I0624 00:56:40.701660 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0624 00:56:40.701804 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0624 00:56:40.701904 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0624 00:56:40.709114 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0624 00:56:40.709652 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0624 00:56:40.709663 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0624 00:56:40.709676 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0624 00:56:40.713019 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0624 00:56:40.764534 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0624 00:56:40.770488 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0624 00:56:40.774346 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0624 00:56:40.774397 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0624 00:56:40.774414 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0624 00:56:40.774430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0624 00:56:40.780872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0624 00:56:40.783649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0624 00:56:40.786125 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0624 00:56:40.788574 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0624 00:56:40.788623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0624 00:56:40.791195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0624 00:56:40.793338 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0624 00:56:40.796017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0624 00:56:40.800342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0624 00:56:40.803020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0624 00:56:40.805533 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0624 00:56:40.808016 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0624 00:56:40.809752 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0624 00:56:40.809773 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0624 00:56:40.809824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0624 00:56:40.811756 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0624 00:56:40.813574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0624 00:56:40.815198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0624 00:56:40.818528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0624 00:56:40.822619 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.822804 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.822883 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.823219 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.842517 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.861428 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.878742 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.891431 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.906427 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:40.907848 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0624 00:56:53.096720 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-24 00:56:53.09670553 +0000 UTC m=+12.426447597 I0624 00:56:53.924131 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-24 00:56:53.92411701 +0000 UTC m=+13.253859077 I0624 00:56:53.924380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 00:56:53.924439 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 00:56:53.924428447 +0000 UTC m=+13.254170514 E0624 00:56:53.973476 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 00:56:53.973535 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-24 00:56:53.973529301 +0000 UTC m=+13.303271338 E0624 00:56:53.973554 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 00:56:53.981138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 00:56:53.981211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 00:56:53.981228 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-24 00:56:53.981223072 +0000 UTC m=+13.310965109 E0624 00:56:54.005012 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0624 00:56:54.005763 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 00:56:54.005880 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 00:56:54.006174 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0624 00:56:54.057343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 00:56:54.057327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-58qr9" condition "Approved" to 2026-06-24 00:56:54.057314619 +0000 UTC m=+13.387056666 I0624 00:56:54.097505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-58qr9" condition "Ready" to 2026-06-24 00:56:54.097489913 +0000 UTC m=+13.427231980 I0624 00:56:54.127916 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 00:56:54.127902908 +0000 UTC m=+13.457644955 I0624 00:56:54.153615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 00:56:54.154128 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 00:56:54.154117494 +0000 UTC m=+13.483859561 I0624 00:56:54.182243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 00:56:59.005919 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 00:56:59.005906106 +0000 UTC m=+18.335648183 I0624 00:57:22.711154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 00:57:22.711193 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-24 00:57:22.711166428 +0000 UTC m=+42.040908475 I0624 00:57:22.711218 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 00:57:22.711204119 +0000 UTC m=+42.040946196 I0624 00:57:22.723834 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-24 00:57:22.723821186 +0000 UTC m=+42.053563223 I0624 00:57:22.733597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 00:57:22.733695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 00:57:22.733728 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-24 00:57:22.73372079 +0000 UTC m=+42.063462867 I0624 00:57:22.891439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 00:57:22.900626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dpfqb" condition "Approved" to 2026-06-24 00:57:22.900611696 +0000 UTC m=+42.230353763 I0624 00:57:22.936690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dpfqb" condition "Ready" to 2026-06-24 00:57:22.936675396 +0000 UTC m=+42.266417473 I0624 00:57:22.970096 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 00:57:22.970071834 +0000 UTC m=+42.299813881 I0624 00:57:22.993219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:02:32.163468 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-177.nip.io-tls" condition "Ready" to 2026-06-24 01:02:32.163441354 +0000 UTC m=+351.493183431 I0624 01:02:32.164013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-177.