28:12.835657368 +0000 UTC m=+1186.485912668 I0708 09:28:12.889906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:28:12.890140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:28:12.890193 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-08 09:28:12.890184076 +0000 UTC m=+1186.540439295 I0708 09:28:13.380463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-m5b67" condition "Approved" to 2026-07-08 09:28:13.380447385 +0000 UTC m=+1187.030702594 I0708 09:28:13.453811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-m5b67" condition "Ready" to 2026-07-08 09:28:13.453797357 +0000 UTC m=+1187.104052576 I0708 09:28:13.589644 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:28:13.589627551 +0000 UTC m=+1187.239882760 I0708 09:28:13.706355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:28:13.806972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:36:08.136562 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-08 09:36:08.136543945 +0000 UTC m=+1661.786799174 I0708 09:36:08.136746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:36:08.136855 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-08 09:36:08.136843252 +0000 UTC m=+1661.787098501 I0708 09:36:08.156553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:36:08.156637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:36:08.156658 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-08 09:36:08.156651609 +0000 UTC m=+1661.806906828 I0708 09:36:08.768127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:36:09.186180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-wt7wp" condition "Approved" to 2026-07-08 09:36:09.186158051 +0000 UTC m=+1662.836413300 I0708 09:36:09.470345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-wt7wp" condition "Ready" to 2026-07-08 09:36:09.470329802 +0000 UTC m=+1663.120585031 I0708 09:36:12.495376 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:36:12.49535947 +0000 UTC m=+1666.145614709 I0708 09:36:12.718873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:36:12.719379 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:36:12.719369852 +0000 UTC m=+1666.369625101 I0708 09:36:12.948136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:39:24.764918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:39:24.764916 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-08 09:39:24.764873102 +0000 UTC m=+1858.415128331 I0708 09:39:24.764984 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-08 09:39:24.764966914 +0000 UTC m=+1858.415222223 I0708 09:39:24.786324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:39:24.786420 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-08 09:39:24.786411879 +0000 UTC m=+1858.436667088 I0708 09:39:25.246025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:39:26.588920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-9dwl2" condition "Approved" to 2026-07-08 09:39:26.588903149 +0000 UTC m=+1860.239158368 I0708 09:39:27.078988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-9dwl2" condition "Ready" to 2026-07-08 09:39:27.078973264 +0000 UTC m=+1860.729228513 I0708 09:39:27.240852 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:39:27.240839242 +0000 UTC m=+1860.891094441 I0708 09:39:27.523722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:39:27.524150 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:39:27.524142953 +0000 UTC m=+1861.174398172 I0708 09:39:27.551054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:39:27.551399 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:39:27.551390942 +0000 UTC m=+1861.201646161 I0708 09:42:27.145894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:42:27.145926 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-08 09:42:27.145917432 +0000 UTC m=+2040.796172651 I0708 09:42:27.145958 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-08 09:42:27.145947683 +0000 UTC m=+2040.796202922 I0708 09:42:27.229478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:27.229803 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-08 09:42:27.229580124 +0000 UTC m=+2040.879835343 I0708 09:42:27.369565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:27.525590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-jdvqz" condition "Approved" to 2026-07-08 09:42:27.525570288 +0000 UTC m=+2041.175825527 I0708 09:42:27.633533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-jdvqz" condition "Ready" to 2026-07-08 09:42:27.633522211 +0000 UTC m=+2041.283777430 I0708 09:42:27.863475 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:42:27.86344328 +0000 UTC m=+2041.513698529 I0708 09:42:27.923772 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-08 09:42:27.923755213 +0000 UTC m=+2041.574010432 I0708 09:42:27.923824 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:42:27.923866 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-08 09:42:27.923857475 +0000 UTC m=+2041.574112684 I0708 09:42:27.957695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:27.958178 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:42:27.958170627 +0000 UTC m=+2041.608425846 I0708 09:42:27.965504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:27.965806 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-08 09:42:27.965731352 +0000 UTC m=+2041.615986571 I0708 