I0617 02:57:42.924040 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0617 02:57:42.924210 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0617 02:57:42.924378 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0617 02:57:42.929858 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0617 02:57:42.930269 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0617 02:57:42.930361 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0617 02:57:42.930390 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0617 02:57:42.933022 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0617 02:57:42.948264 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0617 02:57:42.953115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0617 02:57:42.957067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0617 02:57:42.962937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0617 02:57:42.965520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0617 02:57:42.967456 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0617 02:57:42.969247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0617 02:57:42.971272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0617 02:57:42.973013 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0617 02:57:42.973041 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0617 02:57:42.973202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0617 02:57:42.977991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0617 02:57:42.979830 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0617 02:57:42.981730 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0617 02:57:42.983358 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0617 02:57:42.983383 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0617 02:57:42.983443 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0617 02:57:42.985185 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0617 02:57:42.985339 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0617 02:57:42.987115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0617 02:57:42.988794 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0617 02:57:42.988963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0617 02:57:42.990743 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0617 02:57:42.992423 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0617 02:57:42.996368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0617 02:57:43.001324 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.001640 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.001641 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.001787 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.001940 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.002275 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.002925 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.003290 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.004080 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:57:43.092383 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0617 02:58:04.363949 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-17 02:58:04.363933587 +0000 UTC m=+21.472906220 I0617 02:58:05.336583 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-17 02:58:05.336565156 +0000 UTC m=+22.445537799 I0617 02:58:05.337726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 02:58:05.338036 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-17 02:58:05.337992678 +0000 UTC m=+22.446965321 E0617 02:58:05.403827 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 02:58:05.403908 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-17 02:58:05.403900977 +0000 UTC m=+22.512873590 E0617 02:58:05.403934 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 02:58:05.407789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:05.407864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 02:58:05.407890 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-17 02:58:05.407883427 +0000 UTC m=+22.516856040 E0617 02:58:05.479445 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0617 02:58:05.480169 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 02:58:05.480264 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 02:58:05.480312 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0617 02:58:06.162359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:06.163329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pvrcn" condition "Approved" to 2026-06-17 02:58:06.163317671 +0000 UTC m=+23.272290294 I0617 02:58:06.202699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pvrcn" condition "Ready" to 2026-06-17 02:58:06.202680684 +0000 UTC m=+23.311653317 I0617 02:58:06.376195 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:58:06.376173688 +0000 UTC m=+23.485146331 I0617 02:58:06.487192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:06.487456 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:58:06.487449886 +0000 UTC m=+23.596422499 I0617 02:58:06.563032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:06.570271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:10.480613 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:58:10.480599194 +0000 UTC m=+27.589571837 I0617 02:58:41.800401 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 02:58:41.800555 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-17 02:58:41.800543359 +0000 UTC m=+58.909516002 I0617 02:58:41.800558 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-17 02:58:41.800543979 +0000 UTC m=+58.909516622 I0617 02:58:41.907889 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-17 02:58:41.907874303 +0000 UTC m=+59.016846916 I0617 02:58:41.913272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:41.913344 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-17 02:58:41.913337786 +0000 UTC m=+59.022310399 I0617 02:58:42.320167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:42.721953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xkpfl" condition "Approved" to 2026-06-17 02:58:42.721940154 +0000 UTC m=+59.830912797 I0617 02:58:42.911928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xkpfl" condition "Ready" to 2026-06-17 02:58:42.911917454 +0000 UTC m=+60.020890057 I0617 02:58:43.171029 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:58:43.171017456 +0000 UTC m=+60.279990069 I0617 02:58:43.207568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 02:58:43.208174 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 02:58:43.208167254 +0000 UTC m=+60.317139877 I0617 02:58:43.350464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:28.281614 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready" to 2026-06-17 03:04:28.281586922 +0000 UTC m=+405.390559535 I0617 03:04:28.282352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:04:28.282387 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-06-17 03:04:28.28238147 +0000 UTC m=+405.391354083 I0617 03:04:28.296265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:28.296358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-156.