I0407 15:13:08.092607 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 15:13:08.092932 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 15:13:08.093260 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 15:13:08.099260 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 15:13:08.100048 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 15:13:08.100131 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 15:13:08.100133 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 15:13:08.102781 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 15:13:08.117564 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 15:13:08.120840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 15:13:08.123489 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 15:13:08.123529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 15:13:08.126278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 15:13:08.130359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 15:13:08.133055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 15:13:08.135519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 15:13:08.138048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 15:13:08.140335 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 15:13:08.140401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 15:13:08.143014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 15:13:08.145052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 15:13:08.146655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 15:13:08.151897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 15:13:08.155685 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 15:13:08.155723 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 15:13:08.155742 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 15:13:08.159408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 15:13:08.161858 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 15:13:08.161888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 15:13:08.164505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 15:13:08.167037 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 15:13:08.169347 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 15:13:08.169401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 15:13:08.172557 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.174138 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.174330 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.174726 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.174871 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.174955 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.175080 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.175438 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.175500 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:08.253811 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:13:19.508030 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 15:13:19.508003498 +0000 UTC m=+11.448368603 I0407 15:13:20.186534 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:13:20.186608 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 15:13:20.186598367 +0000 UTC m=+12.126963462 I0407 15:13:20.187210 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 15:13:20.187191619 +0000 UTC m=+12.127556724 E0407 15:13:20.202390 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:13:20.202470 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 15:13:20.202462393 +0000 UTC m=+12.142827468 E0407 15:13:20.202492 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:13:20.206470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:20.206556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:13:20.206593 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 15:13:20.20658665 +0000 UTC m=+12.146951725 E0407 15:13:20.216257 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 15:13:20.216547 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:13:20.216702 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:13:20.216829 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 15:13:20.241369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:20.250665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-spnl7" condition "Approved" to 2026-04-07 15:13:20.250657044 +0000 UTC m=+12.191022119 I0407 15:13:20.265051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-spnl7" condition "Ready" to 2026-04-07 15:13:20.265032672 +0000 UTC m=+12.205397767 I0407 15:13:20.291555 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:13:20.291536557 +0000 UTC m=+12.231901632 I0407 15:13:20.311126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:20.311507 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:13:20.31149635 +0000 UTC m=+12.251861455 I0407 15:13:20.325058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:20.328368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:20.328563 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:13:20.328555209 +0000 UTC m=+12.268920284 I0407 15:13:25.217173 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:13:25.217161053 +0000 UTC m=+17.157526148 I0407 15:13:45.011913 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 15:13:45.011898647 +0000 UTC m=+36.952263722 I0407 15:13:45.012349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:13:45.012417 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 15:13:45.012405876 +0000 UTC m=+36.952770981 I0407 15:13:45.029380 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 15:13:45.029365033 +0000 UTC m=+36.969730108 I0407 15:13:45.035197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:45.035873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:13:45.035918 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 15:13:45.035909095 +0000 UTC m=+36.976274170 I0407 15:13:45.339768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qwsl5" condition "Approved" to 2026-04-07 15:13:45.339753961 +0000 UTC m=+37.280119036 I0407 15:13:45.371764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qwsl5" condition "Ready" to 2026-04-07 15:13:45.371735889 +0000 UTC m=+37.312100994 I0407 15:13:45.408125 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:13:45.408105998 +0000 UTC m=+37.348471093 I0407 15:13:45.432059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:45.432490 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:13:45.432483533 +0000 UTC m=+37.372848628 I0407 15:13:45.451573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:45.451907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:13:45.452682 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:13:45.45266797 +0000 UTC m=+37.393033075 I0407 15:15:35.331088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:15:35.331145 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 15:15:35.331123838 +0000 UTC m=+147.271488933 I0407 15:15:35.331322 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 15:15:35.331293501 +0000 UTC m=+147.271658606 E0407 15:15:35.347078 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:15:35.347170 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 