09:42:28.046768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:28.078573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:28.084241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:28.232411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-mh6pv" condition "Approved" to 2026-07-08 09:42:28.232399899 +0000 UTC m=+2041.882655108 I0708 09:42:28.377738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-mh6pv" condition "Ready" to 2026-07-08 09:42:28.377725195 +0000 UTC m=+2042.027980424 I0708 09:42:28.553585 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:42:28.553569544 +0000 UTC m=+2042.203824753 I0708 09:42:28.645108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:28.646054 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:42:28.646018729 +0000 UTC m=+2042.296273958 I0708 09:42:28.701596 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-08 09:42:28.701578092 +0000 UTC m=+2042.351833301 I0708 09:42:28.709544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:42:28.710244 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:42:28.710231042 +0000 UTC m=+2042.360486281 I0708 09:42:29.371754 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-08 09:42:29.371739396 +0000 UTC m=+2043.021994645 I0708 09:44:37.172820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:44:37.172866 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-08 09:44:37.172856922 +0000 UTC m=+2170.823112141 I0708 09:44:37.174235 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-08 09:44:37.174211214 +0000 UTC m=+2170.824466443 I0708 09:44:37.757610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:44:37.757757 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-08 09:44:37.757746686 +0000 UTC m=+2171.408001905 I0708 09:44:42.710230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:44:45.290035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5knf4" condition "Approved" to 2026-07-08 09:44:45.290012923 +0000 UTC m=+2178.940268142 I0708 09:44:46.267633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5knf4" condition "Ready" to 2026-07-08 09:44:46.267609265 +0000 UTC m=+2179.917864514 I0708 09:44:48.254754 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:44:48.254736737 +0000 UTC m=+2181.904991956 I0708 09:44:48.792188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:44:48.792916 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:44:48.792909363 +0000 UTC m=+2182.443164582 I0708 09:44:51.398144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:38.479686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:50:38.479762 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-08 09:50:38.479753674 +0000 UTC m=+2532.130008923 I0708 09:50:38.480303 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-08 09:50:38.480294946 +0000 UTC m=+2532.130550185 I0708 09:50:38.514356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:38.514487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:50:38.514522 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-08 09:50:38.514513667 +0000 UTC m=+2532.164768886 I0708 09:50:38.743757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:38.753924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-67j2s" condition "Approved" to 2026-07-08 09:50:38.753903144 +0000 UTC m=+2532.404158393 I0708 09:50:38.776849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-67j2s" condition "Ready" to 2026-07-08 09:50:38.776825643 +0000 UTC m=+2532.427080892 I0708 09:50:38.807962 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:50:38.807946041 +0000 UTC m=+2532.458201260 I0708 09:50:38.835515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:38.835949 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:50:38.835940838 +0000 UTC m=+2532.486196067 I0708 09:50:38.854804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:38.857006 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:50:38.856995294 +0000 UTC m=+2532.507250513 I0708 09:50:40.006466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:50:40.006518 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-08 09:50:40.006507325 +0000 UTC m=+2533.656762574 I0708 09:50:40.007144 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-08 09:50:40.00713511 +0000 UTC m=+2533.657390359 I0708 09:50:40.028845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:40.028936 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-08 09:50:40.028927463 +0000 UTC m=+2533.679182682 I0708 09:50:40.189911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:40.258291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-k29bn" condition "Approved" to 2026-07-08 09:50:40.258276899 +0000 UTC m=+2533.908532118 I0708 09:50:40.284964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-k29bn" condition "Ready" to 2026-07-08 09:50:40.284950125 +0000 UTC m=+2533.935205374 I0708 09:50:40.313630 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:50:40.313620317 +0000 UTC m=+2533.963875516 I0708 09:50:40.342275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:40.342543 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:50:40.342535324 +0000 UTC m=+2533.992790543 I0708 09:50:40.376942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:50:40.377177 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:50:40.377170954 +0000 UTC m=+2534.027426163 I0708 09:53:49.706685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:53:49.706767 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-08 09:53:49.70676279 +0000 UTC m=+2723.357018019 