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:02:32.164044 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-177.nip.io-tls" condition "Issuing" to 2026-06-24 01:02:32.164037218 +0000 UTC m=+351.493779295 I0624 01:02:32.183518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-177.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-177.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:02:32.183570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-177.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:02:32.183583 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-177.nip.io-tls" condition "Issuing" to 2026-06-24 01:02:32.183578159 +0000 UTC m=+351.513320206 I0624 01:02:32.530320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-177.nip.io-tls-x8x8h" condition "Approved" to 2026-06-24 01:02:32.530301347 +0000 UTC m=+351.860043384 I0624 01:02:32.554075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-177.nip.io-tls-x8x8h" condition "Ready" to 2026-06-24 01:02:32.554059397 +0000 UTC m=+351.883801464 I0624 01:02:32.583376 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-177.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:02:32.583359289 +0000 UTC m=+351.913101356 I0624 01:02:32.602225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-177.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-177.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:03:40.798402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:03:40.798475 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 01:03:40.798466057 +0000 UTC m=+420.128208124 I0624 01:03:40.798569 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-24 01:03:40.798544969 +0000 UTC m=+420.128287046 E0624 01:03:40.811234 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 01:03:40.811267 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-24 01:03:40.8112612 +0000 UTC m=+420.141003247 E0624 01:03:40.811306 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0624 01:03:40.813137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:03:40.813243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:03:40.813277 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-24 01:03:40.813269517 +0000 UTC m=+420.143011564 E0624 01:03:40.837632 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0624 01:03:40.837723 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 01:03:40.837752 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0624 01:03:40.837796 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0624 01:03:40.876783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:03:40.877644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-skd2n" condition "Approved" to 2026-06-24 01:03:40.877623688 +0000 UTC m=+420.207365735 I0624 01:03:40.893138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-skd2n" condition "Ready" to 2026-06-24 01:03:40.893121744 +0000 UTC m=+420.222863821 I0624 01:03:40.912910 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:03:40.912897401 +0000 UTC m=+420.242639468 I0624 01:03:40.928544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:03:40.928830 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:03:40.928823107 +0000 UTC m=+420.258565164 I0624 01:03:40.945952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:03:40.946984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:03:40.947254 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:03:40.947244363 +0000 UTC m=+420.276986440 I0624 01:03:45.838100 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:03:45.838087072 +0000 UTC m=+425.167829129 I0624 01:04:25.057577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:04:25.057611 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-24 01:04:25.057603596 +0000 UTC m=+464.387345633 I0624 01:04:25.057991 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 01:04:25.057973404 +0000 UTC m=+464.387715451 I0624 01:04:25.059657 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-24 01:04:25.059646524 +0000 UTC m=+464.389388581 I0624 01:04:25.060016 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-24 01:04:25.060009273 +0000 UTC m=+464.389751330 I0624 01:04:25.060304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:04:25.060335 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 01:04:25.0603299 +0000 UTC m=+464.390071957 I0624 01:04:25.060598 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:04:25.060620 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 01:04:25.060615957 +0000 UTC m=+464.390358004 I0624 01:04:25.096440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:25.096506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:04:25.096529 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-24 01:04:25.096522355 +0000 UTC m=+464.426264412 I0624 01:04:25.097053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:25.097091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:04:25.097106 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-24 01:04:25.097101549 +0000 UTC m=+464.426843596 I0624 01:04:25.100095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:25.100152 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-24 01:04:25.100147601 +0000 UTC m=+464.429889648 I0624 01:04:25.228674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:25.253789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:25.265854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-krtvb" condition "Approved" to 2026-06-24 01:04:25.265842536 +0000 UTC m=+464.595584603 I0624 01:04:25.268132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-np7p4" condition "Approved" to 2026-06-24 01:04:25.26812323 +0000 UTC m=+464.597865297 I0624 01:04:25.268386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:25.274239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rds29" condition "Approved" to 2026-06-24 01:04:25.274224414 +0000 UTC m=+464.603966491 I0624 01:04:25.284479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-np7p4" condition "Ready" to 2026-06-24 01:04:25.284467896 +0000 UTC m=+464.614209943 I0624 01:04:25.286447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-krtvb" condition "Ready" to 2026-06-24 01:04:25.286429802 +0000 UTC m=+464.616171839 I0624 01:04:25.291377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rds29" condition "Ready" to 2026-06-24 01:04:25.291367669 +0000 UTC m=+464.621109706 I0624 01:04:25.593749 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:04:25.593739773 +0000 UTC m=+464.923481810 I0624 01:04:25.646362 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:04:25.646344576 +0000 UTC m=+464.976086653 I0624 01:04:25.800771 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:04:25.800762055 +0000 UTC m=+465.130504102 I0624 01:04:25.893362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:25.893682 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:04:25.89367597 +0000 UTC m=+465.223418017 I0624 01:04:26.033782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:26.034190 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:04:26.0341833 +0000 UTC m=+465.363925337 I0624 01:04:26.143123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:26.143402 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:04:26.143396101 +0000 UTC m=+465.473138148 I0624 01:04:26.594044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:26.694079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:26.744140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:26.792769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:36.506344 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" condition "Ready" to 2026-06-24 01:04:36.506330072 +0000 UTC m=+475.836072119 I0624 01:04:36.506456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:04:36.506501 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" condition "Issuing" to 2026-06-24 01:04:36.506490155 +0000 UTC m=+475.836232222 I0624 01:04:36.521150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:36.521330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:04:36.521360 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" condition "Issuing" to 2026-06-24 01:04:36.521350947 +0000 UTC m=+475.851093014 I0624 01:04:36.706866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9ghfm-qqmcn" condition "Approved" to 2026-06-24 01:04:36.70685679 +0000 UTC m=+476.036598817 I0624 01:04:36.724336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9ghfm-qqmcn" condition "Ready" to 2026-06-24 01:04:36.724327003 +0000 UTC m=+476.054069040 I0624 01:04:36.754620 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:04:36.754594698 +0000 UTC m=+476.084336745 I0624 01:04:37.071511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:04:37.072109 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:04:37.07209944 +0000 UTC m=+476.401841487 I0624 01:04:37.415810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9ghfm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:05:06.489608 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 01:05:06.489592591 +0000 UTC m=+505.819334668 I0624 01:05:06.489619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:05:06.489826 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-24 01:05:06.489808386 +0000 UTC m=+505.819550433 I0624 01:05:06.504998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:05:06.505079 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-24 01:05:06.505071557 +0000 UTC m=+505.834813594 I0624 01:05:06.781019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:05:06.816716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8gvl7" condition "Approved" to 2026-06-24 01:05:06.816702659 +0000 UTC m=+506.146444736 I0624 01:05:06.831920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8gvl7" condition "Ready" to 2026-06-24 01:05:06.831911578 +0000 UTC m=+506.161653625 I0624 01:05:06.858155 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:05:06.858139757 +0000 UTC m=+506.187881834 I0624 01:05:06.874115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:05:06.874798 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:05:06.874788189 +0000 UTC m=+506.204530266 I0624 01:05:06.896952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:08:15.949204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:08:15.949258 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-24 01:08:15.949251586 +0000 UTC m=+695.278993623 I0624 01:08:15.949426 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 01:08:15.94942209 +0000 UTC m=+695.279164127 I0624 01:08:15.964747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:08:15.964851 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-24 01:08:15.964844413 +0000 UTC m=+695.294586460 I0624 01:08:16.191117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:08:16.217399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wn67f" condition "Approved" to 2026-06-24 01:08:16.217387789 +0000 UTC m=+695.547129836 I0624 01:08:16.238002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wn67f" condition "Ready" to 2026-06-24 01:08:16.237991695 +0000 UTC m=+695.567733742 I0624 01:08:16.265820 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:08:16.265810181 +0000 UTC m=+695.595552228 I0624 01:08:16.290093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:08:16.290387 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:08:16.290381831 +0000 UTC m=+695.620123868 I0624 01:08:16.292933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:08:16.308313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:10:37.196650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:10:37.196820 