15:15:35.347159757 +0000 UTC m=+147.287524842 I0407 15:15:35.347230 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:15:35.349778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:15:35.349827 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 15:15:35.349821527 +0000 UTC m=+147.290186612 E0407 15:15:35.355959 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 15:15:35.356072 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:15:35.356178 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 15:15:35.356239 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 15:15:35.362111 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 15:15:35.362097006 +0000 UTC m=+147.302462071 I0407 15:15:35.362205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:15:35.362265 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 15:15:35.362253709 +0000 UTC m=+147.302618804 I0407 15:15:35.376665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:15:35.376744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:15:35.376770 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 15:15:35.376763019 +0000 UTC m=+147.317128094 I0407 15:15:35.440542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:15:35.470874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ltfkn" condition "Approved" to 2026-04-07 15:15:35.470818285 +0000 UTC m=+147.411183390 I0407 15:15:35.497228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ltfkn" condition "Ready" to 2026-04-07 15:15:35.497211937 +0000 UTC m=+147.437577032 I0407 15:15:35.524798 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:15:35.524789802 +0000 UTC m=+147.465154877 I0407 15:15:35.545227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:15:35.545476 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:15:35.545469689 +0000 UTC m=+147.485834764 I0407 15:15:35.555613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-wzldr" condition "Approved" to 2026-04-07 15:15:35.555599938 +0000 UTC m=+147.495965013 I0407 15:15:35.556540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:15:35.567582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:15:35.570006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-wzldr" condition "Ready" to 2026-04-07 15:15:35.569994456 +0000 UTC m=+147.510359551 I0407 15:15:40.357518 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:15:40.357500368 +0000 UTC m=+152.297865473 I0407 15:15:40.375097 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-wzldr" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:15:40.375088646 +0000 UTC m=+152.315453721 I0407 15:15:40.408472 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:15:40.408454239 +0000 UTC m=+152.348819334 I0407 15:15:40.428926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:15:40.478247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:18:02.977348 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-04-07 15:18:02.977301937 +0000 UTC m=+294.917667012 I0407 15:18:02.978000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:18:02.978022 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-07 15:18:02.978018401 +0000 UTC m=+294.918383476 I0407 15:18:02.995466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:18:02.995556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:18:02.995580 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-04-07 15:18:02.99557288 +0000 UTC m=+294.935937945 I0407 15:18:03.361214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:18:03.366475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-fs4p4" condition "Approved" to 2026-04-07 15:18:03.366460222 +0000 UTC m=+295.306825297 I0407 15:18:03.386462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-fs4p4" condition "Ready" to 2026-04-07 15:18:03.386450916 +0000 UTC m=+295.326815991 I0407 15:18:03.416445 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:18:03.416429059 +0000 UTC m=+295.356794154 I0407 15:18:03.441859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:39.402667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:19:39.402722 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 15:19:39.402710273 +0000 UTC m=+391.343075338 I0407 15:19:39.402792 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 15:19:39.402766904 +0000 UTC m=+391.343131999 I0407 15:19:39.417225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:39.417332 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 15:19:39.417319536 +0000 UTC m=+391.357684611 E0407 15:19:39.424265 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:19:39.424328 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 15:19:39.424315687 +0000 UTC m=+391.364680792 E0407 15:19:39.424410 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:19:39.434473 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 15:19:39.434801 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:19:39.434885 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:19:39.434991 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 15:19:39.435347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:39.458731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rlbxn" condition "Approved" to 2026-04-07 15:19:39.458708163 +0000 UTC m=+391.399073258 I0407 15:19:39.472172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rlbxn" condition "Ready" to 2026-04-07 15:19:39.472160035 +0000 UTC m=+391.412525140 I0407 15:19:39.494408 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:39.494389622 +0000 UTC m=+391.434754697 I0407 15:19:39.511994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:39.512373 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:39.512361818 +0000 UTC m=+391.452726893 I0407 15:19:39.524814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:39.531298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:39.531302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:39.531555 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:39.531545388 +0000 UTC m=+391.471910453 I0407 15:19:44.435450 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:44.435431538 +0000 UTC m=+396.375796633 I0407 15:20:21.853799 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 15:20:21.853780775 +0000 UTC m=+433.794145850 I0407 15:20:21.854940 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:21.855037 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 15:20:21.855026019 +0000 UTC m=+433.795391094 I0407 15:20:21.859576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:21.859602 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 15:20:21.859596794 +0000 UTC m=+433.799961849 I0407 15:20:21.859838 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 15:20:21.859834839 +0000 UTC m=+433.800199894 I0407 15:20:21.865488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:21.865528 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 15:20:21.865518376 +0000 UTC m=+433.805883441 I0407 15:20:21.865904 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 15:20:21.865898772 +0000 UTC m=+433.806263827 I0407 15:20:21.884150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:21.884277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:21.884309 