I0304 01:23:23.648329 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0304 01:23:23.648495 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0304 01:23:23.648611 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0304 01:23:23.656674 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0304 01:23:23.657404 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0304 01:23:23.657831 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0304 01:23:23.657869 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0304 01:23:23.661298 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0304 01:23:23.674865 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0304 01:23:23.679085 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0304 01:23:23.679170 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0304 01:23:23.679154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0304 01:23:23.679218 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0304 01:23:23.683181 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0304 01:23:23.685829 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0304 01:23:23.689087 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0304 01:23:23.693785 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0304 01:23:23.697390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0304 01:23:23.701011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0304 01:23:23.702556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0304 01:23:23.707022 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0304 01:23:23.707060 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0304 01:23:23.707173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0304 01:23:23.710964 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0304 01:23:23.713722 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0304 01:23:23.720725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0304 01:23:23.724536 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0304 01:23:23.724617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0304 01:23:23.726983 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0304 01:23:23.729249 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0304 01:23:23.731555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0304 01:23:23.733718 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0304 01:23:23.736048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0304 01:23:23.737598 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.738523 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.738857 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.739246 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.739258 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.739695 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.739709 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.739987 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.740077 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:23.773323 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0304 01:23:36.350870 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-04 01:23:36.350858164 +0000 UTC m=+12.732611586 I0304 01:23:37.000491 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-04 01:23:37.000471199 +0000 UTC m=+13.382224681 I0304 01:23:37.000636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:23:37.000746 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-04 01:23:37.000735655 +0000 UTC m=+13.382489097 I0304 01:23:37.020151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:23:37.020249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:23:37.020273 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-04 01:23:37.020264289 +0000 UTC m=+13.402017731 E0304 01:23:37.030309 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0304 01:23:37.030402 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-04 01:23:37.030390258 +0000 UTC m=+13.412143700 E0304 01:23:37.030438 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0304 01:23:37.043290 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0304 01:23:37.043478 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0304 01:23:37.043533 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0304 01:23:37.043634 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0304 01:23:37.064178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j8brn" condition "Approved" to 2026-03-04 01:23:37.064155437 +0000 UTC m=+13.445908889 I0304 01:23:37.076867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-j8brn" condition "Ready" to 2026-03-04 01:23:37.07683795 +0000 UTC m=+13.458591392 I0304 01:23:37.103335 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:23:37.103318147 +0000 UTC m=+13.485071609 I0304 01:23:37.119954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:23:37.120508 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:23:37.120497223 +0000 UTC m=+13.502250675 I0304 01:23:37.134843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:23:42.044938 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:23:42.044918944 +0000 UTC m=+18.426672396 I0304 01:23:59.471753 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-04 01:23:59.471741617 +0000 UTC m=+35.853495029 I0304 01:23:59.472040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:23:59.472094 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-04 01:23:59.472083344 +0000 UTC m=+35.853836796 I0304 01:23:59.490053 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-04 01:23:59.490041366 +0000 UTC m=+35.871794788 I0304 01:23:59.499957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:23:59.500076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:23:59.500110 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-04 01:23:59.500101524 +0000 UTC m=+35.881854976 I0304 01:23:59.711631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:23:59.723756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2rs9h" condition "Approved" to 2026-03-04 01:23:59.723744313 +0000 UTC m=+36.105497765 I0304 01:23:59.756202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2rs9h" condition "Ready" to 2026-03-04 01:23:59.756190795 +0000 UTC m=+36.137944227 I0304 01:23:59.782920 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:23:59.782908577 +0000 UTC m=+36.164661999 I0304 01:23:59.806509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:23:59.807013 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:23:59.807003636 +0000 UTC m=+36.188757068 I0304 01:23:59.812602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:23:59.826633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:23:59.827053 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:23:59.827043111 +0000 UTC m=+36.208796553 I0304 01:28:17.232638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-52.