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-24 01:10:37.196784287 +0000 UTC m=+836.526526364 I0624 01:10:37.197842 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-24 01:10:37.197831772 +0000 UTC m=+836.527573849 I0624 01:10:37.216376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:10:37.216566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:10:37.216634 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-24 01:10:37.216625776 +0000 UTC m=+836.546367843 I0624 01:10:37.378760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:10:37.383730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rlsp4" condition "Approved" to 2026-06-24 01:10:37.383720918 +0000 UTC m=+836.713462955 I0624 01:10:37.405945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rlsp4" condition "Ready" to 2026-06-24 01:10:37.405933274 +0000 UTC m=+836.735675311 I0624 01:10:37.435674 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:10:37.435662827 +0000 UTC m=+836.765404894 I0624 01:10:37.463251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:10:37.463677 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:10:37.46367148 +0000 UTC m=+836.793413507 I0624 01:10:37.472568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:10:37.486780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:11:41.049383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:11:41.049468 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-24 01:11:41.049457879 +0000 UTC m=+900.379199926 I0624 01:11:41.049333 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-24 01:11:41.049278755 +0000 UTC m=+900.379020832 I0624 01:11:41.093500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:11:41.093589 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-24 01:11:41.093578861 +0000 UTC m=+900.423320928 I0624 01:11:41.197465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:11:41.244839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-w2q55" condition "Approved" to 2026-06-24 01:11:41.244790224 +0000 UTC m=+900.574532291 I0624 01:11:41.280755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-w2q55" condition "Ready" to 2026-06-24 01:11:41.280742183 +0000 UTC m=+900.610484250 I0624 01:11:41.342336 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:11:41.342322078 +0000 UTC m=+900.672064145 I0624 01:11:41.383904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:11:41.457590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:14:41.468367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:14:41.468376 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-24 01:14:41.468341441 +0000 UTC m=+1080.798083508 I0624 01:14:41.468453 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-24 01:14:41.468442933 +0000 UTC m=+1080.798185000 I0624 01:14:41.486927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:14:41.487158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:14:41.487187 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-24 01:14:41.487179626 +0000 UTC m=+1080.816921663 I0624 01:14:41.745517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:14:41.750470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-cz86t" condition "Approved" to 2026-06-24 01:14:41.750459186 +0000 UTC m=+1081.080201213 I0624 01:14:41.770260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-cz86t" condition "Ready" to 2026-06-24 01:14:41.770245133 +0000 UTC m=+1081.099987190 I0624 01:14:41.799503 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:14:41.799491034 +0000 UTC m=+1081.129233081 I0624 01:14:41.821223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:14:41.821705 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:14:41.821696339 +0000 UTC m=+1081.151438386 I0624 01:14:41.829487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:14:41.841882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:20:54.608950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:20:54.608936 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-24 01:20:54.60890283 +0000 UTC m=+1453.938644887 I0624 01:20:54.608999 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-24 01:20:54.608995143 +0000 UTC m=+1453.938737180 I0624 01:20:54.626586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:20:54.626804 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-24 01:20:54.626792813 +0000 UTC m=+1453.956534850 I0624 01:20:54.836011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:20:54.871117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-c57fc" condition "Approved" to 2026-06-24 01:20:54.871094254 +0000 UTC m=+1454.200836291 I0624 01:20:54.894989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-c57fc" condition "Ready" to 2026-06-24 01:20:54.894978129 +0000 UTC m=+1454.224720176 I0624 01:20:54.946624 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:20:54.946605319 +0000 UTC m=+1454.276347366 I0624 01:20:54.972722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:22:19.534483 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-24 01:22:19.534464269 +0000 UTC m=+1538.864206346 I0624 01:22:19.534564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:22:19.534791 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-24 01:22:19.534763956 +0000 UTC m=+1538.864506003 I0624 01:22:19.553670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:22:19.553769 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-24 01:22:19.553758485 +0000 UTC m=+1538.883500532 I0624 01:22:19.718934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:22:19.749626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-skztf" condition "Approved" to 2026-06-24 01:22:19.749609549 +0000 UTC m=+1539.079351606 I0624 01:22:19.801530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-skztf" condition "Ready" to 2026-06-24 01:22:19.801511777 +0000 UTC m=+1539.131253814 I0624 01:22:19.840343 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:22:19.840329796 +0000 UTC m=+1539.170071833 I0624 