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 15:20:21.884303517 +0000 UTC m=+433.824668582 I0407 15:20:21.893612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:21.893725 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 15:20:21.893714904 +0000 UTC m=+433.834079979 I0407 15:20:21.893806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:21.893870 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 15:20:21.893864566 +0000 UTC m=+433.834229631 I0407 15:20:21.991789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:22.037617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-82n4w" condition "Approved" to 2026-04-07 15:20:22.03760356 +0000 UTC m=+433.977968635 I0407 15:20:22.061379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-82n4w" condition "Ready" to 2026-04-07 15:20:22.061360775 +0000 UTC m=+434.001725840 I0407 15:20:22.085348 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:22.085331374 +0000 UTC m=+434.025696439 I0407 15:20:22.087680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:22.104537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:22.123209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dsqql" condition "Approved" to 2026-04-07 15:20:22.123202164 +0000 UTC m=+434.063567229 I0407 15:20:22.141770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dsqql" condition "Ready" to 2026-04-07 15:20:22.141764551 +0000 UTC m=+434.082129616 I0407 15:20:22.281780 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:22.281767864 +0000 UTC m=+434.222132929 I0407 15:20:22.303199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:22.303809 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:22.303794157 +0000 UTC m=+434.244159252 I0407 15:20:22.557322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:22.754800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-smh9q" condition "Approved" to 2026-04-07 15:20:22.754778657 +0000 UTC m=+434.695143722 I0407 15:20:23.015546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-smh9q" condition "Ready" to 2026-04-07 15:20:23.015531323 +0000 UTC m=+434.955896398 I0407 15:20:23.300621 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:23.300594754 +0000 UTC m=+435.240959849 I0407 15:20:23.401449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:23.402015 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:23.402003184 +0000 UTC m=+435.342368289 I0407 15:20:23.652648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:31.417547 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cpn25-tls" condition "Ready" to 2026-04-07 15:20:31.417527436 +0000 UTC m=+443.357892511 I0407 15:20:31.417791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cpn25-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:31.417834 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cpn25-tls" condition "Issuing" to 2026-04-07 15:20:31.417823761 +0000 UTC m=+443.358188826 I0407 15:20:31.430963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cpn25-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cpn25-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:31.431070 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cpn25-tls" condition "Ready" to 2026-04-07 15:20:31.431057679 +0000 UTC m=+443.371422784 I0407 15:20:31.535681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cpn25-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cpn25-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:31.561396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cpn25-55clf" condition "Approved" to 2026-04-07 15:20:31.561380411 +0000 UTC m=+443.501745476 I0407 15:20:31.581057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cpn25-55clf" condition "Ready" to 2026-04-07 15:20:31.581042039 +0000 UTC m=+443.521407114 I0407 15:20:31.611391 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cpn25-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:31.611368537 +0000 UTC m=+443.551733612 I0407 15:20:31.630652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cpn25-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cpn25-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:55.951432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:55.951512 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 15:20:55.951469682 +0000 UTC m=+467.891834757 I0407 15:20:55.951720 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 15:20:55.951697757 +0000 UTC m=+467.892062842 I0407 15:20:55.965849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:55.965981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:55.966025 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 15:20:55.966014784 +0000 UTC m=+467.906379849 I0407 15:20:56.281309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9hv6r" condition "Approved" to 2026-04-07 15:20:56.281287431 +0000 UTC m=+468.221652506 I0407 15:20:56.303453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9hv6r" condition "Ready" to 2026-04-07 15:20:56.303439467 +0000 UTC m=+468.243804542 I0407 15:20:56.337529 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:56.337512354 +0000 UTC m=+468.277877449 I0407 15:20:56.356531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:23.106268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:24:23.106901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 15:24:23.106350466 +0000 UTC m=+675.046715561 I0407 15:24:23.106906 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 15:24:23.106783995 +0000 UTC m=+675.047149100 I0407 15:24:23.124620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:23.124694 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 15:24:23.12468574 +0000 UTC m=+675.065050815 I0407 15:24:23.309002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:23.343495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bq9nz" condition "Approved" to 2026-04-07 15:24:23.343478721 +0000 UTC m=+675.283843786 I0407 15:24:23.361396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bq9nz" condition "Ready" to 2026-04-07 15:24:23.361384377 +0000 UTC m=+675.301749452 I0407 15:24:23.393752 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:24:23.393727924 +0000 UTC m=+675.334093019 I0407 15:24:23.411910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:23.412426 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:24:23.412416285 +0000 UTC m=+675.352781360 I0407 15:24:23.432849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:49.224334 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 15:26:49.224285744 +0000 UTC m=+821.164650849 I0407 15:26:49.224434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:49.224516 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 15:26:49.224505488 +0000 UTC m=+821.164870583 I0407 15:26:49.240365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:49.240448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:49.240472 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 15:26:49.240465237 +0000 UTC m=+821.180830312 I0407 15:26:49.369398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vr4n5" condition "Approved" to 2026-04-07 15:26:49.369384152 +0000 UTC m=+821.309749217 I0407 