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:28:17.232701 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-52.nip.io-tls" condition "Issuing" to 2026-03-04 01:28:17.232690523 +0000 UTC m=+293.614443975 I0304 01:28:17.232747 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-52.nip.io-tls" condition "Ready" to 2026-03-04 01:28:17.232689103 +0000 UTC m=+293.614442545 I0304 01:28:17.251058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:28:17.251109 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-52.nip.io-tls" condition "Ready" to 2026-03-04 01:28:17.25110375 +0000 UTC m=+293.632857172 I0304 01:28:17.349737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:28:17.378792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-52.nip.io-tls-tzrrs" condition "Approved" to 2026-03-04 01:28:17.378780596 +0000 UTC m=+293.760534018 I0304 01:28:17.413629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-52.nip.io-tls-tzrrs" condition "Ready" to 2026-03-04 01:28:17.413615128 +0000 UTC m=+293.795368580 I0304 01:28:17.446102 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-52.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:28:17.446092821 +0000 UTC m=+293.827846243 I0304 01:28:17.467408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:28:17.506793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-52.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-52.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:29:22.571897 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-04 01:29:22.571877446 +0000 UTC m=+358.953630868 I0304 01:29:22.572059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:29:22.572877 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-04 01:29:22.572865297 +0000 UTC m=+358.954618759 I0304 01:29:22.586805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:29:22.586897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:29:22.586924 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-04 01:29:22.586916483 +0000 UTC m=+358.968669935 E0304 01:29:22.588070 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0304 01:29:22.588128 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-04 01:29:22.588116479 +0000 UTC m=+358.969869901 E0304 01:29:22.588193 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0304 01:29:22.604262 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0304 01:29:22.604827 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0304 01:29:22.604866 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0304 01:29:22.604917 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0304 01:29:22.628996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bn9v8" condition "Approved" to 2026-03-04 01:29:22.628974791 +0000 UTC m=+359.010728213 I0304 01:29:22.629742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:29:22.642277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bn9v8" condition "Ready" to 2026-03-04 01:29:22.642266541 +0000 UTC m=+359.024019953 I0304 01:29:22.666882 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:29:22.666859011 +0000 UTC m=+359.048612463 I0304 01:29:22.688856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:29:22.689185 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:29:22.689174121 +0000 UTC m=+359.070927543 I0304 01:29:22.694336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:29:22.705372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:29:22.705645 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:29:22.705636229 +0000 UTC m=+359.087389651 I0304 01:29:22.707340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:29:27.605774 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:29:27.605755461 +0000 UTC m=+363.987508903 I0304 01:30:06.461861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:30:06.461931 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-04 01:30:06.461918357 +0000 UTC m=+402.843671799 I0304 01:30:06.462064 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-04 01:30:06.4620258 +0000 UTC m=+402.843779212 I0304 01:30:06.469652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:30:06.469683 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-04 01:30:06.469678042 +0000 UTC m=+402.851431454 I0304 01:30:06.469991 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-04 01:30:06.469986508 +0000 UTC m=+402.851739910 I0304 01:30:06.470277 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-04 01:30:06.470273404 +0000 UTC m=+402.852026826 I0304 01:30:06.470496 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:30:06.470511 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-04 01:30:06.470508399 +0000 UTC m=+402.852261801 I0304 01:30:06.487706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:06.487776 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-04 01:30:06.487767904 +0000 UTC m=+402.869521306 I0304 01:30:06.500255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:06.500330 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-04 01:30:06.50032267 +0000 UTC m=+402.882076082 I0304 01:30:06.507962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:06.508037 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-04 01:30:06.508031713 +0000 UTC m=+402.889785125 I0304 01:30:06.592650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:06.623501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:06.629019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f5w6n" condition "Approved" to 2026-03-04 01:30:06.629009223 +0000 UTC m=+403.010762645 I0304 01:30:06.640481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:06.652535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f5w6n" condition "Ready" to 2026-03-04 01:30:06.65251628 +0000 UTC m=+403.034269702 I0304 01:30:06.662216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m2n9b" condition "Approved" to 2026-03-04 01:30:06.662202905 +0000 UTC m=+403.043956327 I0304 01:30:06.675360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pdkgx" condition "Approved" to 2026-03-04 01:30:06.675339112 +0000 UTC m=+403.057092534 I0304 01:30:06.678222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m2n9b" condition "Ready" to 2026-03-04 01:30:06.678213693 +0000 UTC m=+403.059967115 I0304 01:30:06.683102 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:06.683086116 +0000 UTC m=+403.064839538 I0304 01:30:06.860335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pdkgx" condition "Ready" to 2026-03-04 01:30:06.860317116 +0000 UTC m=+403.242070538 I0304 01:30:07.051970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:07.052847 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:07.052833899 +0000 UTC m=+403.434587341 I0304 01:30:07.252355 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:07.252334499 +0000 UTC m=+403.634087941 I0304 01:30:07.503109 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:07.503086645 +0000 UTC m=+403.884840097 I0304 01:30:07.605187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:07.609012 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:07.608999225 +0000 UTC m=+403.990752677 I0304 01:30:07.651327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:07.752318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:07.752696 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:07.752688835 +0000 UTC m=+404.134442247 I0304 01:30:08.206002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:08.252896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:08.304672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:15.414059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxds5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:30:15.414076 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxds5-tls" condition "Ready" to 2026-03-04 01:30:15.41405948 +0000 UTC m=+411.795812882 