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:04:28.296381 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Issuing" to 2026-06-17 03:04:28.296372556 +0000 UTC m=+405.405345179 I0617 03:04:28.559843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:28.567468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-ztdr6" condition "Approved" to 2026-06-17 03:04:28.567450634 +0000 UTC m=+405.676423247 I0617 03:04:28.605958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-156.nip.io-tls-ztdr6" condition "Ready" to 2026-06-17 03:04:28.605938784 +0000 UTC m=+405.714911427 I0617 03:04:28.632342 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:04:28.63232535 +0000 UTC m=+405.741297983 I0617 03:04:28.654637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:04:28.655135 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-156.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:04:28.655124805 +0000 UTC m=+405.764097448 I0617 03:04:28.677335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-156.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-156.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.106015 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-17 03:05:38.105988533 +0000 UTC m=+475.214961186 I0617 03:05:38.106081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:05:38.106186 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-17 03:05:38.106173007 +0000 UTC m=+475.215145660 I0617 03:05:38.120166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.120240 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-17 03:05:38.120233625 +0000 UTC m=+475.229206238 E0617 03:05:38.122072 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0617 03:05:38.122140 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-17 03:05:38.122128528 +0000 UTC m=+475.231101171 E0617 03:05:38.122216 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 03:05:38.136534 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0617 03:05:38.136626 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 03:05:38.136660 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0617 03:05:38.136686 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0617 03:05:38.141022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.164135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-46jkg" condition "Approved" to 2026-06-17 03:05:38.164121157 +0000 UTC m=+475.273093800 I0617 03:05:38.177965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-46jkg" condition "Ready" to 2026-06-17 03:05:38.17794684 +0000 UTC m=+475.286919473 I0617 03:05:38.199774 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:38.199763533 +0000 UTC m=+475.308736166 I0617 03:05:38.217135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:38.217879 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:38.217867502 +0000 UTC m=+475.326840145 I0617 03:05:38.240298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:05:43.137044 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:05:43.137023917 +0000 UTC m=+480.245996560 I0617 03:06:23.503334 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-17 03:06:23.503322358 +0000 UTC m=+520.612294961 I0617 03:06:23.503637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:23.503665 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-17 03:06:23.503656565 +0000 UTC m=+520.612629168 I0617 03:06:23.503801 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-17 03:06:23.503798168 +0000 UTC m=+520.612770771 I0617 03:06:23.506137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:23.506158 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-17 03:06:23.506155372 +0000 UTC m=+520.615127975 I0617 03:06:23.507317 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:23.507352 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-17 03:06:23.507344938 +0000 UTC m=+520.616317571 I0617 03:06:23.508031 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-17 03:06:23.508023043 +0000 UTC m=+520.616995676 I0617 03:06:23.538595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:23.538656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:23.538675 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-17 03:06:23.538669676 +0000 UTC m=+520.647642289 I0617 03:06:23.542713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:23.542849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:23.542863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:23.542884 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-17 03:06:23.542876761 +0000 UTC m=+520.651849374 I0617 03:06:23.542924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:23.542963 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-17 03:06:23.542956323 +0000 UTC m=+520.651928966 I0617 03:06:23.682524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:23.690149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xslhj" condition "Approved" to 2026-06-17 03:06:23.690130818 +0000 UTC m=+520.799103461 I0617 03:06:23.711211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xslhj" condition "Ready" to 2026-06-17 03:06:23.711197045 +0000 UTC m=+520.820169688 I0617 03:06:23.747967 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:23.747955545 +0000 UTC m=+520.856928158 I0617 03:06:23.768771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:23.769152 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:23.769145344 +0000 UTC m=+520.878117957 I0617 03:06:23.780643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:23.790565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:23.790892 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:23.790884105 +0000 UTC m=+520.899856708 I0617 03:06:23.812188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n7nh8" condition "Approved" to 2026-06-17 03:06:23.812175317 +0000 UTC m=+520.921147930 I0617 03:06:23.829235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n7nh8" condition "Ready" to 2026-06-17 03:06:23.829222802 +0000 UTC m=+520.938195415 I0617 03:06:24.042371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lsmt6" condition "Approved" to 2026-06-17 03:06:24.042350067 +0000 UTC m=+521.151322710 I0617 03:06:24.087827 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:24.087812754 +0000 UTC m=+521.196785367 I0617 03:06:24.521620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lsmt6" condition "Ready" to 2026-06-17 03:06:24.521604227 +0000 UTC m=+521.630576870 I0617 03:06:24.534995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:24.535366 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:24.535360128 +0000 UTC m=+521.644332741 I0617 03:06:25.318182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:25.319178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:25.358513 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:25.358500047 +0000 UTC m=+522.467472690 I0617 03:06:25.509028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:25.510963 