15:26:49.386548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vr4n5" condition "Ready" to 2026-04-07 15:26:49.386537393 +0000 UTC m=+821.326902468 I0407 15:26:49.409439 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:49.409427653 +0000 UTC m=+821.349792728 I0407 15:26:49.431125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:49.431387 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:49.431381584 +0000 UTC m=+821.371746659 I0407 15:26:49.451785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:55.944710 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 15:27:55.944696724 +0000 UTC m=+887.885061799 I0407 15:27:55.945300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:27:55.945333 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 15:27:55.945327076 +0000 UTC m=+887.885692151 I0407 15:27:55.968346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:55.968434 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 15:27:55.968428649 +0000 UTC m=+887.908793714 I0407 15:27:56.109631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:56.142780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vwrbj" condition "Approved" to 2026-04-07 15:27:56.142768025 +0000 UTC m=+888.083133100 I0407 15:27:56.168429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vwrbj" condition "Ready" to 2026-04-07 15:27:56.168410026 +0000 UTC m=+888.108775121 I0407 15:27:56.199333 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:27:56.199321025 +0000 UTC m=+888.139686100 I0407 15:27:56.223059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:56.223323 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:27:56.223316314 +0000 UTC m=+888.163681389 I0407 15:27:56.242773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:56.242888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:56.243100 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:27:56.243094275 +0000 UTC m=+888.183459350 I0407 15:30:59.706668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:30:59.706748 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 15:30:59.706737752 +0000 UTC m=+1071.647102857 I0407 15:30:59.706728 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 15:30:59.706678611 +0000 UTC m=+1071.647043686 I0407 15:30:59.722025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:59.722211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:30:59.722247 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 15:30:59.722236742 +0000 UTC m=+1071.662601837 I0407 15:30:59.868520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:59.877282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-t2qbp" condition "Approved" to 2026-04-07 15:30:59.877271167 +0000 UTC m=+1071.817636242 I0407 15:30:59.896577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-t2qbp" condition "Ready" to 2026-04-07 15:30:59.896563688 +0000 UTC m=+1071.836928793 I0407 15:30:59.925606 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:30:59.92559612 +0000 UTC m=+1071.865961195 I0407 15:30:59.944796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:59.945171 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:30:59.945163075 +0000 UTC m=+1071.885528150 I0407 15:30:59.969014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:37:13.034500 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:37:13.034664 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-07 15:37:13.03454556 +0000 UTC m=+1444.974910615 I0407 15:37:13.035692 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-07 15:37:13.035670791 +0000 UTC m=+1444.976035886 I0407 15:37:13.059195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:37:13.059293 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-07 15:37:13.059284196 +0000 UTC m=+1444.999649271 I0407 15:37:13.494061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:37:13.531787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-kb8r8" condition "Approved" to 2026-04-07 15:37:13.531774131 +0000 UTC m=+1445.472139206 I0407 15:37:13.552770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-kb8r8" condition "Ready" to 2026-04-07 15:37:13.552757729 +0000 UTC m=+1445.493122804 I0407 15:37:13.579344 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:37:13.57932763 +0000 UTC m=+1445.519692705 I0407 15:37:13.601606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:38:44.027852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:38:44.027918 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-07 15:38:44.027876161 +0000 UTC m=+1535.968241266 I0407 15:38:44.027905 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-07 15:38:44.027882221 +0000 UTC m=+1535.968247296 I0407 15:38:44.043282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:38:44.043408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:38:44.043618 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-07 15:38:44.043426958 +0000 UTC m=+1535.983792073 I0407 15:38:44.241355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nl22z" condition "Approved" to 2026-04-07 15:38:44.241342666 +0000 UTC m=+1536.181707741 I0407 15:38:44.259933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-nl22z" condition "Ready" to 2026-04-07 15:38:44.259921621 +0000 UTC m=+1536.200286696 I0407 15:38:44.292929 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:38:44.29291556 +0000 UTC m=+1536.233280635 I0407 15:38:44.312501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:38:44.312704 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:38:44.312698206 +0000 UTC m=+1536.253063271 I0407 15:38:44.330871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:38:44.331386 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:38:44.331377721 +0000 UTC m=+1536.271742796 I0407 15:40:03.208844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:40:03.208877 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-07 15:40:03.208870883 +0000 UTC m=+1615.149235958 I0407 15:40:03.209249 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-07 15:40:03.20922868 +0000 UTC m=+1615.149593765 I0407 15:40:03.224169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:03.224251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:40:03.224276 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-07 15:40:03.224270411 +0000 UTC m=+1615.164635476 I0407 15:40:03.274877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-5lwt7" condition "Approved" to 2026-04-07 15:40:03.274863735 +0000 UTC m=+1615.215228810 I0407 15:40:03.292536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-5lwt7" condition "Ready" to 2026-04-07 15:40:03.292525085 +0000 UTC m=+1615.232890150 I0407 15:40:03.314105 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:40:03.314094188 +0000 UTC m=+1615.254459253 I0407 15:40:03.334086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:03.841055 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-07 15:40:03.841036301 +0000 UTC m=+1615.781401406 I0407 15:40:03.841224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:40:03.841303 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-07 15:40:03.841275116 +0000 UTC m=+1615.781640191 I0407 