I0417 09:23:38.329354 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 09:23:38.329493 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 09:23:38.329607 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 09:23:38.335012 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 09:23:38.335567 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 09:23:38.335600 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 09:23:38.335616 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 09:23:38.338407 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 09:23:38.353181 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 09:23:38.356601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 09:23:38.360022 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 09:23:38.364033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 09:23:38.366554 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 09:23:38.366578 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 09:23:38.366586 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 09:23:38.366684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 09:23:38.368534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 09:23:38.370203 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 09:23:38.372074 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 09:23:38.372092 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 09:23:38.372229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 09:23:38.374291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 09:23:38.379572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 09:23:38.382744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 09:23:38.385098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 09:23:38.387459 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 09:23:38.387563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 09:23:38.390106 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 09:23:38.393074 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 09:23:38.395040 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 09:23:38.396876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 09:23:38.401910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 09:23:38.405647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 09:23:38.407797 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.408164 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.408351 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.408171 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.408905 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.409172 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.409198 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.409363 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.409971 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:38.525619 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 09:23:59.406963 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 09:23:59.4069531 +0000 UTC m=+21.108337081 I0417 09:24:01.041670 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 09:24:01.041659948 +0000 UTC m=+22.743043929 I0417 09:24:01.042013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:01.042111 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 09:24:01.042100508 +0000 UTC m=+22.743484499 E0417 09:24:01.058594 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 09:24:01.058697 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 09:24:01.058687986 +0000 UTC m=+22.760071977 E0417 09:24:01.058724 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 09:24:01.059553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:01.059609 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:01.059622 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 09:24:01.059618548 +0000 UTC m=+22.761002539 E0417 09:24:01.087538 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 09:24:01.088745 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 09:24:01.088826 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 09:24:01.088990 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 09:24:01.124530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xxnqh" condition "Approved" to 2026-04-17 09:24:01.124510563 +0000 UTC m=+22.825894554 I0417 09:24:01.125275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:01.138735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xxnqh" condition "Ready" to 2026-04-17 09:24:01.138695615 +0000 UTC m=+22.840079606 I0417 09:24:01.173767 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:01.173753574 +0000 UTC m=+22.875137565 I0417 09:24:01.196935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:01.197155 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:01.19714857 +0000 UTC m=+22.898532561 I0417 09:24:01.202541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:01.213972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:01.214251 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:01.214241229 +0000 UTC m=+22.915625210 I0417 09:24:06.088054 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:06.088044143 +0000 UTC m=+27.789428134 I0417 09:24:07.367895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:07.367935 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 09:24:07.367921312 +0000 UTC m=+29.069305303 I0417 09:24:07.367932 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 09:24:07.367923892 +0000 UTC m=+29.069307883 I0417 09:24:07.394094 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 09:24:07.394080753 +0000 UTC m=+29.095464744 I0417 09:24:07.406141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:07.406211 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 09:24:07.406204946 +0000 UTC m=+29.107588927 I0417 09:24:07.604487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:07.647218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nf6d2" condition "Approved" to 2026-04-17 09:24:07.647208486 +0000 UTC m=+29.348592477 I0417 09:24:07.699661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nf6d2" condition "Ready" to 2026-04-17 09:24:07.699648452 +0000 UTC m=+29.401032443 I0417 09:24:08.166966 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:08.166952378 +0000 UTC m=+29.868336369 I0417 09:24:08.191268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:08.191660 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:08.191652105 +0000 UTC m=+29.893036116 I0417 09:24:08.198458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:08.215518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:08.215961 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:08.215952203 +0000 UTC m=+29.917336194 I0417 09:24:08.216695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:14.530885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:14.530939 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-17 09:24:14.530922823 +0000 UTC m=+36.232306814 I0417 09:24:14.531313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:14.531352 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-17 09:24:14.531336303 +0000 UTC m=+36.232720304 I0417 09:24:14.531468 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 09:24:14.531329532 +0000 UTC m=+36.232713533 I0417 09:24:14.531510 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 09:24:14.531493026 +0000 UTC m=+36.232877017 E0417 09:24:14.544264 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:24:14.544323 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 09:24:14.544313376 +0000 UTC m=+36.245697347 I0417 09:24:14.544355 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:24:14.551193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:14.551254 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 09:24:14.551247498 +0000 UTC m=+36.252631499 I0417 09:24:14.558559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:14.558642 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-17 09:24:14.55863468 +0000 UTC m=+36.260018671 E0417 09:24:14.920858 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0417 09:24:14.920985 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:24:14.921188 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 09:24:14.921293 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0417 09:24:14.922927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:14.922976 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-17 09:24:14.922969711 +0000 UTC m=+36.624353702 I0417 09:24:14.923225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:14.923243 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 09:24:14.923238738 +0000 UTC m=+36.624622729 I0417 09:24:14.922989 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 09:24:14.922973942 +0000 UTC m=+36.624357953 I0417 09:24:15.038806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-stkt2" condition "Approved" to 2026-04-17 09:24:15.038784497 +0000 UTC m=+36.740168478 I0417 09:24:15.039212 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-17 09:24:15.039197297 +0000 UTC m=+36.740581288 I0417 09:24:15.041547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.042275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.043085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.047509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:15.047548 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 09:24:15.047539911 +0000 UTC m=+36.748923892 I0417 09:24:15.060393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.086143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-62hrp" condition "Approved" to 2026-04-17 09:24:15.086130073 +0000 UTC m=+36.787514054 I0417 09:24:15.105021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-stkt2" condition "Ready" to 2026-04-17 09:24:15.105005134 +0000 UTC m=+36.806389125 I0417 09:24:15.109061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-62hrp" condition "Ready" to 2026-04-17 09:24:15.109047869 +0000 UTC m=+36.810431850 I0417 09:24:15.262869 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:15.262849712 +0000 UTC m=+36.964233723 I0417 09:24:15.311492 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:15.311478427 +0000 UTC m=+37.012862408 I0417 09:24:15.327939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.328181 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:15.328172057 +0000 UTC m=+37.029556038 I0417 09:24:15.360235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.360602 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:15.360593615 +0000 UTC m=+37.061977596 I0417 09:24:15.436515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.437785 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-17 09:24:15.437777918 +0000 UTC m=+37.139161909 I0417 09:24:15.437979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:15.437998 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-17 09:24:15.437993833 +0000 UTC m=+37.139377814 I0417 09:24:15.479580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.519949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.520066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:24:15.520089 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-17 09:24:15.520081221 +0000 UTC m=+37.221465232 I0417 09:24:15.583524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:15.668333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-mtqfq" condition "Approved" to 2026-04-17 09:24:15.668318434 +0000 UTC m=+37.369702425 I0417 09:24:16.159433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-mtqfq" condition "Ready" to 2026-04-17 09:24:16.159423075 +0000 UTC m=+37.860807056 I0417 09:24:16.203029 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-17 09:24:16.203002883 +0000 UTC m=+37.904386894 I0417 09:24:16.665845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hlvjx" condition "Approved" to 2026-04-17 09:24:16.665832795 +0000 UTC m=+38.367216806 I0417 09:24:16.797767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hlvjx" condition "Ready" to 2026-04-17 09:24:16.797747717 +0000 UTC m=+38.499131708 E0417 09:24:17.027744 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:24:17.027802 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-17 09:24:17.027792141 +0000 UTC m=+38.729176162 I0417 09:24:17.027860 1 sync.go:62] "Error initializing issuer: secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 09:24:17.200921 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-api" E0417 09:24:17.201048 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:24:17.201129 1 sync.go:62] "Error initializing issuer: secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 09:24:17.201202 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-api" I0417 09:24:17.288478 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:17.28846676 +0000 UTC m=+38.989850751 I0417 09:24:17.446084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:17.446472 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:17.446463392 +0000 UTC m=+39.147847403 I0417 09:24:17.740251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:19.921422 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:19.921406637 +0000 UTC m=+41.622790648 I0417 09:24:20.087387 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-mtqfq" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:20.087364784 +0000 UTC m=+41.788748805 I0417 09:24:20.478697 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:20.478678565 +0000 UTC m=+42.180062576 I0417 09:24:21.013119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:21.013546 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:21.01353578 +0000 UTC m=+42.714919771 I0417 09:24:21.216055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:21.319900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:24:22.202342 1 conditions.go:85] Found status change for Issuer "libvirt-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:24:22.202324165 +0000 UTC m=+43.903708186 I0417 09:30:16.797158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-209.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:30:16.797229 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-209.nip.io-tls" condition "Issuing" to 2026-04-17 09:30:16.797219488 +0000 UTC m=+398.498603499 I0417 09:30:16.797256 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-209.nip.io-tls" condition "Ready" to 2026-04-17 09:30:16.797231829 +0000 UTC m=+398.498615850 I0417 09:30:16.813564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:30:16.813646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-209.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:30:16.813672 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-209.nip.io-tls" condition "Issuing" to 2026-04-17 09:30:16.813664281 +0000 UTC m=+398.515048292 I0417 09:30:17.052736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:30:17.067643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-209.nip.io-tls-wblg7" condition "Approved" to 2026-04-17 09:30:17.067578538 +0000 UTC m=+398.768962559 I0417 09:30:17.089955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-209.nip.io-tls-wblg7" condition "Ready" to 2026-04-17 09:30:17.089939348 +0000 UTC m=+398.791323359 I0417 09:30:17.125175 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:30:17.125148897 +0000 UTC m=+398.826532918 I0417 09:30:17.152789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:30:17.153145 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:30:17.153139648 +0000 UTC m=+398.854523629 I0417 09:30:17.153823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:30:17.165565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:30:17.168025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-209.