I0304 01:30:15.414104 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxds5-tls" condition "Issuing" to 2026-03-04 01:30:15.41409314 +0000 UTC m=+411.795846552 I0304 01:30:15.428342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxds5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mxds5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:15.429189 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxds5-tls" condition "Ready" to 2026-03-04 01:30:15.429164399 +0000 UTC m=+411.810917841 I0304 01:30:15.693172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxds5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mxds5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:15.723188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mxds5-26vh5" condition "Approved" to 2026-03-04 01:30:15.723162609 +0000 UTC m=+412.104916061 I0304 01:30:15.742044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mxds5-26vh5" condition "Ready" to 2026-03-04 01:30:15.742032838 +0000 UTC m=+412.123786250 I0304 01:30:15.774570 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mxds5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:15.774548147 +0000 UTC m=+412.156301599 I0304 01:30:15.793214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mxds5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mxds5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:49.259298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:30:49.259352 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-04 01:30:49.25933014 +0000 UTC m=+445.641083562 I0304 01:30:49.259378 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-04 01:30:49.25935314 +0000 UTC m=+445.641106582 I0304 01:30:49.273845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:49.273925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:30:49.273940 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-04 01:30:49.273935058 +0000 UTC m=+445.655688480 I0304 01:30:49.640135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:49.649583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-x8dtz" condition "Approved" to 2026-03-04 01:30:49.64956331 +0000 UTC m=+446.031316732 I0304 01:30:49.667741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-x8dtz" condition "Ready" to 2026-03-04 01:30:49.667728073 +0000 UTC m=+446.049481495 I0304 01:30:49.694281 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:49.694265065 +0000 UTC m=+446.076018497 I0304 01:30:49.714391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:49.714972 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:49.714960052 +0000 UTC m=+446.096713504 I0304 01:30:49.733661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:49.734352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:30:49.734725 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:30:49.73471461 +0000 UTC m=+446.116468022 I0304 01:33:57.664858 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-04 01:33:57.6648421 +0000 UTC m=+634.046595542 I0304 01:33:57.664921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:33:57.665216 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-04 01:33:57.665129896 +0000 UTC m=+634.046883378 I0304 01:33:57.684509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:33:57.684621 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-04 01:33:57.68461124 +0000 UTC m=+634.066364672 I0304 01:33:57.823224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:33:57.855248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kjkcq" condition "Approved" to 2026-03-04 01:33:57.855232602 +0000 UTC m=+634.236986014 I0304 01:33:57.873578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kjkcq" condition "Ready" to 2026-03-04 01:33:57.873566662 +0000 UTC m=+634.255320084 I0304 01:33:57.901963 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:33:57.901949854 +0000 UTC m=+634.283703276 I0304 01:33:57.924583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:33:57.924914 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:33:57.924907821 +0000 UTC m=+634.306661233 I0304 01:33:57.944518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:36:18.798923 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-04 01:36:18.798899723 +0000 UTC m=+775.180653165 I0304 01:36:18.798985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:36:18.799058 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-04 01:36:18.799052266 +0000 UTC m=+775.180805718 I0304 01:36:18.817489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:36:18.817562 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-04 01:36:18.817555978 +0000 UTC m=+775.199309400 I0304 01:36:19.300707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:36:19.329259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-hsjs8" condition "Approved" to 2026-03-04 01:36:19.329247888 +0000 UTC m=+775.711001310 I0304 01:36:19.353665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-hsjs8" condition "Ready" to 2026-03-04 01:36:19.353653806 +0000 UTC m=+775.735407228 I0304 01:36:19.378853 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:36:19.378840421 +0000 UTC m=+775.760593873 I0304 01:36:19.401710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:36:19.460669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:37:15.104673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:37:15.104717 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-04 01:37:15.104709179 +0000 UTC m=+831.486462601 I0304 01:37:15.104749 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-04 01:37:15.10473677 +0000 UTC m=+831.486490182 I0304 01:37:15.119536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:37:15.119631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:37:15.119662 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-04 01:37:15.119653016 +0000 UTC m=+831.501406458 I0304 01:37:15.328297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-spfdw" condition "Approved" to 2026-03-04 01:37:15.328280898 +0000 UTC m=+831.710034340 I0304 01:37:15.351905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-spfdw" condition "Ready" to 2026-03-04 01:37:15.35189327 +0000 UTC m=+831.733646722 I0304 01:37:15.377557 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:37:15.377546605 +0000 UTC m=+831.759300047 I0304 01:37:15.396264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:37:15.436226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:40:10.960559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:40:10.960620 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-04 01:40:10.960613589 +0000 UTC m=+1007.342367011 I0304 01:40:10.960784 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-04 01:40:10.960764932 +0000 UTC m=+1007.342518364 I0304 01:40:10.977509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:40:10.977588 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-04 01:40:10.977580478 +0000 UTC m=+1007.359333900 I0304 01:40:11.154095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:40:11.186672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qxxkc" condition "Approved" to 2026-03-04 01:40:11.186657157 +0000 UTC m=+1007.568410579 I0304 01:40:11.208515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qxxkc" condition "Ready" to 2026-03-04 01:40:11.20850294 +0000 UTC m=+1007.590256362 