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:25.510947371 +0000 UTC m=+522.619920014 I0617 03:06:25.578175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:25.585412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:38.860413 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:38.860457 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls" condition "Issuing" to 2026-06-17 03:06:38.860446842 +0000 UTC m=+535.969419485 I0617 03:06:38.860684 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls" condition "Ready" to 2026-06-17 03:06:38.860662367 +0000 UTC m=+535.969635010 I0617 03:06:38.889171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:06:38.889264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:06:38.889294 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls" condition "Issuing" to 2026-06-17 03:06:38.889284713 +0000 UTC m=+535.998257346 I0617 03:06:41.342174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w8dkz-xmgt8" condition "Approved" to 2026-06-17 03:06:41.342154551 +0000 UTC m=+538.451127184 I0617 03:06:42.929644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-w8dkz-xmgt8" condition "Ready" to 2026-06-17 03:06:42.929621211 +0000 UTC m=+540.038593844 I0617 03:06:44.778989 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:06:44.778973 +0000 UTC m=+541.887945633 I0617 03:06:44.854330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-w8dkz-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:07:48.816327 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-17 03:07:48.816311515 +0000 UTC m=+605.925284128 I0617 03:07:48.816691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:07:48.816745 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-17 03:07:48.816733475 +0000 UTC m=+605.925706118 I0617 03:07:48.831806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:07:48.832026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:07:48.832064 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-17 03:07:48.832054511 +0000 UTC m=+605.941027154 I0617 03:07:49.441538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8vqbl" condition "Approved" to 2026-06-17 03:07:49.441528483 +0000 UTC m=+606.550501086 I0617 03:07:49.464912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8vqbl" condition "Ready" to 2026-06-17 03:07:49.464900501 +0000 UTC m=+606.573873104 I0617 03:07:49.505429 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:07:49.505416427 +0000 UTC m=+606.614389050 I0617 03:07:49.540319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:07:49.540770 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:07:49.540756865 +0000 UTC m=+606.649729478 I0617 03:07:49.561934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:07:49.569628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:11:01.452128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:11:01.452213 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-17 03:11:01.452203303 +0000 UTC m=+798.561175946 I0617 03:11:01.452460 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-17 03:11:01.452169492 +0000 UTC m=+798.561142135 I0617 03:11:01.469570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:11:01.469760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:11:01.469980 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-17 03:11:01.469913765 +0000 UTC m=+798.578886408 I0617 03:11:01.755883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:11:01.778813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lgnvw" condition "Approved" to 2026-06-17 03:11:01.778797586 +0000 UTC m=+798.887770229 I0617 03:11:01.826330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lgnvw" condition "Ready" to 2026-06-17 03:11:01.826320114 +0000 UTC m=+798.935292727 I0617 03:11:01.883340 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:11:01.883321438 +0000 UTC m=+798.992294071 I0617 03:11:01.909729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:13:29.933338 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-17 03:13:29.93332196 +0000 UTC m=+947.042294603 I0617 03:13:29.933754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:13:29.933827 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-17 03:13:29.933818932 +0000 UTC m=+947.042791565 I0617 03:13:29.965845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:13:29.965904 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-17 03:13:29.965899318 +0000 UTC m=+947.074871921 I0617 03:13:30.065761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:13:30.098969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7x7kx" condition "Approved" to 2026-06-17 03:13:30.098955322 +0000 UTC m=+947.207927935 I0617 03:13:30.115383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7x7kx" condition "Ready" to 2026-06-17 03:13:30.115347852 +0000 UTC m=+947.224320465 I0617 03:13:30.142673 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:13:30.142659971 +0000 UTC m=+947.251632584 I0617 03:13:30.162457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:13:30.162672 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:13:30.162667124 +0000 UTC m=+947.271639727 I0617 03:13:30.180344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:14:43.726406 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-17 03:14:43.726387237 +0000 UTC m=+1020.835359880 I0617 03:14:43.726583 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:14:43.726634 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-17 03:14:43.726628603 +0000 UTC m=+1020.835601216 I0617 03:14:43.743382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:14:43.743512 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:14:43.743555 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-17 03:14:43.743546716 +0000 UTC m=+1020.852519349 I0617 03:14:43.959719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-c5blz" condition "Approved" to 2026-06-17 03:14:43.959697801 +0000 UTC m=+1021.068670424 I0617 03:14:43.982645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-c5blz" condition "Ready" to 2026-06-17 03:14:43.982631271 +0000 UTC m=+1021.091603874 I0617 03:14:44.012235 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:14:44.012217221 +0000 UTC m=+1021.121189824 I0617 03:14:44.040429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:14:44.042683 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:14:44.042673391 +0000 UTC m=+1021.151646004 I0617 03:14:44.051344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:14:44.061803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:14:44.062078 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:14:44.06206722 +0000 UTC m=+1021.171039833 I0617 03:18:52.480396 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-17 03:18:52.48038454 +0000 UTC m=+1269.589357153 I0617 03:18:52.480742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:18:52.480820 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-17 03:18:52.480813451 +0000 UTC m=+1269.589786094 I0617 03:18:52.501026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:18:52.501130 