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-209.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:30:17.168516 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-209.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:30:17.168502326 +0000 UTC m=+398.869886317 I0417 09:31:30.525661 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 09:31:30.525610832 +0000 UTC m=+472.226994843 I0417 09:31:30.525897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:31:30.525947 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 09:31:30.52593709 +0000 UTC m=+472.227321081 E0417 09:31:30.537947 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 09:31:30.538023 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 09:31:30.538014422 +0000 UTC m=+472.239398413 E0417 09:31:30.538057 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 09:31:30.538982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:31:30.539092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:31:30.539118 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 09:31:30.539112248 +0000 UTC m=+472.240496239 E0417 09:31:30.553518 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 09:31:30.553696 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 09:31:30.553795 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 09:31:30.553978 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 09:31:30.574406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:31:30.577057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ppcxx" condition "Approved" to 2026-04-17 09:31:30.577035616 +0000 UTC m=+472.278419617 I0417 09:31:30.589218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ppcxx" condition "Ready" to 2026-04-17 09:31:30.58920604 +0000 UTC m=+472.290590031 I0417 09:31:30.616879 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:31:30.616863517 +0000 UTC m=+472.318247498 I0417 09:31:30.637058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:31:30.637452 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:31:30.637443219 +0000 UTC m=+472.338827220 I0417 09:31:30.643425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:31:30.654829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:31:35.554011 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:31:35.55399633 +0000 UTC m=+477.255380351 I0417 09:32:20.492540 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 09:32:20.492514501 +0000 UTC m=+522.193898482 I0417 09:32:20.492982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:32:20.494600 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 09:32:20.494592889 +0000 UTC m=+522.195976870 I0417 09:32:20.493105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:32:20.493121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:32:20.493116 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 09:32:20.493106795 +0000 UTC m=+522.194490776 I0417 09:32:20.493162 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 09:32:20.493147285 +0000 UTC m=+522.194531266 I0417 09:32:20.497908 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 09:32:20.497897447 +0000 UTC m=+522.199281428 I0417 09:32:20.498097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 09:32:20.498092592 +0000 UTC m=+522.199476573 I0417 09:32:20.532135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:20.532160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:20.532210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:20.532273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:32:20.532332 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 09:32:20.532324007 +0000 UTC m=+522.233707998 I0417 09:32:20.532348 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 09:32:20.532338798 +0000 UTC m=+522.233722789 I0417 09:32:20.532273 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:32:20.532412 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 09:32:20.532406649 +0000 UTC m=+522.233790650 I0417 09:32:20.722269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:20.759245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xhfsz" condition "Approved" to 2026-04-17 09:32:20.759234628 +0000 UTC m=+522.460618609 I0417 09:32:20.779501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xhfsz" condition "Ready" to 2026-04-17 09:32:20.779487784 +0000 UTC m=+522.480871775 I0417 09:32:20.810615 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:20.810605617 +0000 UTC m=+522.511989598 I0417 09:32:20.832838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:20.833174 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:20.833168758 +0000 UTC m=+522.534552739 I0417 09:32:20.868470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0417 09:32:20.873102 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-2t4v6\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0417 09:32:20.900476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f79nb" condition "Approved" to 2026-04-17 09:32:20.900464091 +0000 UTC m=+522.601848082 I0417 09:32:20.921118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f79nb" condition "Ready" to 2026-04-17 09:32:20.921106947 +0000 UTC m=+522.622490928 I0417 09:32:20.952837 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:20.952826983 +0000 UTC m=+522.654210964 I0417 09:32:20.971370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:20.971810 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:20.97180279 +0000 UTC m=+522.673186781 E0417 09:32:21.130106 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-tkw9g\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0417 09:32:21.327036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:21.394960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mcvzx" condition "Approved" to 2026-04-17 09:32:21.394944998 +0000 UTC m=+523.096328979 I0417 09:32:21.493427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mcvzx" condition "Ready" to 2026-04-17 09:32:21.493411596 +0000 UTC m=+523.194795607 I0417 09:32:22.052928 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:22.052911823 +0000 UTC m=+523.754295834 I0417 09:32:22.087900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:22.088198 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:22.088191324 +0000 UTC m=+523.789575315 I0417 09:32:22.325330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:22.376385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:33.031742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:32:33.031787 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" condition "Issuing" to 2026-04-17 09:32:33.031776759 +0000 UTC m=+534.733160780 I0417 09:32:33.031739 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" condition "Ready" to 2026-04-17 09:32:33.031725358 +0000 UTC m=+534.733109359 I0417 09:32:33.046358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f56l5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:33.046557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" condition "Ready" to 2026-04-17 09:32:33.046523816 +0000 UTC m=+534.747907797 I0417 09:32:33.305707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f56l5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:33.342753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f56l5-zb9fs" condition "Approved" to 2026-04-17 09:32:33.342737177 +0000 UTC m=+535.044121168 I0417 09:32:33.364458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f56l5-zb9fs" condition "Ready" to 2026-04-17 09:32:33.364444808 +0000 UTC m=+535.065828809 I0417 09:32:33.393376 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:33.393356659 +0000 UTC m=+535.094740670 I0417 