I0304 01:40:11.235788 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:40:11.235771027 +0000 UTC m=+1007.617524469 I0304 01:40:11.255586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:40:11.255949 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:40:11.255942485 +0000 UTC m=+1007.637695897 I0304 01:40:11.272964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:40:11.282478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:46:39.461855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:46:39.461970 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-03-04 01:46:39.461954765 +0000 UTC m=+1395.843708217 I0304 01:46:39.462104 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-03-04 01:46:39.462079007 +0000 UTC m=+1395.843832459 I0304 01:46:39.481294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:46:39.481473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:46:39.481561 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-03-04 01:46:39.481551831 +0000 UTC m=+1395.863305253 I0304 01:46:39.708969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:46:39.721431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-4wbm5" condition "Approved" to 2026-03-04 01:46:39.721422879 +0000 UTC m=+1396.103176301 I0304 01:46:39.746766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-4wbm5" condition "Ready" to 2026-03-04 01:46:39.746753627 +0000 UTC m=+1396.128507039 I0304 01:46:39.776992 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:46:39.77697804 +0000 UTC m=+1396.158731442 I0304 01:46:39.809827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:02.450975 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-03-04 01:48:02.450954225 +0000 UTC m=+1478.832707647 I0304 01:48:02.451334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:48:02.451624 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-03-04 01:48:02.451597949 +0000 UTC m=+1478.833351391 I0304 01:48:02.468501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:02.468601 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-03-04 01:48:02.468593141 +0000 UTC m=+1478.850346583 I0304 01:48:02.540752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:02.573992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-942h5" condition "Approved" to 2026-03-04 01:48:02.57397784 +0000 UTC m=+1478.955731252 I0304 01:48:02.593909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-942h5" condition "Ready" to 2026-03-04 01:48:02.593895473 +0000 UTC m=+1478.975648925 I0304 01:48:02.631098 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:48:02.631075624 +0000 UTC m=+1479.012829046 I0304 01:48:02.654812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:02.709900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:56.622759 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-03-04 01:48:56.622741398 +0000 UTC m=+1533.004494820 I0304 01:48:56.622849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:48:56.622963 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-03-04 01:48:56.622952132 +0000 UTC m=+1533.004705584 I0304 01:48:56.639791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:56.639874 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-03-04 01:48:56.639867251 +0000 UTC m=+1533.021620693 I0304 01:48:56.655690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:56.655788 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-03-04 01:48:56.65577789 +0000 UTC m=+1533.037531332 I0304 01:48:56.661477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-vsj5t" condition "Approved" to 2026-03-04 01:48:56.661468421 +0000 UTC m=+1533.043221843 I0304 01:48:56.680183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-vsj5t" condition "Ready" to 2026-03-04 01:48:56.680165308 +0000 UTC m=+1533.061918710 I0304 01:48:56.700314 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:48:56.700304526 +0000 UTC m=+1533.082057948 I0304 01:48:56.718095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:56.718472 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:48:56.718461442 +0000 UTC m=+1533.100214884 I0304 01:48:56.727974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:56.744156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:57.278241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:48:57.278284 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-03-04 01:48:57.278272012 +0000 UTC m=+1533.660025424 I0304 01:48:57.278310 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-03-04 01:48:57.278294312 +0000 UTC m=+1533.660047734 I0304 01:48:57.301154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:57.301227 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-03-04 01:48:57.301221479 +0000 UTC m=+1533.682974891 I0304 01:48:57.316883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:57.342628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lw6xc" condition "Approved" to 2026-03-04 01:48:57.34261109 +0000 UTC m=+1533.724364512 I0304 01:48:57.361641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lw6xc" condition "Ready" to 2026-03-04 01:48:57.361630224 +0000 UTC m=+1533.743383646 I0304 01:48:57.385523 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:48:57.385509421 +0000 UTC m=+1533.767262843 I0304 01:48:57.404180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:48:58.031871 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-03-04 01:48:58.03186129 +0000 UTC m=+1534.413614702 I0304 01:48:58.682452 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-03-04 01:48:58.682437339 +0000 UTC m=+1535.064190781 I0304 01:49:42.720171 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-03-04 01:49:42.720155184 +0000 UTC m=+1579.101908606 I0304 01:49:42.720862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:49:42.720887 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-03-04 01:49:42.720883629 +0000 UTC m=+1579.102637041 I0304 01:49:42.747518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:49:42.747608 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:49:42.747627 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-03-04 01:49:42.747621028 +0000 UTC m=+1579.129374430 I0304 01:49:44.417639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:49:44.436871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-hpc4q" condition "Approved" to 2026-03-04 01:49:44.436759933 +0000 UTC m=+1580.818513385 I0304 01:49:44.464688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-hpc4q" condition "Ready" to 2026-03-04 01:49:44.464676977 +0000 UTC m=+1580.846430389 I0304 01:49:44.495595 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:49:44.495580123 +0000 UTC m=+1580.877333545 I0304 01:49:44.521779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:49:44.522299 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:49:44.522292101 +0000 UTC m=+1580.904045513 I0304 01:49:44.527549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:49:44.539531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:49:44.540251 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:49:44.540239713 +0000 UTC m=+1580.921993135 I0304 01:49:44.546610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:05.840210 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-03-04 01:52:05.8401898 +0000 UTC m=+1722.221943252 I0304 