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-17 03:18:52.501119941 +0000 UTC m=+1269.610092554 I0617 03:18:52.910742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:18:52.950810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-lsn9r" condition "Approved" to 2026-06-17 03:18:52.950800254 +0000 UTC m=+1270.059772867 I0617 03:18:52.969324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-lsn9r" condition "Ready" to 2026-06-17 03:18:52.969313834 +0000 UTC m=+1270.078286427 I0617 03:18:53.004204 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:18:53.004188323 +0000 UTC m=+1270.113160966 I0617 03:18:53.034932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:18:53.107399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:26:04.083982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:26:04.084097 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-17 03:26:04.084084691 +0000 UTC m=+1701.193057324 I0617 03:26:04.084276 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-17 03:26:04.084252775 +0000 UTC m=+1701.193225408 I0617 03:26:04.102642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:26:04.102714 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:26:04.102732 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-17 03:26:04.102726302 +0000 UTC m=+1701.211698905 I0617 03:26:04.784296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-dffnc" condition "Approved" to 2026-06-17 03:26:04.784255498 +0000 UTC m=+1701.893228111 I0617 03:26:04.807697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-dffnc" condition "Ready" to 2026-06-17 03:26:04.807681997 +0000 UTC m=+1701.916654640 I0617 03:26:04.850388 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:26:04.850375013 +0000 UTC m=+1701.959347646 I0617 03:26:04.871004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:26:04.871524 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:26:04.87151501 +0000 UTC m=+1701.980487653 I0617 03:26:04.901619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:27:32.555631 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-17 03:27:32.55561358 +0000 UTC m=+1789.664586223 I0617 03:27:32.555782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:27:32.555842 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-17 03:27:32.555835116 +0000 UTC m=+1789.664807729 I0617 03:27:32.581230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:27:32.581326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:27:32.581349 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-17 03:27:32.581343773 +0000 UTC m=+1789.690316386 I0617 03:27:33.114678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-b42c4" condition "Approved" to 2026-06-17 03:27:33.114668908 +0000 UTC m=+1790.223641511 I0617 03:27:33.136846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-b42c4" condition "Ready" to 2026-06-17 03:27:33.136834709 +0000 UTC m=+1790.245807322 I0617 03:27:33.165623 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:27:33.165612049 +0000 UTC m=+1790.274584652 I0617 03:27:33.189001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:27:33.189329 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:27:33.189322506 +0000 UTC m=+1790.298295119 I0617 03:27:33.212830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:28:44.327700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:28:44.327773 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-17 03:28:44.327762612 +0000 UTC m=+1861.436735255 I0617 03:28:44.327934 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-17 03:28:44.327910875 +0000 UTC m=+1861.436883558 I0617 03:28:44.345408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:28:44.345546 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-17 03:28:44.345538043 +0000 UTC m=+1861.454510646 I0617 03:28:44.374140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:28:44.405950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-rcfqd" condition "Approved" to 2026-06-17 03:28:44.405930149 +0000 UTC m=+1861.514902792 I0617 03:28:44.428815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-rcfqd" condition "Ready" to 2026-06-17 03:28:44.428803056 +0000 UTC m=+1861.537775669 I0617 03:28:44.472763 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:28:44.472746569 +0000 UTC m=+1861.581719182 I0617 03:28:44.500732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:28:45.000637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:28:45.000684 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-17 03:28:45.000675572 +0000 UTC m=+1862.109648195 I0617 03:28:45.000678 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-17 03:28:45.000660322 +0000 UTC m=+1862.109632975 I0617 03:28:45.027132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:28:45.027281 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-17 03:28:45.027227313 +0000 UTC m=+1862.136199926 I0617 03:28:45.054038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:28:45.085391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-kfhwb" condition "Approved" to 2026-06-17 03:28:45.085380297 +0000 UTC m=+1862.194352910 I0617 03:28:45.102443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-kfhwb" condition "Ready" to 2026-06-17 03:28:45.102431352 +0000 UTC m=+1862.211403975 I0617 03:28:45.155507 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:28:45.155493641 +0000 UTC m=+1862.264466254 I0617 03:28:45.183424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:28:45.183722 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:28:45.183713399 +0000 UTC m=+1862.292686012 I0617 03:28:45.333234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:28:45.723212 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-06-17 03:28:45.723202255 +0000 UTC m=+1862.832174868 I0617 03:28:46.404535 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-06-17 03:28:46.404522075 +0000 UTC m=+1863.513494688 I0617 03:29:32.768803 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-17 03:29:32.768787896 +0000 UTC m=+1909.877760519 I0617 03:29:32.769165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:29:32.769253 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-17 03:29:32.769244636 +0000 UTC m=+1909.878217269 I0617 03:29:32.814124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:29:32.814200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:29:32.814219 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-17 03:29:32.814214043 +0000 UTC m=+1909.923186636 I0617 03:29:34.399354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-szgz5" condition "Approved" to 2026-06-17 03:29:34.399341374 +0000 UTC m=+1911.508313977 I0617 03:29:34.431095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-szgz5" condition "Ready" to 2026-06-17 03:29:34.431076731 +0000 UTC m=+1911.540049354 I0617 03:29:34.475334 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:29:34.475319241 +0000 UTC m=+1911.584291854 I0617 03:29:34.521336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:29:34.522230 