I0708 09:53:49.706696 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-08 09:53:49.706682829 +0000 UTC m=+2723.356938058 I0708 09:53:49.726939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:49.727033 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-08 09:53:49.727025798 +0000 UTC m=+2723.377281027 I0708 09:53:49.872752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:49.914763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-zcpwr" condition "Approved" to 2026-07-08 09:53:49.914752313 +0000 UTC m=+2723.565007522 I0708 09:53:49.994060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-zcpwr" condition "Ready" to 2026-07-08 09:53:49.994050046 +0000 UTC m=+2723.644305265 I0708 09:53:50.032101 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:50.032090873 +0000 UTC m=+2723.682346082 I0708 09:53:50.065449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:50.065842 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:53:50.065836453 +0000 UTC m=+2723.716091662 I0708 09:53:50.088309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:53:50.138149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:56.256324 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-d67sm-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:54:56.256361 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-d67sm-api" condition "Issuing" to 2026-07-08 09:54:56.256351782 +0000 UTC m=+2789.906607001 I0708 09:54:56.256880 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-d67sm-api" condition "Ready" to 2026-07-08 09:54:56.256875124 +0000 UTC m=+2789.907130343 I0708 09:54:56.267545 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-d67sm-vnc" condition "Ready" to 2026-07-08 09:54:56.26753018 +0000 UTC m=+2789.917785389 I0708 09:54:56.267941 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-d67sm-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:54:56.267966 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-d67sm-vnc" condition "Issuing" to 2026-07-08 09:54:56.26796144 +0000 UTC m=+2789.918216649 I0708 09:54:56.289878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-d67sm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-d67sm-api\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:56.289939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-d67sm-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:54:56.289954 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-d67sm-api" condition "Issuing" to 2026-07-08 09:54:56.289948938 +0000 UTC m=+2789.940204147 I0708 09:54:56.291347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-d67sm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-d67sm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:56.291399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-d67sm-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:54:56.291417 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-d67sm-vnc" condition "Issuing" to 2026-07-08 09:54:56.291413962 +0000 UTC m=+2789.941669171 I0708 09:54:56.576124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-d67sm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-d67sm-api\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:56.583575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-d67sm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-d67sm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:56.588908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-d67sm-api-b6x5c" condition "Approved" to 2026-07-08 09:54:56.588898192 +0000 UTC m=+2790.239153401 I0708 09:54:56.610901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-d67sm-vnc-mjc6x" condition "Approved" to 2026-07-08 09:54:56.61088767 +0000 UTC m=+2790.261142879 I0708 09:54:56.646644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-d67sm-api-b6x5c" condition "Ready" to 2026-07-08 09:54:56.646630565 +0000 UTC m=+2790.296885794 I0708 09:54:56.660229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-d67sm-vnc-mjc6x" condition "Ready" to 2026-07-08 09:54:56.660218369 +0000 UTC m=+2790.310473578 I0708 09:54:56.693049 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-d67sm-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:54:56.693031507 +0000 UTC m=+2790.343286736 I0708 09:54:56.708851 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-d67sm-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:54:56.708838022 +0000 UTC m=+2790.359093241 I0708 09:54:56.820556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-d67sm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-d67sm-api\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:56.824938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-d67sm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-d67sm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:56.826641 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-d67sm-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:54:56.826622192 +0000 UTC m=+2790.476877421 I0708 09:54:56.901370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-d67sm-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-d67sm-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:54:57.026541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-d67sm-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-d67sm-api\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:57:55.625368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 09:57:55.625435 