09:32:33.413061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f56l5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:33.413410 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:33.41340119 +0000 UTC m=+535.114785171 I0417 09:32:33.725918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f56l5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:33.726409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f56l5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f56l5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:48.888757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:32:48.888802 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 09:32:48.888791086 +0000 UTC m=+550.590175097 I0417 09:32:48.889105 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 09:32:48.889076003 +0000 UTC m=+550.590460014 I0417 09:32:48.916686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:48.916813 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 09:32:48.916802426 +0000 UTC m=+550.618186407 I0417 09:32:49.110326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:49.142553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6grlg" condition "Approved" to 2026-04-17 09:32:49.142536848 +0000 UTC m=+550.843920839 I0417 09:32:49.160289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6grlg" condition "Ready" to 2026-04-17 09:32:49.160272506 +0000 UTC m=+550.861656497 I0417 09:32:49.194201 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:49.194177454 +0000 UTC m=+550.895561465 I0417 09:32:49.216627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:32:49.217014 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:32:49.217007431 +0000 UTC m=+550.918391422 I0417 09:32:49.234047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:33:57.077907 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 09:33:57.077889259 +0000 UTC m=+618.779273260 I0417 09:33:57.077982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:33:57.078003 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 09:33:57.077999222 +0000 UTC m=+618.779383213 I0417 09:33:57.094518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:33:57.094590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:33:57.094606 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 09:33:57.094599384 +0000 UTC m=+618.795983365 I0417 09:33:57.368205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:33:57.380120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fvmr7" condition "Approved" to 2026-04-17 09:33:57.379933357 +0000 UTC m=+619.081317348 I0417 09:33:57.408618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fvmr7" condition "Ready" to 2026-04-17 09:33:57.408606283 +0000 UTC m=+619.109990264 I0417 09:33:57.437268 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:33:57.437230209 +0000 UTC m=+619.138614210 I0417 09:33:57.455796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:33:57.456274 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:33:57.456263898 +0000 UTC m=+619.157647889 I0417 09:33:57.477664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:35:10.351138 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 09:35:10.351085882 +0000 UTC m=+692.052469873 I0417 09:35:10.351186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:35:10.351224 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-17 09:35:10.351213355 +0000 UTC m=+692.052597376 I0417 09:35:10.370716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:35:10.370911 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-17 09:35:10.370902531 +0000 UTC m=+692.072286532 I0417 09:35:10.637871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:35:10.674970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mtt42" condition "Approved" to 2026-04-17 09:35:10.674961944 +0000 UTC m=+692.376345925 I0417 09:35:10.690384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mtt42" condition "Ready" to 2026-04-17 09:35:10.690372328 +0000 UTC m=+692.391756319 I0417 09:35:10.730024 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:35:10.730012716 +0000 UTC m=+692.431396707 I0417 09:35:10.751832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:36:37.646231 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-17 09:36:37.646216015 +0000 UTC m=+779.347600006 I0417 09:36:37.646731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:36:37.646751 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-17 09:36:37.646746418 +0000 UTC m=+779.348130409 I0417 09:36:37.671216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:36:37.671420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:36:37.671473 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-17 09:36:37.671443422 +0000 UTC m=+779.372827433 I0417 09:36:37.938200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-77gvr" condition "Approved" to 2026-04-17 09:36:37.938191155 +0000 UTC m=+779.639575136 I0417 09:36:37.954758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-77gvr" condition "Ready" to 2026-04-17 09:36:37.954748316 +0000 UTC m=+779.656132317 I0417 09:36:37.988320 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:36:37.98830557 +0000 UTC m=+779.689689561 I0417 09:36:38.007365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:36:38.007612 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:36:38.007607647 +0000 UTC m=+779.708991618 I0417 09:36:38.028865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:36:38.029890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:37:29.013983 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 09:37:29.013937713 +0000 UTC m=+830.715321704 I0417 09:37:29.014019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:37:29.014042 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 09:37:29.014035935 +0000 UTC m=+830.715419926 I0417 09:37:29.029007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:37:29.029163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:37:29.029186 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 09:37:29.029178444 +0000 UTC m=+830.730562435 I0417 09:37:29.353881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zxmvn" condition "Approved" to 2026-04-17 09:37:29.353870482 +0000 UTC m=+831.055254473 I0417 09:37:29.378610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zxmvn" condition "Ready" to 2026-04-17 09:37:29.378595617 +0000 UTC m=+831.079979608 I0417 09:37:29.421279 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:37:29.421256247 +0000 UTC m=+831.122640238 I0417 09:37:29.448347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:37:29.448750 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:37:29.448743208 +0000 UTC m=+831.150127189 I0417 09:37:29.450177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:37:29.481398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:37:29.481774 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:37:29.48176552 +0000 UTC m=+831.183149511 I0417 09:37:47.374528 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:37:47.374720 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 09:37:47.374712469 +0000 UTC m=+849.076096460 I0417 09:37:47.375538 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 09:37:47.375531008 +0000 UTC m=+849.076914999 I0417 09:37:47.391260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:37:47.391436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:37:47.391502 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 09:37:47.391496916 +0000 UTC m=+849.092880887 I0417 09:37:47.761230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:37:47.771336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xjchg" condition "Approved" to 2026-04-17 09:37:47.77132686 +0000 UTC m=+849.472710851 I0417 09:37:47.795881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xjchg" condition "Ready" to 2026-04-17 09:37:47.795867451 +0000 UTC m=+849.497251442 I0417 09:37:47.841849 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:37:47.841819109 +0000 UTC m=+849.543203120 I0417 09:37:47.864172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:23.447325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:39:23.447377 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-17 09:39:23.447369852 +0000 UTC m=+945.148753843 I0417 09:39:23.447411 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-17 09:39:23.447391412 +0000 UTC m=+945.148775423 I0417 09:39:23.469523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:23.469766 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-17 09:39:23.469753922 +0000 UTC m=+945.171137943 I0417 09:39:23.977227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:24.009154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-974kl" condition "Approved" to 2026-04-17 09:39:24.009141976 +0000 UTC m=+945.710525957 I0417 09:39:24.029760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-974kl" condition "Ready" to 2026-04-17 09:39:24.029749394 +0000 UTC m=+945.731133365 I0417 09:39:24.059090 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:39:24.059075479 +0000 UTC m=+945.760459490 I0417 09:39:24.092064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:24.092380 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:39:24.092371977 +0000 UTC m=+945.793755968 I0417 09:39:24.094898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:24.108545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:24.793011 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-17 09:39:24.79299167 +0000 UTC m=+946.494375691 I0417 09:39:24.793053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:39:24.793083 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-17 09:39:24.793076072 +0000 UTC m=+946.494460063 I0417 09:39:24.810369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:24.810446 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-17 09:39:24.810438393 +0000 UTC m=+946.511822384 I0417 09:39:25.000697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:25.036343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-6r6th" condition "Approved" to 2026-04-17 09:39:25.036327721 +0000 UTC m=+946.737711712 I0417 09:39:25.060311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-6r6th" condition "Ready" to 2026-04-17 09:39:25.060301809 +0000 UTC m=+946.761685780 I0417 09:39:25.090617 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:39:25.090603337 +0000 UTC m=+946.791987328 I0417 09:39:25.111345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:39:25.111819 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:39:25.111810989 +0000 UTC m=+946.813194980 I0417 09:39:25.129277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:40:14.063810 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-17 09:40:14.063754309 +0000 UTC m=+995.765138320 I0417 09:40:14.064393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:40:14.064481 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-17 09:40:14.064467446 +0000 UTC m=+995.765851467 I0417 09:40:14.088678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:40:14.088826 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-17 09:40:14.088816313 +0000 UTC m=+995.790200324 I0417 09:40:14.507740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:40:14.542795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rlc6p" condition "Approved" to 2026-04-17 09:40:14.542779064 +0000 UTC m=+996.244163085 I0417 09:40:14.568736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rlc6p" condition "Ready" to 2026-04-17 09:40:14.568721828 +0000 UTC m=+996.270105839 I0417 09:40:14.601213 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:40:14.601195387 +0000 UTC m=+996.302579398 I0417 09:40:14.619498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:40:14.619851 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:40:14.619842839 +0000 UTC m=+996.321226820 I0417 09:40:14.653825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:41:05.272697 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-17 09:41:05.272684124 +0000 UTC m=+1046.974068105 I0417 09:41:05.273087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:41:05.273103 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-17 09:41:05.273100454 +0000 UTC m=+1046.974484435 I0417 09:41:05.312906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:41:05.313188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:41:05.313215 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-17 09:41:05.313208384 +0000 UTC m=+1047.014592355 I0417 09:41:07.411127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-gbwt8" condition "Approved" to 2026-04-17 09:41:07.411117228 +0000 UTC m=+1049.112501199 I0417 09:41:07.435433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-gbwt8" condition "Ready" to 2026-04-17 09:41:07.435421284 +0000 UTC m=+1049.136805265 I0417 09:41:07.521853 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:41:07.521840651 +0000 UTC m=+1049.223224632 I0417 09:41:07.544681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:41:07.546848 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:41:07.546837863 +0000 UTC m=+1049.248221884 I0417 09:41:07.568171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:41:07.569611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:41:20.048443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:41:20.048486 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 09:41:20.048476239 +0000 UTC m=+1061.749860260 I0417 09:41:20.049219 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 09:41:20.049210647 +0000 UTC m=+1061.750594668 I0417 09:41:20.115350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:41:20.115425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:41:20.115438 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 09:41:20.115433765 +0000 UTC m=+1061.816817746 I0417 09:41:20.603563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2b2c4" condition "Approved" to 2026-04-17 09:41:20.603542957 +0000 UTC m=+1062.304926968 I0417 09:41:20.774407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2b2c4" condition "Ready" to 2026-04-17 09:41:20.774393914 +0000 UTC m=+1062.475777905 I0417 09:41:21.052390 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:41:21.052371609 +0000 UTC m=+1062.753755600 I0417 09:41:21.095849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:41:21.096723 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:41:21.096706309 +0000 UTC m=+1062.798090330 I0417 09:41:21.107900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:41:21.124520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:43:56.708260 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-17 09:43:56.708199511 +0000 UTC m=+1218.409583502 I0417 09:43:56.708659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:43:56.708702 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-17 09:43:56.708691813 +0000 UTC m=+1218.410075834 I0417 09:43:56.722909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:43:56.723008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:43:56.723029 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-17 09:43:56.723023982 +0000 UTC m=+1218.424407963 I0417 09:43:56.893092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:43:56.903504 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-pz5qg" condition "Approved" to 2026-04-17 09:43:56.903489097 +0000 UTC m=+1218.604873078 I0417 09:43:56.917527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-pz5qg" condition "Ready" to 2026-04-17 09:43:56.917515309 +0000 UTC m=+1218.618899300 I0417 09:43:56.949542 