01:22:19.858521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.114719 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-24 01:23:19.114674494 +0000 UTC m=+1598.444416561 I0624 01:23:19.114782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:23:19.114843 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-24 01:23:19.114836158 +0000 UTC m=+1598.444578225 I0624 01:23:19.132688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.132765 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-24 01:23:19.132758432 +0000 UTC m=+1598.462500479 I0624 01:23:19.153168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.182189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-5gqlv" condition "Approved" to 2026-06-24 01:23:19.182175351 +0000 UTC m=+1598.511917398 I0624 01:23:19.201947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-5gqlv" condition "Ready" to 2026-06-24 01:23:19.201934128 +0000 UTC m=+1598.531676175 I0624 01:23:19.230977 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:23:19.230963835 +0000 UTC m=+1598.560705882 I0624 01:23:19.250545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.298463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.760056 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-24 01:23:19.760040733 +0000 UTC m=+1599.089782770 I0624 01:23:19.760133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:23:19.760166 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-24 01:23:19.760158355 +0000 UTC m=+1599.089900402 I0624 01:23:19.778006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.778092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:23:19.778108 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-24 01:23:19.77810325 +0000 UTC m=+1599.107845287 I0624 01:23:19.819310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.827976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lbjns" condition "Approved" to 2026-06-24 01:23:19.82796514 +0000 UTC m=+1599.157707187 I0624 01:23:19.846979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lbjns" condition "Ready" to 2026-06-24 01:23:19.846967379 +0000 UTC m=+1599.176709426 I0624 01:23:19.869346 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:23:19.869331448 +0000 UTC m=+1599.199073495 I0624 01:23:19.886791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.887074 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:23:19.887066488 +0000 UTC m=+1599.216808565 I0624 01:23:19.907122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.907473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:23:19.907622 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:23:19.907616354 +0000 UTC m=+1599.237358391 I0624 01:23:20.450883 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-06-24 01:23:20.450872497 +0000 UTC m=+1599.780614544 I0624 01:23:21.085310 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-06-24 01:23:21.085295397 +0000 UTC m=+1600.415037464 I0624 01:24:06.384479 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-24 01:24:06.384464435 +0000 UTC m=+1645.714206472 I0624 01:24:06.386188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:24:06.386230 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-24 01:24:06.386221077 +0000 UTC m=+1645.715963124 I0624 01:24:06.417129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:24:06.417230 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-24 01:24:06.41722237 +0000 UTC m=+1645.746964417 I0624 01:24:06.850264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:24:06.901954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-bhzkc" condition "Approved" to 2026-06-24 01:24:06.901942148 +0000 UTC m=+1646.231684195 I0624 01:24:06.924979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-bhzkc" condition "Ready" to 2026-06-24 01:24:06.924960333 +0000 UTC m=+1646.254702400 I0624 01:24:06.964608 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:24:06.96459281 +0000 UTC m=+1646.294334857 I0624 01:24:06.985127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:24:06.985827 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:24:06.985818923 +0000 UTC m=+1646.315560970 I0624 01:24:07.005684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:24:07.006676 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:24:07.006664876 +0000 UTC m=+1646.336406953 I0624 01:26:35.190353 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-24 01:26:35.190310216 +0000 UTC m=+1794.520052263 I0624 01:26:35.190605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:26:35.190629 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-24 01:26:35.190625434 +0000 UTC m=+1794.520367481 I0624 01:26:35.210850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:35.210930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:26:35.210950 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-24 01:26:35.210942614 +0000 UTC m=+1794.540684691 I0624 01:26:35.469979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-l6x6q" condition "Approved" to 2026-06-24 01:26:35.469954038 +0000 UTC m=+1794.799696105 I0624 01:26:35.487458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-l6x6q" condition "Ready" to 2026-06-24 01:26:35.487445011 +0000 UTC m=+1794.817187058 I0624 01:26:35.525742 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:26:35.525728906 +0000 UTC m=+1794.855470953 I0624 01:26:35.546992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:35.547220 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:26:35.547215714 +0000 UTC m=+1794.876957741 I0624 01:26:35.581931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:35.582058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:35.582386 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:26:35.582376905 +0000 UTC m=+1794.912118952 I0624 01:26:36.704535 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-24 01:26:36.704521634 +0000 UTC m=+1796.034263701 I0624 01:26:36.704857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:26:36.704885 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-06-24 01:26:36.704879533 +0000 UTC m=+1796.034621600 I0624 