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:29:34.522221212 +0000 UTC m=+1911.631193835 I0617 03:29:34.528439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:29:34.552166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:29:34.555316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:29:34.556093 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:29:34.556083447 +0000 UTC m=+1911.665056070 I0617 03:32:29.968174 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-17 03:32:29.96815896 +0000 UTC m=+2087.077131603 I0617 03:32:29.968263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:32:29.968577 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-17 03:32:29.968563319 +0000 UTC m=+2087.077535952 I0617 03:32:29.995712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:32:29.995877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:32:29.995926 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-17 03:32:29.995914659 +0000 UTC m=+2087.104887302 I0617 03:32:30.205416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-l5qvd" condition "Approved" to 2026-06-17 03:32:30.205400051 +0000 UTC m=+2087.314372684 I0617 03:32:30.227718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-l5qvd" condition "Ready" to 2026-06-17 03:32:30.227710396 +0000 UTC m=+2087.336683009 I0617 03:32:30.260235 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:32:30.260223252 +0000 UTC m=+2087.369195855 I0617 03:32:30.303254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:32:30.303609 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:32:30.303600564 +0000 UTC m=+2087.412573177 I0617 03:32:30.327765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:32:30.328803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:32:30.329237 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:32:30.329217614 +0000 UTC m=+2087.438190257 I0617 03:32:31.670835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:32:31.670875 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-06-17 03:32:31.670866396 +0000 UTC m=+2088.779838999 I0617 03:32:31.671184 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-17 03:32:31.671179153 +0000 UTC m=+2088.780151756 I0617 03:32:31.689402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:32:31.689490 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-17 03:32:31.689483268 +0000 UTC m=+2088.798455891 I0617 03:32:31.879101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:32:31.914620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4t468" condition "Approved" to 2026-06-17 03:32:31.914605284 +0000 UTC m=+2089.023577927 I0617 03:32:31.936864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4t468" condition "Ready" to 2026-06-17 03:32:31.936853718 +0000 UTC m=+2089.045826331 I0617 03:32:31.967552 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:32:31.967539322 +0000 UTC m=+2089.076511935 I0617 03:32:32.003940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:32:32.004378 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:32:32.004371036 +0000 UTC m=+2089.113343669 I0617 03:32:32.035008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:35:45.956741 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-17 03:35:45.956719356 +0000 UTC m=+2283.065691989 I0617 03:35:45.956971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:35:45.957184 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-17 03:35:45.957171726 +0000 UTC m=+2283.066144399 I0617 03:35:45.973320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:35:45.973432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:35:45.973472 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-17 03:35:45.973460525 +0000 UTC m=+2283.082433178 I0617 03:35:46.183074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-69sq2" condition "Approved" to 2026-06-17 03:35:46.18305906 +0000 UTC m=+2283.292031693 I0617 03:35:46.200446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-69sq2" condition "Ready" to 2026-06-17 03:35:46.200436044 +0000 UTC m=+2283.309408657 I0617 03:35:46.231673 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:35:46.231662 +0000 UTC m=+2283.340634593 I0617 03:35:46.256080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:35:46.256807 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:35:46.256797969 +0000 UTC m=+2283.365770592 I0617 03:35:46.272574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:35:46.273314 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:35:46.273297103 +0000 UTC m=+2283.382269736 I0617 03:36:26.939637 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qp8lp-api" condition "Ready" to 2026-06-17 03:36:26.939616852 +0000 UTC m=+2324.048589485 I0617 03:36:26.940092 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qp8lp-vnc" condition "Ready" to 2026-06-17 03:36:26.940083503 +0000 UTC m=+2324.049056136 I0617 03:36:26.940453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qp8lp-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:36:26.940558 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qp8lp-api" condition "Issuing" to 2026-06-17 03:36:26.940540613 +0000 UTC m=+2324.049513246 I0617 03:36:26.940475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qp8lp-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:36:26.940811 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qp8lp-vnc" condition "Issuing" to 2026-06-17 03:36:26.940803489 +0000 UTC m=+2324.049776132 I0617 03:36:26.975689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qp8lp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qp8lp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:36:26.975755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qp8lp-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:36:26.975771 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qp8lp-vnc" condition "Issuing" to 2026-06-17 03:36:26.97576661 +0000 UTC m=+2324.084739223 I0617 03:36:26.977736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qp8lp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qp8lp-api\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:36:26.977857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-qp8lp-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:36:26.977884 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-qp8lp-api" condition "Issuing" to 2026-06-17 03:36:26.977874238 +0000 UTC m=+2324.086846851 I0617 03:36:27.301056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-qp8lp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qp8lp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:36:27.414317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-qp8lp-vnc-qsc22" condition "Approved" to 2026-06-17 03:36:27.414293588 +0000 UTC m=+2324.523266191 I0617 03:36:27.475755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-qp8lp-vnc-qsc22" condition "Ready" to 2026-06-17 03:36:27.475739339 +0000 UTC m=+2324.584711942 I0617 