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-07-08 09:57:55.625428843 +0000 UTC m=+2969.275684062 I0708 09:57:55.625951 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-07-08 09:57:55.625945954 +0000 UTC m=+2969.276201173 I0708 09:57:55.649518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:57:55.649600 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-07-08 09:57:55.649594098 +0000 UTC m=+2969.299849317 I0708 09:57:55.845299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:57:55.886675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-z7qxb" condition "Approved" to 2026-07-08 09:57:55.886657114 +0000 UTC m=+2969.536912343 I0708 09:57:55.910314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-z7qxb" condition "Ready" to 2026-07-08 09:57:55.910301398 +0000 UTC m=+2969.560556617 I0708 09:57:55.949469 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:57:55.949455791 +0000 UTC m=+2969.599711000 I0708 09:57:56.000998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:57:56.001753 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:57:56.001721939 +0000 UTC m=+2969.651977178 I0708 09:57:56.021282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:57:56.041966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 09:57:56.042303 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 09:57:56.042295964 +0000 UTC m=+2969.692551173 I0708 10:01:55.455418 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-08 10:01:55.455377277 +0000 UTC m=+3209.105632486 I0708 10:01:55.455510 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:01:55.455646 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-08 10:01:55.455626743 +0000 UTC m=+3209.105881982 I0708 10:01:55.474438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:01:55.474519 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-08 10:01:55.474510738 +0000 UTC m=+3209.124765957 I0708 10:01:55.679027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:01:55.709738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-pjdr7" condition "Approved" to 2026-07-08 10:01:55.70972561 +0000 UTC m=+3209.359980829 I0708 10:01:55.735689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-pjdr7" condition "Ready" to 2026-07-08 10:01:55.735676478 +0000 UTC m=+3209.385931707 I0708 10:01:55.768355 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:01:55.76834226 +0000 UTC m=+3209.418597479 I0708 10:01:55.791036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:01:55.791413 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:01:55.791406443 +0000 UTC m=+3209.441661662 I0708 10:01:55.816918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:01:57.058302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:01:57.058364 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-08 10:01:57.058341315 +0000 UTC m=+3210.708596534 I0708 10:01:57.058596 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-08 10:01:57.05858734 +0000 UTC m=+3210.708842559 I0708 10:01:57.079321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:01:57.079508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:01:57.079543 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-08 10:01:57.079531063 +0000 UTC m=+3210.729786282 I0708 10:01:57.324242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-lxdvr" condition "Approved" to 2026-07-08 10:01:57.324226014 +0000 UTC m=+3210.974481223 I0708 10:01:57.348175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-lxdvr" condition "Ready" to 2026-07-08 10:01:57.348162775 +0000 UTC m=+3210.998417994 I0708 10:01:57.383542 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:01:57.38352491 +0000 UTC m=+3211.033780129 I0708 10:01:57.410570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:01:57.410928 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:01:57.410919662 +0000 UTC m=+3211.061174881 I0708 10:01:57.436441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:12.574445 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:05:12.574483 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-08 10:05:12.57447535 +0000 UTC m=+3406.224730579 I0708 10:05:12.574887 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-08 10:05:12.574880629 +0000 UTC m=+3406.225135858 E0708 10:05:12.589408 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 10:05:12.589463 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-08 10:05:12.589456854 +0000 UTC m=+3406.239712063 I0708 10:05:12.589482 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 10:05:12.597436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:12.597513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:05:12.597537 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-08 10:05:12.597532671 +0000 UTC m=+3406.247787890 E0708 10:05:12.599538 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0708 10:05:12.599679 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 10:05:12.599744 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0708 10:05:12.599804 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0708 10:05:12.649577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-h4n4p" condition "Approved" to 2026-07-08 10:05:12.649565801 +0000 UTC m=+3406.299821030 I0708 10:05:12.673130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-h4n4p" condition "Ready" to 2026-07-08 10:05:12.673119493 +0000 UTC m=+3406.323374712 I0708 10:05:12.712416 