15:40:03.858819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:03.858893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:40:03.858908 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-07 15:40:03.858902925 +0000 UTC m=+1615.799268000 I0407 15:40:03.901888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:03.906370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-cvb4v" condition "Approved" to 2026-04-07 15:40:03.906356721 +0000 UTC m=+1615.846721826 I0407 15:40:03.918215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-cvb4v" condition "Ready" to 2026-04-07 15:40:03.918208092 +0000 UTC m=+1615.858573167 I0407 15:40:03.951252 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:40:03.951234438 +0000 UTC m=+1615.891599543 I0407 15:40:03.972473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:04.537497 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-07 15:40:04.537484088 +0000 UTC m=+1616.477849193 I0407 15:40:05.148499 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-07 15:40:05.148487912 +0000 UTC m=+1617.088852987 I0407 15:40:50.663535 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:40:50.663574 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-07 15:40:50.663565915 +0000 UTC m=+1662.603930990 I0407 15:40:50.663980 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-07 15:40:50.663974454 +0000 UTC m=+1662.604339529 I0407 15:40:50.693519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:50.693598 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-07 15:40:50.693592696 +0000 UTC m=+1662.633957761 I0407 15:40:53.330145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:53.379346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-kdjxz" condition "Approved" to 2026-04-07 15:40:53.379331398 +0000 UTC m=+1665.319696463 I0407 15:40:53.400377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-kdjxz" condition "Ready" to 2026-04-07 15:40:53.400368261 +0000 UTC m=+1665.340733336 I0407 15:40:53.432579 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:40:53.432566222 +0000 UTC m=+1665.372931297 I0407 15:40:53.453988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:53.455084 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:40:53.455075742 +0000 UTC m=+1665.395440817 I0407 15:40:53.472805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:40:53.475869 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:40:53.47586148 +0000 UTC m=+1665.416226545 I0407 15:43:28.102484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:43:28.102634 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-07 15:43:28.102618897 +0000 UTC m=+1820.042984002 I0407 15:43:28.102518 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-07 15:43:28.102497335 +0000 UTC m=+1820.042862440 I0407 15:43:28.117912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:43:28.118004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:43:28.118025 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-07 15:43:28.118017064 +0000 UTC m=+1820.058382139 I0407 15:43:28.410692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:43:28.420804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-7rzk7" condition "Approved" to 2026-04-07 15:43:28.420788834 +0000 UTC m=+1820.361153939 I0407 15:43:28.443254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-7rzk7" condition "Ready" to 2026-04-07 15:43:28.443243734 +0000 UTC m=+1820.383608809 I0407 15:43:28.472420 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:43:28.472410198 +0000 UTC m=+1820.412775273 I0407 15:43:28.493044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:43:28.493268 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:43:28.493264147 +0000 UTC m=+1820.433629212 I0407 15:43:28.511339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:43:28.512762 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:43:28.512753151 +0000 UTC m=+1820.453118226 I0407 15:43:28.516085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:43:29.662325 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-07 15:43:29.662309845 +0000 UTC m=+1821.602674920 I0407 15:43:29.665012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:43:29.665093 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-07 15:43:29.665080086 +0000 UTC m=+1821.605445161 I0407 15:43:29.683377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:43:29.683498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:43:29.683554 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-07 15:43:29.683545801 +0000 UTC m=+1821.623910876 I0407 15:43:29.882188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-kx8h8" condition "Approved" to 2026-04-07 15:43:29.882171338 +0000 UTC m=+1821.822536413 I0407 15:43:29.902069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-kx8h8" condition "Ready" to 2026-04-07 15:43:29.902057159 +0000 UTC m=+1821.842422234 I0407 15:43:29.930367 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:43:29.930354657 +0000 UTC m=+1821.870719712 I0407 15:43:29.947555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:46:34.843235 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-07 15:46:34.843196601 +0000 UTC m=+2006.783561676 I0407 15:46:34.843351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:46:34.843389 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-07 15:46:34.843377425 +0000 UTC m=+2006.783742530 I0407 15:46:34.859803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:46:34.859886 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:46:34.859908 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-07 15:46:34.859902263 +0000 UTC m=+2006.800267338 I0407 15:46:35.024663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:46:35.034727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9vrrk" condition "Approved" to 2026-04-07 15:46:35.034719547 +0000 UTC m=+2006.975084612 I0407 15:46:35.051197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-9vrrk" condition "Ready" to 2026-04-07 15:46:35.051184445 +0000 UTC m=+2006.991549520 I0407 15:46:35.080018 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:46:35.079998092 +0000 UTC m=+2007.020363167 I0407 15:46:35.097859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:46:35.098245 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:46:35.098235103 +0000 UTC m=+2007.038600178 I0407 15:46:35.126332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.632547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-4fwsd-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:47:28.632584 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-4fwsd-api" condition "Issuing" to 2026-04-07 15:47:28.63257609 +0000 UTC m=+2060.572941155 I0407 15:47:28.632888 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-4fwsd-api" condition "Ready" to 2026-04-07 15:47:28.632867215 +0000 UTC m=+2060.573232310 I0407 15:47:28.634560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-4fwsd-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:47:28.634607 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-4fwsd-vnc" condition "Issuing" to 2026-04-07 15:47:28.634596868 +0000 UTC m=+2060.574961973 I0407 15:47:28.635161 