03:36:27.597151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-qp8lp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qp8lp-api\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:36:27.647857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-qp8lp-api-n5q4x" condition "Approved" to 2026-06-17 03:36:27.647738852 +0000 UTC m=+2324.756751556 I0617 03:36:27.763059 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-qp8lp-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:36:27.763041182 +0000 UTC m=+2324.872013815 I0617 03:36:28.167381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-qp8lp-api-n5q4x" condition "Ready" to 2026-06-17 03:36:28.167359985 +0000 UTC m=+2325.276332598 I0617 03:36:28.199206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-qp8lp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qp8lp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:36:28.309720 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-qp8lp-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:36:28.309701627 +0000 UTC m=+2325.418674230 I0617 03:36:28.384923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-qp8lp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qp8lp-api\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:36:28.643256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-qp8lp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-qp8lp-api\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:38:36.249353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:38:36.249408 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-06-17 03:38:36.249394923 +0000 UTC m=+2453.358367526 I0617 03:38:36.252589 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-06-17 03:38:36.252580875 +0000 UTC m=+2453.361553478 I0617 03:38:36.278516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:38:36.278617 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:38:36.278638 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-06-17 03:38:36.278632755 +0000 UTC m=+2453.387605358 I0617 03:38:36.810336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:38:36.824186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-7vqm2" condition "Approved" to 2026-06-17 03:38:36.824154594 +0000 UTC m=+2453.933127227 I0617 03:38:36.845585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-7vqm2" condition "Ready" to 2026-06-17 03:38:36.845561269 +0000 UTC m=+2453.954533892 I0617 03:38:36.882967 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:38:36.882953445 +0000 UTC m=+2453.991926048 I0617 03:38:36.913549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:38:36.914068 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:38:36.914058579 +0000 UTC m=+2454.023031212 I0617 03:38:36.936082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:42:18.883271 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-17 03:42:18.88325402 +0000 UTC m=+2675.992226653 I0617 03:42:18.883389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:42:18.883473 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-17 03:42:18.883464535 +0000 UTC m=+2675.992437168 I0617 03:42:18.903683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:42:18.903770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:42:18.903790 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-17 03:42:18.903783354 +0000 UTC m=+2676.012755967 I0617 03:42:19.114689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:42:19.121377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-qfh8m" condition "Approved" to 2026-06-17 03:42:19.12135783 +0000 UTC m=+2676.230330473 I0617 03:42:19.141345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-qfh8m" condition "Ready" to 2026-06-17 03:42:19.141332592 +0000 UTC m=+2676.250305205 I0617 03:42:19.182629 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:42:19.182610867 +0000 UTC m=+2676.291583480 I0617 03:42:19.203537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:42:20.526934 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-17 03:42:20.526919089 +0000 UTC m=+2677.635891692 I0617 03:42:20.526983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:42:20.527009 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-17 03:42:20.52700209 +0000 UTC m=+2677.635974693 I0617 03:42:20.545091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:42:20.545254 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-17 03:42:20.545240743 +0000 UTC m=+2677.654213406 I0617 03:42:20.771772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:42:20.815061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-r6wbf" condition "Approved" to 2026-06-17 03:42:20.815042031 +0000 UTC m=+2677.924014644 I0617 03:42:20.845978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-r6wbf" condition "Ready" to 2026-06-17 03:42:20.845963641 +0000 UTC m=+2677.954936254 I0617 03:42:20.881347 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:42:20.881324271 +0000 UTC m=+2677.990296874 I0617 03:42:20.908186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:42:20.908513 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:42:20.908502446 +0000 UTC m=+2678.017475059 I0617 03:42:20.929574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:34.063423 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-17 03:45:34.063409147 +0000 UTC m=+2871.172381760 I0617 03:45:34.063841 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:45:34.063863 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-17 03:45:34.063859457 +0000 UTC m=+2871.172832070 E0617 03:45:34.086371 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0617 03:45:34.086638 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-06-17 03:45:34.086628382 +0000 UTC m=+2871.195601015 I0617 03:45:34.086667 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0617 03:45:34.090684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:34.090929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:45:34.090973 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-17 03:45:34.090962831 +0000 UTC m=+2871.199935464 E0617 03:45:34.125246 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0617 03:45:34.125435 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0617 03:45:34.125485 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0617 03:45:34.125543 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0617 03:45:34.197871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:34.203783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-vf2zf" condition "Approved" to 2026-06-17 03:45:34.203767315 +0000 UTC m=+2871.312739948 I0617 03:45:34.224860 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-vf2zf" condition "Ready" to 2026-06-17 03:45:34.224849992 +0000 UTC m=+2871.333822605 I0617 03:45:34.261776 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:34.261765198 +0000 UTC m=+2871.370737811 I0617 03:45:34.294422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:34.294818 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:34.294809846 +0000 UTC m=+2871.403782479 I0617 