01:52:05.840732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:52:05.840822 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-03-04 01:52:05.840809864 +0000 UTC m=+1722.222563316 I0304 01:52:05.859612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:05.859690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:52:05.859714 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-03-04 01:52:05.859705454 +0000 UTC m=+1722.241458886 I0304 01:52:06.205332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:06.205482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-g57j6" condition "Approved" to 2026-03-04 01:52:06.205467976 +0000 UTC m=+1722.587221378 I0304 01:52:06.229163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-g57j6" condition "Ready" to 2026-03-04 01:52:06.229147699 +0000 UTC m=+1722.610901151 I0304 01:52:06.256970 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:52:06.25695822 +0000 UTC m=+1722.638711632 I0304 01:52:06.278199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:06.279992 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:52:06.279978878 +0000 UTC m=+1722.661732300 I0304 01:52:06.297899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:06.298154 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:52:06.298144664 +0000 UTC m=+1722.679898086 I0304 01:52:07.420071 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-03-04 01:52:07.420056587 +0000 UTC m=+1723.801809999 I0304 01:52:07.420165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:52:07.420212 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-03-04 01:52:07.420202561 +0000 UTC m=+1723.801956013 I0304 01:52:07.437411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:07.437510 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:52:07.437532 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-03-04 01:52:07.437525948 +0000 UTC m=+1723.819279370 I0304 01:52:07.689174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:07.690035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-kgvpw" condition "Approved" to 2026-03-04 01:52:07.69001937 +0000 UTC m=+1724.071772782 I0304 01:52:07.708200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-kgvpw" condition "Ready" to 2026-03-04 01:52:07.708181685 +0000 UTC m=+1724.089935137 I0304 01:52:07.746285 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:52:07.746268514 +0000 UTC m=+1724.128021946 I0304 01:52:07.776703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:07.777091 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:52:07.777081328 +0000 UTC m=+1724.158834750 I0304 01:52:07.787461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:52:07.801090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:54:20.378903 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-jcqsb-vnc" condition "Ready" to 2026-03-04 01:54:20.378888355 +0000 UTC m=+1856.760641767 I0304 01:54:20.379203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-jcqsb-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:54:20.379259 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-jcqsb-vnc" condition "Issuing" to 2026-03-04 01:54:20.379247062 +0000 UTC m=+1856.761000474 I0304 01:54:20.379619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-jcqsb-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:54:20.379685 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-jcqsb-api" condition "Issuing" to 2026-03-04 01:54:20.379666991 +0000 UTC m=+1856.761420443 I0304 01:54:20.380051 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-jcqsb-api" condition "Ready" to 2026-03-04 01:54:20.380045729 +0000 UTC m=+1856.761799141 I0304 01:54:20.394986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-jcqsb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-jcqsb-api\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:54:20.395068 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-jcqsb-api" condition "Ready" to 2026-03-04 01:54:20.395061027 +0000 UTC m=+1856.776814449 I0304 01:54:20.402748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-jcqsb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-jcqsb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:54:20.402830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-jcqsb-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:54:20.402874 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-jcqsb-vnc" condition "Issuing" to 2026-03-04 01:54:20.402867533 +0000 UTC m=+1856.784620955 I0304 01:54:20.509735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-jcqsb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-jcqsb-api\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:54:20.553327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-jcqsb-api-vls52" condition "Approved" to 2026-03-04 01:54:20.553309628 +0000 UTC m=+1856.935063080 I0304 01:54:20.574046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-jcqsb-api-vls52" condition "Ready" to 2026-03-04 01:54:20.574032097 +0000 UTC m=+1856.955785539 I0304 01:54:20.611090 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-jcqsb-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:54:20.611075544 +0000 UTC m=+1856.992828946 I0304 01:54:20.631441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-jcqsb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-jcqsb-api\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:54:20.633442 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-jcqsb-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:54:20.633429038 +0000 UTC m=+1857.015182480 I0304 01:54:20.651394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-jcqsb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-jcqsb-api\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:54:20.651781 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-jcqsb-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:54:20.651774249 +0000 UTC m=+1857.033527671 I0304 01:54:20.653312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-jcqsb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-jcqsb-api\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:54:20.823286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-jcqsb-vnc-csfq4" condition "Approved" to 2026-03-04 01:54:20.82326323 +0000 UTC m=+1857.205016672 I0304 01:54:20.838864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-jcqsb-vnc-csfq4" condition "Ready" to 2026-03-04 01:54:20.838854151 +0000 UTC m=+1857.220607573 I0304 01:54:20.869803 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-jcqsb-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:54:20.869786298 +0000 UTC m=+1857.251539740 I0304 01:54:20.894592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-jcqsb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-jcqsb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:55:05.461068 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-03-04 01:55:05.461025265 +0000 UTC m=+1901.842778717 I0304 01:55:05.461290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:55:05.461343 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-03-04 01:55:05.461333322 +0000 UTC m=+1901.843086764 I0304 01:55:05.474558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:55:05.474641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:55:05.474666 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-03-04 