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:12.712405489 +0000 UTC m=+3406.362660698 I0708 10:05:12.743601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:12.744113 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:12.744104229 +0000 UTC m=+3406.394359448 I0708 10:05:12.747999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:12.763278 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:12.763752 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:12.763742791 +0000 UTC m=+3406.413998010 I0708 10:05:13.354794 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-08 10:05:13.354779375 +0000 UTC m=+3407.005034584 I0708 10:05:13.354952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:05:13.354991 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-08 10:05:13.354983189 +0000 UTC m=+3407.005238408 E0708 10:05:13.369937 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 10:05:13.369997 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-08 10:05:13.369987526 +0000 UTC m=+3407.020242755 I0708 10:05:13.370056 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 10:05:13.370502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:13.370586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:05:13.370608 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-08 10:05:13.37060303 +0000 UTC m=+3407.020858259 E0708 10:05:13.388115 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0708 10:05:13.388522 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0708 10:05:13.388642 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0708 10:05:13.388761 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0708 10:05:13.426215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:13.431080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-g7hsk" condition "Approved" to 2026-07-08 10:05:13.431063754 +0000 UTC m=+3407.081318973 I0708 10:05:13.460542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-g7hsk" condition "Ready" to 2026-07-08 10:05:13.460529113 +0000 UTC m=+3407.110784332 I0708 10:05:13.490751 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:13.490736439 +0000 UTC m=+3407.140991658 I0708 10:05:13.514039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:13.514449 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:13.514440535 +0000 UTC m=+3407.164695754 I0708 10:05:13.544236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:14.186522 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-08 10:05:14.186507336 +0000 UTC m=+3407.836762565 I0708 10:05:14.186545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:05:14.186587 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-08 10:05:14.186578668 +0000 UTC m=+3407.836833897 I0708 10:05:14.208764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:14.208919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:05:14.209004 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-08 10:05:14.208994284 +0000 UTC m=+3407.859249533 I0708 10:05:14.266045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-bt2d9" condition "Approved" to 2026-07-08 10:05:14.26602558 +0000 UTC m=+3407.916280829 I0708 10:05:14.286507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-bt2d9" condition "Ready" to 2026-07-08 10:05:14.286488321 +0000 UTC m=+3407.936743570 I0708 10:05:17.600428 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:17.600410986 +0000 UTC m=+3411.250666225 I0708 10:05:17.613684 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-bt2d9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:17.613667821 +0000 UTC m=+3411.263923050 I0708 10:05:17.638242 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:17.638229357 +0000 UTC m=+3411.288484576 I0708 10:05:17.661069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:17.712413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:05:18.389548 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:05:18.389536655 +0000 UTC m=+3412.039791874 I0708 10:08:30.410069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:08:30.410110 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-08 10:08:30.410105329 +0000 UTC m=+3604.060360538 I0708 10:08:30.411062 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-08 10:08:30.41105709 +0000 UTC m=+3604.061312319 I0708 10:08:30.439447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:08:30.439804 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-08 10:08:30.439797712 +0000 UTC m=+3604.090052951 I0708 10:08:30.597336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:08:30.632941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2djsq" condition "Approved" to 2026-07-08 10:08:30.632921094 +0000 UTC m=+3604.283176343 I0708 10:08:30.654359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2djsq" condition "Ready" to 2026-07-08 10:08:30.654346978 +0000 UTC m=+3604.304602197 I0708 10:08:30.686329 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:08:30.686306444 +0000 UTC m=+3604.336561673 I0708 10:08:30.713986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:08:30.768233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:32.557929 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-08 10:09:32.544544611 +0000 UTC m=+3666.194799830 I0708 10:09:32.656363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:09:32.656413 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-08 10:09:32.656402066 +0000 UTC m=+3666.306657325 I0708 10:09:32.657216 