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-4fwsd-vnc" condition "Ready" to 2026-04-07 15:47:28.635151789 +0000 UTC m=+2060.575516884 I0407 15:47:28.650727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-4fwsd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-api\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.650823 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-4fwsd-api" condition "Ready" to 2026-04-07 15:47:28.650818251 +0000 UTC m=+2060.591183346 I0407 15:47:28.652297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-4fwsd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.652367 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-4fwsd-vnc" condition "Ready" to 2026-04-07 15:47:28.652362429 +0000 UTC m=+2060.592727504 I0407 15:47:28.769647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-4fwsd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.801337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-4fwsd-vnc-hkvcd" condition "Approved" to 2026-04-07 15:47:28.80132086 +0000 UTC m=+2060.741685925 I0407 15:47:28.819267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-4fwsd-vnc-hkvcd" condition "Ready" to 2026-04-07 15:47:28.819253755 +0000 UTC m=+2060.759618850 I0407 15:47:28.835633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-4fwsd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-api\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.844826 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-4fwsd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:47:28.844816154 +0000 UTC m=+2060.785181229 I0407 15:47:28.865231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-4fwsd-api-bfzjk" condition "Approved" to 2026-04-07 15:47:28.865216364 +0000 UTC m=+2060.805581439 I0407 15:47:28.866728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-4fwsd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.867072 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-4fwsd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:47:28.867066248 +0000 UTC m=+2060.807431313 I0407 15:47:28.876617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-4fwsd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.881296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-4fwsd-api-bfzjk" condition "Ready" to 2026-04-07 15:47:28.881285144 +0000 UTC m=+2060.821650209 I0407 15:47:28.890979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-4fwsd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.891217 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-4fwsd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:47:28.89121185 +0000 UTC m=+2060.831576915 I0407 15:47:28.893157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-4fwsd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:47:28.921207 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-4fwsd-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:47:28.921196649 +0000 UTC m=+2060.861561724 I0407 15:47:28.940729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-4fwsd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-4fwsd-api\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:18.514534 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-07 15:51:18.514503141 +0000 UTC m=+2290.454868236 I0407 15:51:18.514651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:51:18.514687 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-07 15:51:18.514676714 +0000 UTC m=+2290.455041809 I0407 15:51:18.529448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:18.529537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:51:18.529559 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-07 15:51:18.529552132 +0000 UTC m=+2290.469917197 I0407 15:51:18.759163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:18.763241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-l8qxd" condition "Approved" to 2026-04-07 15:51:18.763226279 +0000 UTC m=+2290.703591374 I0407 15:51:18.781892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-l8qxd" condition "Ready" to 2026-04-07 15:51:18.781881278 +0000 UTC m=+2290.722246353 I0407 15:51:18.809943 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:51:18.809929101 +0000 UTC m=+2290.750294186 I0407 15:51:18.836918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:18.837304 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:51:18.837297951 +0000 UTC m=+2290.777663016 I0407 15:51:18.862896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:18.863193 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:51:18.863186654 +0000 UTC m=+2290.803551719 I0407 15:51:19.972675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:51:19.972735 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-07 15:51:19.972706128 +0000 UTC m=+2291.913071203 I0407 15:51:19.972905 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-07 15:51:19.972881931 +0000 UTC m=+2291.913247006 I0407 15:51:19.989050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:19.989105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:51:19.989118 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-07 15:51:19.989113484 +0000 UTC m=+2291.929478559 I0407 15:51:20.320986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:20.327665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-jm5qk" condition "Approved" to 2026-04-07 15:51:20.327649999 +0000 UTC m=+2292.268015094 I0407 15:51:20.379211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-jm5qk" condition "Ready" to 2026-04-07 15:51:20.37920238 +0000 UTC m=+2292.319567445 I0407 15:51:20.419586 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:51:20.419577283 +0000 UTC m=+2292.359942358 I0407 15:51:20.453635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:20.454068 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:51:20.454059656 +0000 UTC m=+2292.394424721 I0407 15:51:20.457423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:20.474676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:51:20.475132 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:51:20.475123579 +0000 UTC m=+2292.415488654 I0407 15:54:10.590025 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-07 15:54:10.5899696 +0000 UTC m=+2462.530334675 I0407 15:54:10.590066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:54:10.590101 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-07 15:54:10.590090702 +0000 UTC m=+2462.530455797 E0407 15:54:10.604363 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:54:10.604445 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-07 15:54:10.604435469 +0000 UTC m=+2462.544800574 I0407 15:54:10.604477 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:54:10.604602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:10.604727 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-07 15:54:10.604721555 +0000 UTC m=+2462.545086650 E0407 15:54:10.615984 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0407 15:54:10.616091 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:54:10.616127 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 15:54:10.616164 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0407 