03:45:34.352835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:34.819159 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-17 03:45:34.819142485 +0000 UTC m=+2871.928115098 I0617 03:45:34.819462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:45:34.819488 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-17 03:45:34.819481873 +0000 UTC m=+2871.928454486 E0617 03:45:34.839198 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0617 03:45:34.839235 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-06-17 03:45:34.83922872 +0000 UTC m=+2871.948201323 I0617 03:45:34.839272 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0617 03:45:34.842037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:34.842139 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-17 03:45:34.842128586 +0000 UTC m=+2871.951101199 E0617 03:45:34.850371 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0617 03:45:34.850521 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0617 03:45:34.850562 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0617 03:45:34.850630 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0617 03:45:34.883522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:35.032678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-nqcgt" condition "Approved" to 2026-06-17 03:45:35.032655478 +0000 UTC m=+2872.141628141 I0617 03:45:35.181857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-nqcgt" condition "Ready" to 2026-06-17 03:45:35.181842926 +0000 UTC m=+2872.290815549 I0617 03:45:35.369634 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:35.369623176 +0000 UTC m=+2872.478595789 I0617 03:45:35.417698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:35.418219 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:35.418209337 +0000 UTC m=+2872.527181970 I0617 03:45:35.432972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:35.527168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:35.624662 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-17 03:45:35.624648159 +0000 UTC m=+2872.733620772 I0617 03:45:35.624823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:45:35.624868 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-17 03:45:35.624859844 +0000 UTC m=+2872.733832447 I0617 03:45:35.666363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:35.666460 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-17 03:45:35.666452486 +0000 UTC m=+2872.775425109 I0617 03:45:35.754698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:35.967735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-tkrgl" condition "Approved" to 2026-06-17 03:45:35.967722336 +0000 UTC m=+2873.076694949 I0617 03:45:36.049552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-tkrgl" condition "Ready" to 2026-06-17 03:45:36.049533248 +0000 UTC m=+2873.158505891 I0617 03:45:39.126300 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:39.126286377 +0000 UTC m=+2876.235259020 I0617 03:45:39.147492 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-tkrgl" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:39.147476627 +0000 UTC m=+2876.256449270 I0617 03:45:39.181668 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:39.181653131 +0000 UTC m=+2876.290625734 I0617 03:45:39.209011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:39.209320 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:39.209312507 +0000 UTC m=+2876.318285120 I0617 03:45:39.235338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:45:39.851736 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:45:39.851722779 +0000 UTC m=+2876.960695422 I0617 03:48:17.550954 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-17 03:48:17.550938925 +0000 UTC m=+3034.659911528 I0617 03:48:17.551326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:48:17.551344 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-17 03:48:17.551341274 +0000 UTC m=+3034.660313877 I0617 03:48:17.575040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:48:17.575131 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-17 03:48:17.575123823 +0000 UTC m=+3034.684096436 I0617 03:48:17.854825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:48:17.888502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-8xbsb" condition "Approved" to 2026-06-17 03:48:17.88845868 +0000 UTC m=+3034.997431293 I0617 03:48:17.908927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-8xbsb" condition "Ready" to 2026-06-17 03:48:17.908917744 +0000 UTC m=+3035.017890367 I0617 03:48:17.935036 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:48:17.935019766 +0000 UTC m=+3035.043992369 I0617 03:48:17.961370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:04.662432 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-17 03:49:04.662412459 +0000 UTC m=+3081.771385102 I0617 03:49:04.682057 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-17 03:49:04.682034353 +0000 UTC m=+3081.791007016 I0617 03:49:04.682488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:04.682532 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-17 03:49:04.682521674 +0000 UTC m=+3081.791494317 I0617 03:49:04.700554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:04.700624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:04.700639 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-17 03:49:04.700633475 +0000 UTC m=+3081.809606088 E0617 03:49:04.710725 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0617 03:49:04.759159 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-17 03:49:04.75914316 +0000 UTC m=+3081.868115783 I0617 03:49:04.781773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:04.781782 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-17 03:49:04.781768562 +0000 UTC m=+3081.890741175 I0617 03:49:04.781817 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-17 03:49:04.781808523 +0000 UTC m=+3081.890781136 I0617 03:49:04.797507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:04.797575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:04.797683 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-17 03:49:04.79758876 +0000 UTC m=+3081.906561373 E0617 03:49:04.912924 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0617 03:49:04.952030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9pgtd" condition "Approved" to 2026-06-17 03:49:04.952020478 +0000 UTC m=+3082.060993081 I0617 03:49:04.986569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9pgtd" condition "Ready" to 2026-06-17 03:49:04.986551701 +0000 UTC m=+3082.095524334 I0617 03:49:05.026335 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:49:05.026320132 +0000 UTC m=+3082.135292735 I0617 03:49:05.052359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:05.052666 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:49:05.052658308 +0000 UTC m=+3082.161630911 I0617 03:49:05.085377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:05.624865 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-17 03:49:05.62485081 +0000 UTC