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-08 10:09:32.657208365 +0000 UTC m=+3666.307463584 I0708 10:09:32.794034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:32.794105 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-08 10:09:32.794095806 +0000 UTC m=+3666.444351035 E0708 10:09:32.805591 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" E0708 10:09:33.007168 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" E0708 10:09:33.137178 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0708 10:09:33.462133 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-08 10:09:33.462113906 +0000 UTC m=+3667.112369155 I0708 10:09:33.531729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:09:33.531816 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-08 10:09:33.531807203 +0000 UTC m=+3667.182062412 I0708 10:09:33.532159 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-08 10:09:33.532154331 +0000 UTC m=+3667.182409540 I0708 10:09:34.200662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:34.200750 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:09:34.200771 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-08 10:09:34.200765057 +0000 UTC m=+3667.851020266 I0708 10:09:35.902574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-65gnd" condition "Approved" to 2026-07-08 10:09:35.902546894 +0000 UTC m=+3669.552802143 I0708 10:09:35.988857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-65gnd" condition "Ready" to 2026-07-08 10:09:35.988841179 +0000 UTC m=+3669.639096388 I0708 10:09:36.218221 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:09:36.218201747 +0000 UTC m=+3669.868456956 I0708 10:09:36.370175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:40.404177 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-08 10:09:40.404141399 +0000 UTC m=+3674.054396648 I0708 10:09:42.288474 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-08 10:09:42.288419931 +0000 UTC m=+3675.938675180 I0708 10:09:42.288571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:09:42.288635 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-08 10:09:42.288623106 +0000 UTC m=+3675.938878355 I0708 10:09:43.330045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:43.330135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:09:43.330169 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-08 10:09:43.330161096 +0000 UTC m=+3676.980416345 I0708 10:09:44.775489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-r5zld" condition "Approved" to 2026-07-08 10:09:44.775477467 +0000 UTC m=+3678.425732676 I0708 10:09:45.249237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-r5zld" condition "Ready" to 2026-07-08 10:09:45.249227824 +0000 UTC m=+3678.899483043 I0708 10:09:47.601084 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:09:47.60107317 +0000 UTC m=+3681.251328379 I0708 10:09:47.973569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:47.973999 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:09:47.973990744 +0000 UTC m=+3681.624245963 I0708 10:09:48.168356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:48.184140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:51.504337 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-08 10:09:51.50428224 +0000 UTC m=+3685.154537459 I0708 10:09:51.555839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:09:51.555880 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-08 10:09:51.55587183 +0000 UTC m=+3685.206127039 I0708 10:09:51.556161 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-08 10:09:51.556144977 +0000 UTC m=+3685.206400206 I0708 10:09:51.610954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:51.611057 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-08 10:09:51.611048939 +0000 UTC m=+3685.261304158 I0708 10:09:52.938618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:53.085970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ksktg" condition "Approved" to 2026-07-08 10:09:53.085957679 +0000 UTC m=+3686.736212898 I0708 10:09:53.139269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ksktg" condition "Ready" to 2026-07-08 10:09:53.139253582 +0000 UTC m=+3686.789508781 I0708 10:09:53.233037 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:09:53.233023641 +0000 UTC m=+3686.883278870 I0708 10:09:53.292585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:53.292980 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:09:53.292972117 +0000 UTC m=+3686.943227326 I0708 10:09:53.364510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:53.654488 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-08 10:09:53.65446729 +0000 UTC m=+3687.304722529 I0708 10:09:53.876666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:09:53.876761 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-08 10:09:53.876740064 +0000 UTC m=+3687.526995303 I0708 10:09:53.876745 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-08 10:09:53.876734404 +0000 UTC m=+3687.526989623 I0708 10:09:54.270075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:54.270278 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-08 10:09:54.270270984 +0000 UTC m=+3687.920526193 I0708 10:09:56.124090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:56.328912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-w4qf9" condition "Approved" to 2026-07-08 10:09:56.328889919 +0000 UTC m=+3689.979145168 I0708 