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:43:56.949527358 +0000 UTC m=+1218.650911349 I0417 09:43:56.969355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:43:56.969644 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:43:56.969638484 +0000 UTC m=+1218.671022465 I0417 09:43:56.994545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:43:56.995002 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:43:56.994991515 +0000 UTC m=+1218.696375506 I0417 09:43:58.093834 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-17 09:43:58.093817644 +0000 UTC m=+1219.795201645 I0417 09:43:58.093931 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:43:58.094032 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-17 09:43:58.094019818 +0000 UTC m=+1219.795403839 I0417 09:43:58.117374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:43:58.117475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:43:58.117520 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-17 09:43:58.117512325 +0000 UTC m=+1219.818896316 I0417 09:43:58.512238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-sr7bm" condition "Approved" to 2026-04-17 09:43:58.512226415 +0000 UTC m=+1220.213610406 I0417 09:43:58.530808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-sr7bm" condition "Ready" to 2026-04-17 09:43:58.530794425 +0000 UTC m=+1220.232178416 I0417 09:43:58.562638 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:43:58.562621049 +0000 UTC m=+1220.264005030 I0417 09:43:58.586982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:47:17.157348 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-17 09:47:17.157319545 +0000 UTC m=+1418.858703536 I0417 09:47:17.157760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:47:17.157804 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-17 09:47:17.157792876 +0000 UTC m=+1418.859176887 I0417 09:47:17.178298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:47:17.178442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:47:17.178472 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-17 09:47:17.178463425 +0000 UTC m=+1418.879847446 I0417 09:47:17.421987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-sf4cw" condition "Approved" to 2026-04-17 09:47:17.42196883 +0000 UTC m=+1419.123352841 I0417 09:47:17.446911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-sf4cw" condition "Ready" to 2026-04-17 09:47:17.44690017 +0000 UTC m=+1419.148284161 I0417 09:47:17.473863 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:47:17.473848067 +0000 UTC m=+1419.175232088 I0417 09:47:17.494375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:16.663875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w8zqf-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:48:16.663919 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w8zqf-vnc" condition "Issuing" to 2026-04-17 09:48:16.663909434 +0000 UTC m=+1478.365293455 I0417 09:48:16.664670 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w8zqf-vnc" condition "Ready" to 2026-04-17 09:48:16.664660902 +0000 UTC m=+1478.366044913 I0417 09:48:16.665079 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w8zqf-api" condition "Ready" to 2026-04-17 09:48:16.665071851 +0000 UTC m=+1478.366455862 I0417 09:48:16.665352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w8zqf-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:48:16.665375 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w8zqf-api" condition "Issuing" to 2026-04-17 09:48:16.665369889 +0000 UTC m=+1478.366753900 I0417 09:48:16.699680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-w8zqf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:16.699781 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w8zqf-api" condition "Ready" to 2026-04-17 09:48:16.699775003 +0000 UTC m=+1478.401158984 I0417 09:48:16.700074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w8zqf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:16.700117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w8zqf-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:48:16.700132 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w8zqf-vnc" condition "Issuing" to 2026-04-17 09:48:16.700129482 +0000 UTC m=+1478.401513453 I0417 09:48:16.826418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w8zqf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:16.863289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w8zqf-api-lr9dv" condition "Approved" to 2026-04-17 09:48:16.863278524 +0000 UTC m=+1478.564662505 I0417 09:48:16.883839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w8zqf-api-lr9dv" condition "Ready" to 2026-04-17 09:48:16.88383039 +0000 UTC m=+1478.585214371 I0417 09:48:16.909381 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w8zqf-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:48:16.909366155 +0000 UTC m=+1478.610750156 I0417 09:48:16.930437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-w8zqf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:16.930916 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w8zqf-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:48:16.930907545 +0000 UTC m=+1478.632291566 I0417 09:48:16.953240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-w8zqf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:16.953258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w8zqf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-api\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:17.018730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w8zqf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:17.026827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w8zqf-vnc-ftmn6" condition "Approved" to 2026-04-17 09:48:17.026814365 +0000 UTC m=+1478.728198346 I0417 09:48:17.049102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w8zqf-vnc-ftmn6" condition "Ready" to 2026-04-17 09:48:17.049083632 +0000 UTC m=+1478.750467623 I0417 09:48:17.076002 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w8zqf-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:48:17.07599345 +0000 UTC m=+1478.777377431 I0417 09:48:17.099125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-w8zqf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:48:17.161287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w8zqf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w8zqf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:35.109288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:50:35.109342 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-17 09:50:35.109330622 +0000 UTC m=+1616.810714633 I0417 09:50:35.109481 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-17 09:50:35.109440565 +0000 UTC m=+1616.810824556 E0417 09:50:35.123578 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:50:35.123652 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-17 09:50:35.123644361 +0000 UTC m=+1616.825028352 I0417 09:50:35.123673 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:50:35.127271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:35.127361 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-17 09:50:35.127353289 +0000 UTC m=+1616.828737280 E0417 09:50:35.134009 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0417 09:50:35.134089 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:50:35.134112 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 09:50:35.134144 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0417 09:50:35.142842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:35.169721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-q8stt" condition "Approved" to 2026-04-17 09:50:35.169704101 +0000 UTC m=+1616.871088082 I0417 09:50:35.189892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-q8stt" condition "Ready" to 2026-04-17 09:50:35.189879119 +0000 UTC m=+1616.891263120 I0417 09:50:35.215037 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:35.215023414 +0000 UTC m=+1616.916407405 I0417 09:50:35.232544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:35.233165 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:35.233157813 +0000 UTC m=+1616.934541814 I0417 09:50:35.252407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:35.252724 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:35.252716306 +0000 UTC m=+1616.954100297 I0417 09:50:35.840237 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-17 09:50:35.840217443 +0000 UTC m=+1617.541601464 I0417 09:50:35.840517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:50:35.840683 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-17 09:50:35.840663154 +0000 UTC m=+1617.542047175 E0417 09:50:35.854979 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:50:35.855015 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-17 09:50:35.855007163 +0000 UTC m=+1617.556391154 I0417 09:50:35.855053 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:50:35.856691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:35.856894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:50:35.856969 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-17 09:50:35.856918949 +0000 UTC m=+1617.558302940 E0417 09:50:35.865794 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0417 09:50:35.865995 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 09:50:35.866070 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 09:50:35.866454 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0417 09:50:35.896586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:35.901781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-gmcwb" condition "Approved" to 2026-04-17 09:50:35.90176188 +0000 UTC m=+1617.603145871 I0417 09:50:35.917051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-gmcwb" condition "Ready" to 2026-04-17 09:50:35.917042792 +0000 UTC m=+1617.618426763 I0417 09:50:35.949302 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:35.949286485 +0000 UTC m=+1617.650670476 I0417 09:50:35.988968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:35.989218 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:35.98921071 +0000 UTC m=+1617.690594691 I0417 09:50:35.996949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:36.005580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:36.005865 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:36.005856384 +0000 UTC m=+1617.707240375 I0417 09:50:36.649256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:50:36.649301 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-17 09:50:36.649291586 +0000 UTC m=+1618.350675607 I0417 09:50:36.649418 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-17 09:50:36.649403618 +0000 UTC m=+1618.350787599 I0417 09:50:36.664227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:36.664349 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-17 09:50:36.664340382 +0000 UTC m=+1618.365724393 I0417 09:50:36.683657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:36.710285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-qrkjh" condition "Approved" to 2026-04-17 09:50:36.710272039 +0000 UTC m=+1618.411656020 I0417 09:50:36.728622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-qrkjh" condition "Ready" to 2026-04-17 09:50:36.728604533 +0000 UTC m=+1618.429988514 I0417 09:50:40.135036 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:40.135028707 +0000 UTC m=+1621.836412688 I0417 09:50:40.175826 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-qrkjh" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:40.175815023 +0000 UTC m=+1621.877199014 I0417 09:50:40.246561 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:40.246551227 +0000 UTC m=+1621.947935208 I0417 09:50:40.277672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:40.411392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:50:40.866982 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:50:40.866965414 +0000 UTC m=+1622.568349425 I0417 09:52:23.887626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:52:23.887664 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-17 09:52:23.887653707 +0000 UTC m=+1725.589037698 I0417 09:52:23.887682 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-17 09:52:23.887671427 +0000 UTC m=+1725.589055448 I0417 09:52:23.905617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:52:23.905818 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-17 09:52:23.905808867 +0000 UTC m=+1725.607192858 I0417 09:52:24.054616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:52:24.080934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-v9lvq" condition "Approved" to 2026-04-17 09:52:24.080919359 +0000 UTC m=+1725.782303340 I0417 09:52:24.106002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-v9lvq" condition "Ready" to 2026-04-17 09:52:24.105986412 +0000 UTC m=+1725.807370433 I0417 09:52:24.136657 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:52:24.136642327 +0000 UTC m=+1725.838026348 I0417 09:52:24.153274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:52:24.153610 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:52:24.153603649 +0000 UTC m=+1725.854987640 I0417 09:52:24.172197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:53:17.554409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:53:17.554469 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-17 09:53:17.554463199 +0000 UTC m=+1779.255847190 I0417 09:53:17.554896 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-17 09:53:17.554889629 +0000 UTC m=+1779.256273630 I0417 09:53:17.571268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:53:17.571354 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-17 09:53:17.571346499 +0000 UTC m=+1779.272730480 I0417 09:53:17.708682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:53:17.737022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-5dc8z" condition "Approved" to 2026-04-17 09:53:17.737008357 +0000 UTC m=+1779.438392348 I0417 09:53:17.768087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-5dc8z" condition "Ready" to 2026-04-17 09:53:17.768075572 +0000 UTC m=+1779.469459553 I0417 09:53:17.799097 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:53:17.799081416 +0000 UTC m=+1779.500465407 I0417 09:53:17.822304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:53:17.822639 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:53:17.822631513 +0000 UTC m=+1779.524015504 I0417 09:53:17.847724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:53:17.848123 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:53:17.848115006 +0000 UTC m=+1779.549498997 I0417 09:54:12.394269 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-17 09:54:12.394240015 +0000 UTC m=+1834.095624026 I0417 09:54:12.418678 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-17 09:54:12.418629162 +0000 UTC m=+1834.120013143 I0417 09:54:12.418687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:54:12.418941 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-17 09:54:12.418932429 +0000 UTC m=+1834.120316420 I0417 09:54:12.443384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:12.443563 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-17 09:54:12.443546772 +0000 UTC m=+1834.144930823 E0417 09:54:12.452319 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0417 09:54:12.503155 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-17 09:54:12.503140401 +0000 UTC m=+1834.204524382 I0417 09:54:12.525058 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-17 09:54:12.525046649 +0000 UTC