15:54:10.624615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:10.652063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-rscmm" condition "Approved" to 2026-04-07 15:54:10.652048184 +0000 UTC m=+2462.592413259 I0407 15:54:10.672470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-rscmm" condition "Ready" to 2026-04-07 15:54:10.672458874 +0000 UTC m=+2462.612823929 I0407 15:54:10.702073 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:10.702053695 +0000 UTC m=+2462.642418770 I0407 15:54:10.722018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:11.210909 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-07 15:54:11.210889459 +0000 UTC m=+2463.151254554 I0407 15:54:11.210981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:54:11.211015 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-07 15:54:11.211006371 +0000 UTC m=+2463.151371456 E0407 15:54:11.223459 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:54:11.223512 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-07 15:54:11.223504534 +0000 UTC m=+2463.163869609 I0407 15:54:11.223559 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:54:11.227425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:11.227685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:54:11.227750 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-07 15:54:11.227711672 +0000 UTC m=+2463.168076777 E0407 15:54:11.232509 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0407 15:54:11.232614 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:54:11.232645 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 15:54:11.232692 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0407 15:54:11.271164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:11.280223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-vpd87" condition "Approved" to 2026-04-07 15:54:11.280208818 +0000 UTC m=+2463.220573893 I0407 15:54:11.302599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-vpd87" condition "Ready" to 2026-04-07 15:54:11.302564384 +0000 UTC m=+2463.242929459 I0407 15:54:11.326462 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:11.326449898 +0000 UTC m=+2463.266814953 I0407 15:54:11.340158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:11.342155 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:11.34214581 +0000 UTC m=+2463.282510885 I0407 15:54:11.362088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:11.931143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:54:11.931190 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-07 15:54:11.931181985 +0000 UTC m=+2463.871547060 I0407 15:54:11.931191 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-07 15:54:11.931179935 +0000 UTC m=+2463.871545010 I0407 15:54:11.947758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:11.947949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:54:11.947994 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-07 15:54:11.947986558 +0000 UTC m=+2463.888351633 I0407 15:54:11.991632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-2hbt8" condition "Approved" to 2026-04-07 15:54:11.991610689 +0000 UTC m=+2463.931975754 I0407 15:54:12.070504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-2hbt8" condition "Ready" to 2026-04-07 15:54:12.070485417 +0000 UTC m=+2464.010850522 I0407 15:54:15.616523 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:15.616511059 +0000 UTC m=+2467.556876124 I0407 15:54:15.629449 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-2hbt8" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:15.629437399 +0000 UTC m=+2467.569802474 I0407 15:54:15.657140 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:15.657123774 +0000 UTC m=+2467.597488839 I0407 15:54:15.680866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:15.681187 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:15.681180902 +0000 UTC m=+2467.621545967 I0407 15:54:15.699273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:54:15.699648 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:15.699638836 +0000 UTC m=+2467.640003911 I0407 15:54:16.232891 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:54:16.232879983 +0000 UTC m=+2468.173245038 I0407 15:56:36.987117 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-07 15:56:36.987105427 +0000 UTC m=+2608.927470502 I0407 15:56:36.987586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:56:36.987609 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-07 15:56:36.987605015 +0000 UTC m=+2608.927970090 I0407 15:56:37.010427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:56:37.010536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:56:37.010567 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-07 15:56:37.010558412 +0000 UTC m=+2608.950923517 I0407 15:56:37.195438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:56:37.199538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-km9qz" condition "Approved" to 2026-04-07 15:56:37.199524266 +0000 UTC m=+2609.139889351 I0407 15:56:37.217240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-km9qz" condition "Ready" to 2026-04-07 15:56:37.217229296 +0000 UTC m=+2609.157594371 I0407 15:56:37.246657 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:56:37.246648213 +0000 UTC m=+2609.187013298 I0407 15:56:37.267591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:56:37.267956 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:56:37.267949939 +0000 UTC m=+2609.208315024 I0407 15:56:37.287146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:22.457870 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-07 15:57:22.457853742 +0000 UTC m=+2654.398218817 I0407 15:57:22.477238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:57:22.477286 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-07 15:57:22.477261573 +0000 UTC m=+2654.417626648 I0407 15:57:22.477643 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-07 15:57:22.477637019 +0000 UTC m=+2654.418002094 I0407 15:57:22.498829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:22.498984 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-07 15:57:22.498973266 +0000 UTC m=+2654.439338361 E0407 15:57:22.514936 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0407 15:57:22.574535 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-07 15:57:22.574511921 +0000 UTC m=+2654.514877016 I0407 15:57:22.596356 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-07 15:57:22.596338717 +0000 UTC m=+2654.536703822 I0407 15:57:22.596566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:57:22.596604 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-07 15:57:22.596595892 +0000 UTC m=+2654.536960967 I0407 15:57:22.615802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:22.615907 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-07 15:57:22.615897301 +0000 UTC m=+2654.556262376 E0407 15:57:22.735160 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0407 15:57:22.892824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:22.927843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-v7v5r" condition "Approved" to 2026-04-07 15:57:22.927829972 +0000 UTC m=+2654.868195047 I0407 