10:09:56.452694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-w4qf9" condition "Ready" to 2026-07-08 10:09:56.452683888 +0000 UTC m=+3690.102939107 I0708 10:09:56.744956 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:09:56.744936195 +0000 UTC m=+3690.395191434 I0708 10:09:56.830052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:56.830312 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:09:56.830306987 +0000 UTC m=+3690.480562196 I0708 10:09:57.070099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:09:57.253437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:14:21.151367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:14:21.151458 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-08 10:14:21.151447005 +0000 UTC m=+3954.801702254 I0708 10:14:21.152170 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-08 10:14:21.152161652 +0000 UTC m=+3954.802416901 I0708 10:14:21.515330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:14:21.515479 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-08 10:14:21.515469687 +0000 UTC m=+3955.165724906 I0708 10:14:22.011302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:14:22.667280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-49rbz" condition "Approved" to 2026-07-08 10:14:22.667250232 +0000 UTC m=+3956.317505461 I0708 10:14:22.988384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-49rbz" condition "Ready" to 2026-07-08 10:14:22.988368922 +0000 UTC m=+3956.638624131 I0708 10:14:24.725414 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:14:24.725397831 +0000 UTC m=+3958.375653050 I0708 10:14:25.370717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:14:26.135602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0708 10:14:26.135645 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-08 10:14:26.135634887 +0000 UTC m=+3959.785890136 I0708 10:14:26.136075 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-08 10:14:26.136054537 +0000 UTC m=+3959.786309776 I0708 10:14:26.510660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:14:26.510831 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-08 10:14:26.510820097 +0000 UTC m=+3960.161075366 I0708 10:14:30.747190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:14:31.596389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:14:31.655372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-xcp54" condition "Approved" to 2026-07-08 10:14:31.655357285 +0000 UTC m=+3965.305612524 E0708 10:14:38.662387 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{magnum-registry-certs-xcp54.18c048f57df8201d openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:magnum-registry-certs-xcp54,UID:0f1364a3-2973-4787-a73a-03adc9f615d7,APIVersion:cert-manager.io/v1,ResourceVersion:29337,FieldPath:,},Reason:WaitingForApproval,Message:Not signing CertificateRequest until it is Approved,Source:EventSource{Component:cert-manager-certificaterequests-issuer-selfsigned,Host:,},FirstTimestamp:2026-07-08 10:14:31.656316957 +0000 UTC m=+3965.306572196,LastTimestamp:2026-07-08 10:14:31.656316957 +0000 UTC m=+3965.306572196,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-selfsigned,ReportingInstance:,}" E0708 10:14:38.662515 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{magnum-registry-certs-xcp54.18c048f57de85215 openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:magnum-registry-certs-xcp54,UID:0f1364a3-2973-4787-a73a-03adc9f615d7,APIVersion:cert-manager.io/v1,ResourceVersion:29337,FieldPath:,},Reason:WaitingForApproval,Message:Not signing CertificateRequest until it is Approved,Source:EventSource{Component:cert-manager-certificaterequests-issuer-vault,Host:,},FirstTimestamp:2026-07-08 10:14:31.655281173 +0000 UTC m=+3965.305536412,LastTimestamp:2026-07-08 10:14:31.655281173 +0000 UTC m=+3965.305536412,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-vault,ReportingInstance:,}" E0708 10:14:38.662552 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{magnum-registry-certs.18c048f57e13be33 openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Certificate,Namespace:openstack,Name:magnum-registry-certs,UID:01ae63f6-8804-469a-bd95-b84d25bafaeb,APIVersion:cert-manager.io/v1,ResourceVersion:29334,FieldPath:,},Reason:Requested,Message:Created new CertificateRequest resource \"magnum-registry-certs-xcp54\",Source:EventSource{Component:cert-manager-certificates-request-manager,Host:,},FirstTimestamp:2026-07-08 10:14:31.658126899 +0000 UTC m=+3965.308382108,LastTimestamp:2026-07-08 10:14:31.658126899 +0000 UTC m=+3965.308382108,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificates-request-manager,ReportingInstance:,}" E0708 10:14:38.662766 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{magnum-registry-certs-xcp54.18c048f57df8d75c openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:magnum-registry-certs-xcp54,UID:0f1364a3-2973-4787-a73a-03adc9f615d7,APIVersion:cert-manager.io/v1,ResourceVersion:29337,FieldPath:,},Reason:WaitingForApproval,Message:Not signing CertificateRequest until it is Approved,Source:EventSource{Component:cert-manager-certificaterequests-issuer-venafi,Host:,},FirstTimestamp:2026-07-08 10:14:31.656363868 +0000 UTC m=+3965.306619117,LastTimestamp:2026-07-08 10:14:31.656363868 +0000 UTC m=+3965.306619117,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-venafi,ReportingInstance:,}" E0708 10:14:38.662846 