01:55:05.474659424 +0000 UTC m=+1901.856412876 I0304 01:55:05.634986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-bk5jd" condition "Approved" to 2026-03-04 01:55:05.634964909 +0000 UTC m=+1902.016718341 I0304 01:55:05.656229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-bk5jd" condition "Ready" to 2026-03-04 01:55:05.656216179 +0000 UTC m=+1902.037969601 I0304 01:55:05.691002 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:55:05.690988488 +0000 UTC m=+1902.072741900 I0304 01:55:05.714923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:57:31.926630 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-03-04 01:57:31.926608342 +0000 UTC m=+2048.308361784 I0304 01:57:31.927108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:57:31.927171 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-03-04 01:57:31.927159074 +0000 UTC m=+2048.308912526 I0304 01:57:31.943740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:57:31.943854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 01:57:31.943879 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-03-04 01:57:31.943871428 +0000 UTC m=+2048.325624850 I0304 01:57:32.131276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:57:32.135166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-vsnm5" condition "Approved" to 2026-03-04 01:57:32.135145591 +0000 UTC m=+2048.516899043 I0304 01:57:32.150609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-vsnm5" condition "Ready" to 2026-03-04 01:57:32.150599479 +0000 UTC m=+2048.532352891 I0304 01:57:32.176924 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 01:57:32.176912366 +0000 UTC m=+2048.558665778 I0304 01:57:32.191489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 01:57:32.234379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:00:59.547398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:00:59.547487 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-03-04 02:00:59.547476532 +0000 UTC m=+2255.929229974 I0304 02:00:59.547839 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-03-04 02:00:59.547819339 +0000 UTC m=+2255.929572761 I0304 02:00:59.566711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:00:59.566785 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-03-04 02:00:59.566779072 +0000 UTC m=+2255.948532484 I0304 02:00:59.842383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:00:59.874490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-xsqs8" condition "Approved" to 2026-03-04 02:00:59.874479445 +0000 UTC m=+2256.256232847 I0304 02:00:59.894184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-xsqs8" condition "Ready" to 2026-03-04 02:00:59.894169212 +0000 UTC m=+2256.275922644 I0304 02:00:59.928732 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:00:59.928686334 +0000 UTC m=+2256.310439766 I0304 02:00:59.958831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:01:01.140083 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-03-04 02:01:01.140057376 +0000 UTC m=+2257.521810818 I0304 02:01:01.140205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:01:01.140261 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-03-04 02:01:01.14024611 +0000 UTC m=+2257.521999562 I0304 02:01:01.155705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:01:01.155796 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-03-04 02:01:01.155787969 +0000 UTC m=+2257.537541381 I0304 02:01:01.242365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:01:01.276302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-d4s67" condition "Approved" to 2026-03-04 02:01:01.276282703 +0000 UTC m=+2257.658036125 I0304 02:01:01.295855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-d4s67" condition "Ready" to 2026-03-04 02:01:01.295839658 +0000 UTC m=+2257.677593080 I0304 02:01:01.322441 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:01:01.322429032 +0000 UTC m=+2257.704182454 I0304 02:01:01.342686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:01:01.343100 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:01:01.34309149 +0000 UTC m=+2257.724844932 I0304 02:01:01.364422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:02:59.038640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:02:59.038735 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-03-04 02:02:59.038726922 +0000 UTC m=+2375.420480364 I0304 02:02:59.038984 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-03-04 02:02:59.038960577 +0000 UTC m=+2375.420714029 E0304 02:02:59.052262 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0304 02:02:59.052341 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-03-04 02:02:59.05233251 +0000 UTC m=+2375.434085962 I0304 02:02:59.052370 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0304 02:02:59.059159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:02:59.059277 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-03-04 02:02:59.059267877 +0000 UTC m=+2375.441021309 E0304 02:02:59.067895 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0304 02:02:59.068045 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0304 02:02:59.068088 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0304 02:02:59.068133 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0304 02:02:59.080374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:02:59.109988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-5x67m" condition "Approved" to 2026-03-04 02:02:59.109976082 +0000 UTC m=+2375.491729504 I0304 02:02:59.134691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-5x67m" condition "Ready" to 2026-03-04 02:02:59.134680325 +0000 UTC m=+2375.516433747 I0304 02:02:59.161498 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:02:59.161479764 +0000 UTC m=+2375.543233206 I0304 02:02:59.179716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:02:59.180044 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:02:59.180035257 +0000 UTC m=+2375.561788679 I0304 02:02:59.196494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:02:59.203290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:02:59.667175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:02:59.667201 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-03-04 02:02:59.667197965 +0000 UTC m=+2376.048951377 I0304 02:02:59.667100 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-03-04 02:02:59.667087283 +0000 UTC m=+2376.048840695 E0304 02:02:59.684856 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0304 02:02:59.684895 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-03-04 02:02:59.684888169 +0000 UTC m=+2376.066641591 I0304 02:02:59.684933 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0304 02:02:59.689664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:02:59.689792 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-03-04 02:02:59.689785794 +0000 UTC m=+2376.071539216 E0304 02:02:59.704063 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0304 02:02:59.704392 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0304 02:02:59.704437 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0304 02:02:59.704562 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0304 02:02:59.709407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:02:59.735213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-hsfq9" condition "Approved" to 2026-03-04 02:02:59.735198727 +0000 UTC m=+2376.116952149 I0304 02:02:59.753091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-hsfq9" condition "Ready" to 2026-03-04 02:02:59.753074656 +0000 UTC m=+2376.134828078 I0304 02:02:59.776011 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:02:59.776001292 +0000 UTC m=+2376.157754704 I0304 02:02:59.795190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:03:00.350328 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-03-04 02:03:00.350310447 +0000 UTC m=+2376.732063899 I0304 02:03:00.350850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:03:00.350917 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-03-04 02:03:00.35090978 +0000 UTC m=+2376.732663192 I0304 02:03:00.377462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:03:00.377532 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-03-04 02:03:00.377525784 +0000 UTC m=+2376.759279186 I0304 02:03:00.401647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:03:00.432580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-mnzjx" condition "Approved" to 2026-03-04 02:03:00.432567751 +0000 UTC m=+2376.814321173 I0304 02:03:00.512851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-mnzjx" condition "Ready" to 2026-03-04 02:03:00.512841453 +0000 UTC m=+2376.894594865 I0304 02:03:04.074591 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:03:04.074579072 +0000 UTC m=+2380.456332484 I0304 02:03:04.086075 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-mnzjx" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:03:04.086060445 +0000 UTC m=+2380.467813878 I0304 02:03:04.113125 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:03:04.113114309 +0000 UTC m=+2380.494867741 I0304 02:03:04.133688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:03:04.134482 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:03:04.134474313 +0000 UTC m=+2380.516227735 I0304 02:03:04.145856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:03:04.155439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:03:04.155675 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:03:04.155668921 +0000 UTC m=+2380.537422333 I0304 02:03:04.175900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:03:04.704737 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:03:04.704726371 +0000 UTC m=+2381.086479793 I0304 02:05:10.440669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:05:10.440701 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-03-04 02:05:10.440694219 +0000 UTC m=+2506.822447641 I0304 02:05:10.441102 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-03-04 02:05:10.441096857 +0000 UTC m=+2506.822850279 I0304 02:05:10.464263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:10.464338 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-03-04 02:05:10.464331961 +0000 UTC m=+2506.846085383 I0304 02:05:10.694806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:10.729443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-twxst" condition "Approved" to 2026-03-04 02:05:10.72942697 +0000 UTC m=+2507.111180392 I0304 02:05:10.746891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-twxst" condition "Ready" to 2026-03-04 02:05:10.746877309 +0000 UTC m=+2507.128630751 I0304 02:05:10.773333 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:10.77332364 +0000 UTC m=+2507.155077062 I0304 02:05:10.795999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:55.862632 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-04 02:05:55.862617379 +0000 UTC m=+2552.244370791 I0304 02:05:55.877337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:05:55.877374 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-04 02:05:55.877366663 +0000 UTC m=+2552.259120105 I0304 02:05:55.877333 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-04 02:05:55.877312731 +0000 UTC m=+2552.259066183 I0304 02:05:55.894437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:55.894524 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-04 02:05:55.894516336 +0000 UTC m=+2552.276269748 E0304 02:05:55.902882 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0304 02:05:55.961655 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-04 02:05:55.961634339 +0000 UTC m=+2552.343387791 I0304 02:05:55.980525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:05:55.980553 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-04 02:05:55.980536199 +0000 UTC m=+2552.362289621 I0304 02:05:55.980573 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-04 02:05:55.980561609 +0000 UTC m=+2552.362315051 I0304 02:05:55.994064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:55.994138 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-04 02:05:55.994131537 +0000 UTC m=+2552.375884959 I0304 02:05:56.245948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:56.282389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-zs257" condition "Approved" to 2026-03-04 02:05:56.282374798 +0000 UTC m=+2552.664128270 I0304 02:05:56.306538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-zs257" condition "Ready" to 2026-03-04 02:05:56.30652204 +0000 UTC m=+2552.688275482 I0304 02:05:56.355571 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:56.355561739 +0000 UTC m=+2552.737315141 I0304 02:05:56.392820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" E0304 02:05:56.393134 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0304 02:05:56.393249 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:56.393243058 +0000 UTC m=+2552.774996470 I0304 02:05:56.414748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:56.415133 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:56.415123351 +0000 UTC m=+2552.796876763 I0304 02:05:56.794816 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-04 02:05:56.794800801 +0000 UTC m=+2553.176554223 I0304 02:05:56.816619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:05:56.816663 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-04 02:05:56.816657234 +0000 UTC m=+2553.198410636 I0304 02:05:56.816934 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-04 02:05:56.81692799 +0000 UTC m=+2553.198681402 I0304 02:05:56.837427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:56.837536 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-04 02:05:56.837528366 +0000 UTC m=+2553.219281778 I0304 02:05:56.914408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:56.952624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bssmd" condition "Approved" to 2026-03-04 02:05:56.952609336 +0000 UTC m=+2553.334362738 I0304 02:05:56.973691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-bssmd" condition "Ready" to 2026-03-04 02:05:56.973682033 +0000 UTC m=+2553.355435445 I0304 02:05:57.009586 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:57.009570394 +0000 UTC m=+2553.391323806 I0304 02:05:57.029555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:57.030165 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:57.03015788 +0000 UTC m=+2553.411911302 I0304 02:05:57.062045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:57.225901 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-04 02:05:57.22588755 +0000 UTC m=+2553.607640962 I0304 