01:26:36.720720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:36.720787 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-24 01:26:36.720779048 +0000 UTC m=+1796.050521095 I0624 01:26:36.817095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:36.849814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-kh2gg" condition "Approved" to 2026-06-24 01:26:36.849799418 +0000 UTC m=+1796.179541485 I0624 01:26:36.869285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-kh2gg" condition "Ready" to 2026-06-24 01:26:36.869273999 +0000 UTC m=+1796.199016046 I0624 01:26:36.897821 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:26:36.897798463 +0000 UTC m=+1796.227540510 I0624 01:26:36.924084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:36.924559 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:26:36.924547786 +0000 UTC m=+1796.254289833 I0624 01:26:36.932140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:36.949251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:26:36.949595 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:26:36.949587958 +0000 UTC m=+1796.279329995 I0624 01:29:40.966028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:29:40.966086 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-24 01:29:40.966079389 +0000 UTC m=+1980.295821436 I0624 01:29:40.966080 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-24 01:29:40.966061329 +0000 UTC m=+1980.295803406 I0624 01:29:40.983733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:29:40.983934 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-24 01:29:40.983918209 +0000 UTC m=+1980.313660326 I0624 01:29:41.321368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:29:41.352603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-ztfdc" condition "Approved" to 2026-06-24 01:29:41.352592766 +0000 UTC m=+1980.682334813 I0624 01:29:41.370743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-ztfdc" condition "Ready" to 2026-06-24 01:29:41.370731764 +0000 UTC m=+1980.700473811 I0624 01:29:41.404442 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:29:41.404427601 +0000 UTC m=+1980.734169658 I0624 01:29:41.425379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:29:41.425770 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:29:41.425764885 +0000 UTC m=+1980.755506912 I0624 01:29:41.444120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:30:29.736281 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lnx82-api" condition "Ready" to 2026-06-24 01:30:29.736266214 +0000 UTC m=+2029.066008261 I0624 01:30:29.736613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lnx82-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:30:29.736634 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lnx82-api" condition "Issuing" to 2026-06-24 01:30:29.736630503 +0000 UTC m=+2029.066372540 I0624 01:30:29.737497 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lnx82-vnc" condition "Ready" to 2026-06-24 01:30:29.737491823 +0000 UTC m=+2029.067233860 I0624 01:30:29.737634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lnx82-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:30:29.737652 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lnx82-vnc" condition "Issuing" to 2026-06-24 01:30:29.737648897 +0000 UTC m=+2029.067390944 I0624 01:30:29.761129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-lnx82-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lnx82-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:30:29.761260 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lnx82-vnc" condition "Ready" to 2026-06-24 01:30:29.761252713 +0000 UTC m=+2029.090994750 I0624 01:30:29.763279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lnx82-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lnx82-api\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:30:29.763446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lnx82-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:30:29.763474 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lnx82-api" condition "Issuing" to 2026-06-24 01:30:29.763465875 +0000 UTC m=+2029.093207912 I0624 01:30:29.898923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-lnx82-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lnx82-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:30:29.927049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lnx82-vnc-gf5ph" condition "Approved" to 2026-06-24 01:30:29.927037169 +0000 UTC m=+2029.256779206 I0624 01:30:29.950229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lnx82-vnc-gf5ph" condition "Ready" to 2026-06-24 01:30:29.950220376 +0000 UTC m=+2029.279962403 I0624 01:30:29.985185 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lnx82-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:30:29.985163149 +0000 UTC m=+2029.314905186 I0624 01:30:30.007097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-lnx82-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lnx82-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:30:30.007521 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lnx82-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:30:30.007511826 +0000 UTC m=+2029.337253913 I0624 01:30:30.022970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-lnx82-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lnx82-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:30:30.031058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-lnx82-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lnx82-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:30:30.031389 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lnx82-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:30:30.031380758 +0000 UTC m=+2029.361122805 I0624 01:30:30.116432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-lnx82-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lnx82-api\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:30:30.123130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lnx82-api-kb5c4" condition "Approved" to 2026-06-24 