m=+3082.733823423 I0617 03:49:05.649546 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-17 03:49:05.649530768 +0000 UTC m=+3082.758503381 I0617 03:49:05.650287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:05.650343 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-17 03:49:05.650333487 +0000 UTC m=+3082.759306100 I0617 03:49:05.665793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:05.665882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:05.665904 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-17 03:49:05.665897349 +0000 UTC m=+3082.774869962 I0617 03:49:05.865246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-kvdwv" condition "Approved" to 2026-06-17 03:49:05.865226933 +0000 UTC m=+3082.974199546 I0617 03:49:05.884884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-kvdwv" condition "Ready" to 2026-06-17 03:49:05.884872538 +0000 UTC m=+3082.993845141 I0617 03:49:05.915262 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:49:05.915245886 +0000 UTC m=+3083.024218489 I0617 03:49:05.941099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:05.941562 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:49:05.941552543 +0000 UTC m=+3083.050525166 I0617 03:49:05.946240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:05.961524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:06.134203 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-17 03:49:06.134192756 +0000 UTC m=+3083.243165359 I0617 03:49:06.157713 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-17 03:49:06.157692999 +0000 UTC m=+3083.266665642 I0617 03:49:06.157764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:06.157974 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-17 03:49:06.157797141 +0000 UTC m=+3083.266769764 I0617 03:49:06.173500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:06.173636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:06.175568 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-17 03:49:06.175557193 +0000 UTC m=+3083.284529836 I0617 03:49:06.634459 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-17 03:49:06.634440487 +0000 UTC m=+3083.743413130 I0617 03:49:06.652060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-b4ddk" condition "Approved" to 2026-06-17 03:49:06.652051196 +0000 UTC m=+3083.761023789 I0617 03:49:06.653567 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-17 03:49:06.653553151 +0000 UTC m=+3083.762525764 I0617 03:49:06.653573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:49:06.653613 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-17 03:49:06.653605622 +0000 UTC m=+3083.762578225 I0617 03:49:06.680158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:06.680216 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-17 03:49:06.680208114 +0000 UTC m=+3083.789180737 I0617 03:49:06.684753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-b4ddk" condition "Ready" to 2026-06-17 03:49:06.684736897 +0000 UTC m=+3083.793709510 I0617 03:49:06.719525 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:49:06.719515254 +0000 UTC m=+3083.828487867 I0617 03:49:06.746998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:06.747337 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:49:06.747330534 +0000 UTC m=+3083.856303157 I0617 03:49:06.854754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:06.978494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:07.131257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-jbb79" condition "Approved" to 2026-06-17 03:49:07.13124047 +0000 UTC m=+3084.240213103 I0617 03:49:07.231779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-jbb79" condition "Ready" to 2026-06-17 03:49:07.231769868 +0000 UTC m=+3084.340742481 I0617 03:49:07.739174 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:49:07.739159021 +0000 UTC m=+3084.848131654 I0617 03:49:07.825901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:49:07.826622 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:49:07.826610832 +0000 UTC m=+3084.935583475 I0617 03:49:08.034550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:19.291471 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-17 03:52:19.291457129 +0000 UTC m=+3276.400429742 I0617 03:52:19.292390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:52:19.292435 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-17 03:52:19.292426971 +0000 UTC m=+3276.401399584 I0617 03:52:19.317596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:19.317702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:52:19.317855 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-17 03:52:19.317829106 +0000 UTC m=+3276.426801729 I0617 03:52:19.580212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bp7n8" condition "Approved" to 2026-06-17 03:52:19.580203669 +0000 UTC m=+3276.689176262 I0617 03:52:19.600781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-bp7n8" condition "Ready" to 2026-06-17 03:52:19.600766526 +0000 UTC m=+3276.709739139 I0617 03:52:19.641194 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:52:19.64118083 +0000 UTC m=+3276.750153433 I0617 03:52:19.664603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:19.665023 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:52:19.665015991 +0000 UTC m=+3276.773988604 I0617 03:52:19.679305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:19.682848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:19.683209 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:52:19.683200962 +0000 UTC m=+3276.792173575 I0617 03:52:19.685333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:22.203940 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-17 03:52:22.20392326 +0000 UTC m=+3279.312895893 I0617 03:52:22.204338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0617 03:52:22.204363 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-06-17 03:52:22.204356489 +0000 UTC m=+3279.313329122 I0617 03:52:22.255019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:22.255142 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-17 03:52:22.255134979 +0000 UTC m=+3279.364107592 I0617 03:52:22.594451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:22.683476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-69c72" condition "Approved" to 2026-06-17 03:52:22.683434371 +0000 UTC m=+3279.792406984 I0617 03:52:22.705268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-69c72" condition "Ready" to 2026-06-17 03:52:22.705256756 +0000 UTC m=+3279.814229359 I0617 03:52:22.740430 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:52:22.740417943 +0000 UTC m=+3279.849390546 I0617 03:52:22.765884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:22.766433 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:52:22.766424241 +0000 UTC m=+3279.875396854 I0617 03:52:22.794606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0617 03:52:22.795104 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-17 03:52:22.79509415 +0000 UTC m=+3279.904066763