02:05:57.247754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:05:57.247793 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-04 02:05:57.247784774 +0000 UTC m=+2553.629538196 I0304 02:05:57.248609 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-04 02:05:57.248594421 +0000 UTC m=+2553.630347843 I0304 02:05:57.316793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:57.316862 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-04 02:05:57.316856347 +0000 UTC m=+2553.698609749 I0304 02:05:57.528249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:57.563955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-fbr57" condition "Approved" to 2026-03-04 02:05:57.563942746 +0000 UTC m=+2553.945696148 I0304 02:05:57.595647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-fbr57" condition "Ready" to 2026-03-04 02:05:57.595628748 +0000 UTC m=+2553.977382190 I0304 02:05:57.641879 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:57.641866747 +0000 UTC m=+2554.023620149 I0304 02:05:57.684282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:57.684588 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:57.684582173 +0000 UTC m=+2554.066335585 I0304 02:05:57.703673 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-04 02:05:57.703644337 +0000 UTC m=+2554.085397789 I0304 02:05:57.721832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:05:57.721863 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-04 02:05:57.721838793 +0000 UTC m=+2554.103592205 I0304 02:05:57.721935 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-04 02:05:57.721880944 +0000 UTC m=+2554.103634386 I0304 02:05:57.822516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:57.823334 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:57.823322424 +0000 UTC m=+2554.205075846 I0304 02:05:57.980570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:57.980687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:05:57.980713 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-04 02:05:57.98070367 +0000 UTC m=+2554.362457102 I0304 02:05:58.324424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-6tjvs" condition "Approved" to 2026-03-04 02:05:58.324384716 +0000 UTC m=+2554.706138128 I0304 02:05:58.437106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-6tjvs" condition "Ready" to 2026-03-04 02:05:58.437096525 +0000 UTC m=+2554.818849937 I0304 02:05:58.874617 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:58.87460518 +0000 UTC m=+2555.256358622 I0304 02:05:59.021171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:05:59.021551 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:05:59.021540906 +0000 UTC m=+2555.403294328 I0304 02:05:59.223779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:09:13.865317 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-03-04 02:09:13.865279589 +0000 UTC m=+2750.247033001 I0304 02:09:13.865776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:09:13.865814 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-03-04 02:09:13.86581058 +0000 UTC m=+2750.247563992 I0304 02:09:13.882092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:09:13.882136 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-03-04 02:09:13.882132676 +0000 UTC m=+2750.263886078 I0304 02:09:14.165541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:09:14.196966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-j24xz" condition "Approved" to 2026-03-04 02:09:14.196952939 +0000 UTC m=+2750.578706361 I0304 02:09:14.218716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-j24xz" condition "Ready" to 2026-03-04 02:09:14.218706261 +0000 UTC m=+2750.600459713 I0304 02:09:14.253181 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:09:14.253166451 +0000 UTC m=+2750.634919853 I0304 02:09:14.284037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:09:16.308170 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-03-04 02:09:16.308148705 +0000 UTC m=+2752.689902157 I0304 02:09:16.308646 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:09:16.308693 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-03-04 02:09:16.308683506 +0000 UTC m=+2752.690436948 I0304 02:09:16.330915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:09:16.331009 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-03-04 02:09:16.331002209 +0000 UTC m=+2752.712755641 I0304 02:09:16.443413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:09:16.476859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-95272" condition "Approved" to 2026-03-04 02:09:16.476848041 +0000 UTC m=+2752.858601463 I0304 02:09:16.499482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-95272" condition "Ready" to 2026-03-04 02:09:16.49947154 +0000 UTC m=+2752.881224952 I0304 02:09:16.524720 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:09:16.524711515 +0000 UTC m=+2752.906464917 I0304 02:09:16.551881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:13:27.420788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:13:27.420864 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-03-04 02:13:27.420856496 +0000 UTC m=+3003.802609948 I0304 02:13:27.420792 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-03-04 02:13:27.420776154 +0000 UTC m=+3003.802529596 I0304 02:13:27.436620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:13:27.436714 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-03-04 02:13:27.436706852 +0000 UTC m=+3003.818460274 I0304 02:13:27.786203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:13:27.813277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-vmv6t" condition "Approved" to 2026-03-04 02:13:27.813237973 +0000 UTC m=+3004.194991415 I0304 02:13:27.843712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-vmv6t" condition "Ready" to 2026-03-04 02:13:27.843698549 +0000 UTC m=+3004.225451991 I0304 02:13:27.873067 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:13:27.873053461 +0000 UTC m=+3004.254806913 I0304 02:13:27.891231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:14:03.057305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:14:03.057404 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-03-04 02:14:03.057393983 +0000 UTC m=+3039.439147415 I0304 02:14:03.057611 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-03-04 02:14:03.057581547 +0000 UTC m=+3039.439334979 I0304 02:14:03.074394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:14:03.074605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0304 02:14:03.074705 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-03-04 02:14:03.074630139 +0000 UTC m=+3039.456383561 I0304 02:14:03.581851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lzbc5" condition "Approved" to 2026-03-04 02:14:03.58183405 +0000 UTC m=+3039.963587502 I0304 02:14:03.602984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-lzbc5" condition "Ready" to 2026-03-04 02:14:03.602965017 +0000 UTC m=+3039.984718459 I0304 02:14:03.636880 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:14:03.636857656 +0000 UTC m=+3040.018611078 I0304 02:14:03.659273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0304 02:14:03.659853 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-04 02:14:03.659843093 +0000 UTC m=+3040.041596545 I0304 02:14:03.679217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"