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{magnum-registry-certs-xcp54.18c048f57df71b0d openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:magnum-registry-certs-xcp54,UID:0f1364a3-2973-4787-a73a-03adc9f615d7,APIVersion:cert-manager.io/v1,ResourceVersion:29337,FieldPath:,},Reason:WaitingForApproval,Message:Not signing CertificateRequest until it is Approved,Source:EventSource{Component:cert-manager-certificaterequests-issuer-ca,Host:,},FirstTimestamp:2026-07-08 10:14:31.656250125 +0000 UTC m=+3965.306505424,LastTimestamp:2026-07-08 10:14:31.656250125 +0000 UTC m=+3965.306505424,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-ca,ReportingInstance:,}" E0708 10:14:38.664173 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{magnum-registry-certs-xcp54.18c048f57df625c6 openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:magnum-registry-certs-xcp54,UID:0f1364a3-2973-4787-a73a-03adc9f615d7,APIVersion:cert-manager.io/v1,ResourceVersion:29337,FieldPath:,},Reason:WaitingForApproval,Message:Not signing CertificateRequest until it is Approved,Source:EventSource{Component:cert-manager-certificaterequests-issuer-acme,Host:,},FirstTimestamp:2026-07-08 10:14:31.656187334 +0000 UTC m=+3965.306442583,LastTimestamp:2026-07-08 10:14:31.656187334 +0000 UTC m=+3965.306442583,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-acme,ReportingInstance:,}" E0708 10:14:38.686455 1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificaterequests-approver" key="openstack/magnum-registry-certs-xcp54" I0708 10:14:43.687577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-xcp54" condition "Approved" to 2026-07-08 10:14:43.687557149 +0000 UTC m=+3977.337812388 I0708 10:14:45.689164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-xcp54" condition "Ready" to 2026-07-08 10:14:45.689152631 +0000 UTC m=+3979.339407840 E0708 10:14:50.701912 1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificaterequests-approver" key="openstack/magnum-registry-certs-xcp54" E0708 10:14:52.715914 1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificaterequests-issuer-ca" key="openstack/magnum-registry-certs-xcp54" E0708 10:14:57.358367 1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{magnum-registry-certs-xcp54.18c048f8c264182f openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:magnum-registry-certs-xcp54,UID:0f1364a3-2973-4787-a73a-03adc9f615d7,APIVersion:cert-manager.io/v1,ResourceVersion:29352,FieldPath:,},Reason:CertificateIssued,Message:Certificate fetched from issuer successfully,Source:EventSource{Component:cert-manager-certificaterequests-issuer-ca,Host:,},FirstTimestamp:2026-07-08 10:14:45.689145391 +0000 UTC m=+3979.339400600,LastTimestamp:2026-07-08 10:14:45.689145391 +0000 UTC m=+3979.339400600,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-ca,ReportingInstance:,}" I0708 10:14:57.718052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-xcp54" condition "Ready" to 2026-07-08 10:14:57.718036369 +0000 UTC m=+3991.368291618 I0708 10:15:02.687780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificaterequests-issuer-ca" key="openstack/magnum-registry-certs-xcp54" error="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"magnum-registry-certs-xcp54\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:15:02.935893 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:15:02.9358781 +0000 UTC m=+3996.586133319 I0708 10:15:03.081000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0708 10:15:03.081368 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-08 10:15:03.081361112 +0000 UTC m=+3996.731616321 I0708 10:15:03.535138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0708 10:15:35.784087 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0708 10:15:57.752827 1 leaderelection.go:369] Failed to update lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0708 10:15:57.752883 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0708 10:16:04.758238 1 leaderelection.go:308] Failed to release lock: etcdserver: request timed out I0708 10:16:04.758403 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0708 10:16:04.758466 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0708 10:16:04.758527 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0708 10:16:04.758572 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0708 10:16:04.758611 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0708 10:16:04.758692 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0708 10:16:04.758776 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0708 10:16:04.758798 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0708 10:16:04.758899 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0708 10:16:04.758928 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0708 10:16:04.758943 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0708 10:16:04.758981 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0708 10:16:04.758954 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0708 10:16:04.759028 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0708 10:16:04.759059 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0708 10:16:04.759089 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0708 10:16:04.759102 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0708 10:16:04.759117 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" E0708 10:16:04.759216 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"