15:57:22.952148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-v7v5r" condition "Ready" to 2026-04-07 15:57:22.952137245 +0000 UTC m=+2654.892502310 I0407 15:57:22.991173 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:57:22.991156901 +0000 UTC m=+2654.931521976 I0407 15:57:23.013666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:23.014152 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:57:23.014142798 +0000 UTC m=+2654.954507873 I0407 15:57:23.034639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:23.348913 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-07 15:57:23.348898104 +0000 UTC m=+2655.289263179 I0407 15:57:23.365489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:57:23.365522 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-07 15:57:23.365514463 +0000 UTC m=+2655.305879538 I0407 15:57:23.365881 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-07 15:57:23.365869259 +0000 UTC m=+2655.306234364 I0407 15:57:23.387054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:23.387166 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-07 15:57:23.387159295 +0000 UTC m=+2655.327524360 I0407 15:57:23.730099 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-07 15:57:23.730083333 +0000 UTC m=+2655.670448408 I0407 15:57:23.746500 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-07 15:57:23.746488789 +0000 UTC m=+2655.686853864 I0407 15:57:23.746532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:57:23.746569 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-07 15:57:23.74655982 +0000 UTC m=+2655.686924915 I0407 15:57:23.765373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:23.765435 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-07 15:57:23.765428251 +0000 UTC m=+2655.705793346 I0407 15:57:23.811523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:23.849500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-zgxk8" condition "Approved" to 2026-04-07 15:57:23.849483365 +0000 UTC m=+2655.789848440 I0407 15:57:23.876705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-zgxk8" condition "Ready" to 2026-04-07 15:57:23.87669549 +0000 UTC m=+2655.817060575 I0407 15:57:23.922196 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:57:23.922180286 +0000 UTC m=+2655.862545351 I0407 15:57:23.929893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:23.947508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:23.972631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-hxjk9" condition "Approved" to 2026-04-07 15:57:23.972618985 +0000 UTC m=+2655.912984040 I0407 15:57:24.028209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-hxjk9" condition "Ready" to 2026-04-07 15:57:24.028167217 +0000 UTC m=+2655.968532292 I0407 15:57:24.120201 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:57:24.120193659 +0000 UTC m=+2656.060558724 I0407 15:57:24.191057 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-07 15:57:24.191045087 +0000 UTC m=+2656.131410142 I0407 15:57:24.216688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:24.216755 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-07 15:57:24.216740955 +0000 UTC m=+2656.157106030 I0407 15:57:24.216979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:57:24.217002 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-07 15:57:24.21699925 +0000 UTC m=+2656.157364335 I0407 15:57:24.217172 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:57:24.217163073 +0000 UTC m=+2656.157528168 I0407 15:57:24.469609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:24.469680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:57:24.469700 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-07 15:57:24.46969326 +0000 UTC m=+2656.410058345 I0407 15:57:24.576964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:24.937281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:24.977955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9x6dd" condition "Approved" to 2026-04-07 15:57:24.977942053 +0000 UTC m=+2656.918307118 I0407 15:57:25.127804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9x6dd" condition "Ready" to 2026-04-07 15:57:25.12779113 +0000 UTC m=+2657.068156215 I0407 15:57:25.619455 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:57:25.619438184 +0000 UTC m=+2657.559803279 I0407 15:57:25.765257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:57:25.765494 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:57:25.76548851 +0000 UTC m=+2657.705853575 I0407 15:57:25.966672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0407 16:00:55.778551 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-07 16:00:55.778491064 +0000 UTC m=+2867.718856169 I0407 16:00:55.779322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 16:00:55.779356 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-07 16:00:55.779348391 +0000 UTC m=+2867.719713486 I0407 16:00:55.856132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 16:00:55.856247 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 16:00:55.856294 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-07 16:00:55.856265732 +0000 UTC m=+2867.796630837 I0407 16:00:56.147569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-6dkmf" condition "Approved" to 2026-04-07 16:00:56.147525249 +0000 UTC m=+2868.087890344 I0407 16:00:56.186955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-6dkmf" condition "Ready" to 2026-04-07 16:00:56.186939861 +0000 UTC m=+2868.127304936 I0407 16:00:56.233099 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 16:00:56.23308274 +0000 UTC m=+2868.173447805 I0407 16:00:56.290621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 16:00:56.291437 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 16:00:56.291425294 +0000 UTC m=+2868.231790389 I0407 16:00:56.362918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 16:00:58.285020 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-07 16:00:58.284981193 +0000 UTC m=+2870.225346288 I0407 16:00:58.285307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 16:00:58.285336 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-07 16:00:58.28532818 +0000 UTC m=+2870.225693255 I0407 16:00:58.298260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 16:00:58.298446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 16:00:58.298477 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-07 16:00:58.298470974 +0000 UTC m=+2870.238836079 I0407 16:00:58.522946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-94cws" condition "Approved" to 2026-04-07 16:00:58.522919318 +0000 UTC m=+2870.463284393 I0407 16:00:58.552833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-94cws" condition "Ready" to 2026-04-07 16:00:58.552822045 +0000 UTC m=+2870.493187120 I0407 16:00:58.607607 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 16:00:58.607593334 +0000 UTC m=+2870.547958409 I0407 16:00:58.629296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 16:00:58.629664 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 16:00:58.629658013 +0000 UTC m=+2870.570023088 I0407 16:00:58.658323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"