m=+1834.226430640 I0417 09:54:12.525212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:54:12.525270 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-17 09:54:12.525257644 +0000 UTC m=+1834.226641665 I0417 09:54:12.544229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:12.544329 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:54:12.544352 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-17 09:54:12.544344925 +0000 UTC m=+1834.245728946 E0417 09:54:12.551536 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0417 09:54:12.837787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-kgnmn" condition "Approved" to 2026-04-17 09:54:12.837769443 +0000 UTC m=+1834.539153454 I0417 09:54:12.859079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-kgnmn" condition "Ready" to 2026-04-17 09:54:12.859067767 +0000 UTC m=+1834.560451748 I0417 09:54:12.894982 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:54:12.894967446 +0000 UTC m=+1834.596351457 I0417 09:54:12.915783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:12.916133 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:54:12.916124626 +0000 UTC m=+1834.617508617 I0417 09:54:12.941148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:12.941533 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:54:12.941523347 +0000 UTC m=+1834.642907338 I0417 09:54:12.941872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:13.308780 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-17 09:54:13.308769131 +0000 UTC m=+1835.010153112 I0417 09:54:13.325240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:54:13.325331 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-17 09:54:13.325316273 +0000 UTC m=+1835.026700304 I0417 09:54:13.325618 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-17 09:54:13.32560587 +0000 UTC m=+1835.026989851 I0417 09:54:13.341676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:13.341841 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-17 09:54:13.341787462 +0000 UTC m=+1835.043171453 I0417 09:54:13.564010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:13.597500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-7fq6w" condition "Approved" to 2026-04-17 09:54:13.597486029 +0000 UTC m=+1835.298870010 I0417 09:54:13.617536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-7fq6w" condition "Ready" to 2026-04-17 09:54:13.617524173 +0000 UTC m=+1835.318908174 I0417 09:54:13.667766 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:54:13.667754501 +0000 UTC m=+1835.369138482 I0417 09:54:13.693512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:13.726573 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-17 09:54:13.726556751 +0000 UTC m=+1835.427940772 I0417 09:54:13.747604 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-17 09:54:13.747588159 +0000 UTC m=+1835.448972130 I0417 09:54:13.747757 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:54:13.747802 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-17 09:54:13.747793984 +0000 UTC m=+1835.449177975 I0417 09:54:13.761514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:13.761585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:54:13.761612 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-17 09:54:13.76160428 +0000 UTC m=+1835.462988271 I0417 09:54:14.087803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-75l59" condition "Approved" to 2026-04-17 09:54:14.087787724 +0000 UTC m=+1835.789171745 I0417 09:54:14.118872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-75l59" condition "Ready" to 2026-04-17 09:54:14.118864459 +0000 UTC m=+1835.820248440 I0417 09:54:14.157103 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:54:14.157093783 +0000 UTC m=+1835.858477774 I0417 09:54:14.192123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:14.192438 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:54:14.192431768 +0000 UTC m=+1835.893815749 I0417 09:54:14.222882 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-17 09:54:14.222862928 +0000 UTC m=+1835.924246909 I0417 09:54:14.246809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:54:14.246903 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-17 09:54:14.246886826 +0000 UTC m=+1835.948270827 I0417 09:54:14.247005 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-17 09:54:14.246995149 +0000 UTC m=+1835.948379180 I0417 09:54:14.305349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:14.305794 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:54:14.305786359 +0000 UTC m=+1836.007170340 I0417 09:54:14.457201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:14.457259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:54:14.457274 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-17 09:54:14.457269461 +0000 UTC m=+1836.158653432 I0417 09:54:14.808282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-q658t" condition "Approved" to 2026-04-17 09:54:14.808265112 +0000 UTC m=+1836.509649103 I0417 09:54:15.089811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-q658t" condition "Ready" to 2026-04-17 09:54:15.08979494 +0000 UTC m=+1836.791178931 I0417 09:54:15.356584 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:54:15.356570078 +0000 UTC m=+1837.057954049 I0417 09:54:15.505395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:54:15.824685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:57:55.476173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:57:55.476207 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-17 09:57:55.476199575 +0000 UTC m=+2057.177583566 I0417 09:57:55.476659 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-17 09:57:55.476654336 +0000 UTC m=+2057.178038327 I0417 09:57:55.490415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:57:55.490540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:57:55.490569 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-17 09:57:55.490562905 +0000 UTC m=+2057.191946906 I0417 09:57:55.718637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-d8mzp" condition "Approved" to 2026-04-17 09:57:55.718627362 +0000 UTC m=+2057.420011343 I0417 09:57:55.734381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-d8mzp" condition "Ready" to 2026-04-17 09:57:55.734375964 +0000 UTC m=+2057.435759935 I0417 09:57:55.764544 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:57:55.764537806 +0000 UTC m=+2057.465921787 I0417 09:57:55.786722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:57:58.091433 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-17 09:57:58.091422231 +0000 UTC m=+2059.792806222 I0417 09:57:58.091693 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:57:58.091712 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-17 09:57:58.091708797 +0000 UTC m=+2059.793092788 I0417 09:57:58.107200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:57:58.107284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 09:57:58.107305 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-17 09:57:58.107298305 +0000 UTC m=+2059.808682316 I0417 09:57:58.553769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-6v6rd" condition "Approved" to 2026-04-17 09:57:58.553755911 +0000 UTC m=+2060.255139882 I0417 09:57:58.570599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-6v6rd" condition "Ready" to 2026-04-17 09:57:58.570591318 +0000 UTC m=+2060.271975299 I0417 09:57:58.598079 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:57:58.598062667 +0000 UTC m=+2060.299446668 I0417 09:57:58.631478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 09:57:58.631761 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 09:57:58.631755583 +0000 UTC m=+2060.333139564 I0417 09:57:58.656574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again"