01:30:30.123111219 +0000 UTC m=+2029.452853296 I0624 01:30:30.139259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lnx82-api-kb5c4" condition "Ready" to 2026-06-24 01:30:30.13925019 +0000 UTC m=+2029.468992227 I0624 01:30:30.165060 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lnx82-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:30:30.165046928 +0000 UTC m=+2029.494788975 I0624 01:30:30.181515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-lnx82-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lnx82-api\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:32:32.754367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:32:32.754406 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-06-24 01:32:32.754398181 +0000 UTC m=+2152.084140248 I0624 01:32:32.754365 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-06-24 01:32:32.754331739 +0000 UTC m=+2152.084073796 I0624 01:32:32.772273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:32:32.772406 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:32:32.772435 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-06-24 01:32:32.772427285 +0000 UTC m=+2152.102169352 I0624 01:32:32.911463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:32:32.922831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-7kg9k" condition "Approved" to 2026-06-24 01:32:32.922823158 +0000 UTC m=+2152.252565205 I0624 01:32:32.942302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-7kg9k" condition "Ready" to 2026-06-24 01:32:32.942291427 +0000 UTC m=+2152.272033474 I0624 01:32:32.964771 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:32:32.964753546 +0000 UTC m=+2152.294495593 I0624 01:32:32.988021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:36:05.583897 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-24 01:36:05.583878096 +0000 UTC m=+2364.913620163 I0624 01:36:05.583870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:36:05.584003 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-24 01:36:05.583995109 +0000 UTC m=+2364.913737156 I0624 01:36:05.601903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:36:05.602082 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-24 01:36:05.602073656 +0000 UTC m=+2364.931815703 I0624 01:36:05.886560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:36:05.923018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-5nnkb" condition "Approved" to 2026-06-24 01:36:05.922997888 +0000 UTC m=+2365.252739955 I0624 01:36:05.947656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-5nnkb" condition "Ready" to 2026-06-24 01:36:05.94764404 +0000 UTC m=+2365.277386117 I0624 01:36:05.980915 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:36:05.980901445 +0000 UTC m=+2365.310643492 I0624 01:36:06.002773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:36:06.059967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:36:07.123327 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-24 01:36:07.123304121 +0000 UTC m=+2366.453046188 I0624 01:36:07.123694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:36:07.123763 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-24 01:36:07.123746842 +0000 UTC m=+2366.453488919 I0624 01:36:07.140304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:36:07.140523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:36:07.140556 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-24 01:36:07.140547978 +0000 UTC m=+2366.470290025 I0624 01:36:07.537004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:36:07.544973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-jfzch" condition "Approved" to 2026-06-24 01:36:07.54496057 +0000 UTC m=+2366.874702617 I0624 01:36:07.562299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-jfzch" condition "Ready" to 2026-06-24 01:36:07.562289588 +0000 UTC m=+2366.892031625 I0624 01:36:07.593579 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:36:07.593558586 +0000 UTC m=+2366.923300643 I0624 01:36:07.615394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:36:07.615687 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:36:07.615680338 +0000 UTC m=+2366.945422395 I0624 01:36:07.643900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:16.281295 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-24 01:38:16.281234963 +0000 UTC m=+2495.610977040 I0624 01:38:16.281794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:38:16.281828 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-24 01:38:16.281821607 +0000 UTC m=+2495.611563674 E0624 01:38:16.315280 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0624 01:38:16.315368 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-06-24 01:38:16.315359478 +0000 UTC m=+2495.645101545 I0624 01:38:16.315395 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0624 01:38:16.318635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:16.318728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:38:16.318766 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-24 01:38:16.318759368 +0000 UTC m=+2495.648501445 E0624 01:38:16.327448 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0624 01:38:16.327548 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0624 01:38:16.327582 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0624 01:38:16.327642 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0624 01:38:16.361959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-79wt2" condition "Approved" to 2026-06-24 01:38:16.361943467 +0000 UTC m=+2495.691685514 I0624 01:38:16.382151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-79wt2" condition "Ready" to 2026-06-24 01:38:16.382138853 +0000 UTC m=+2495.711880900 I0624 01:38:16.437637 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:38:16.437622352 +0000 UTC m=+2495.767364399 I0624 01:38:16.457825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:16.515452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:16.970321 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-24 01:38:16.970303061 +0000 UTC m=+2496.300045128 I0624 01:38:16.970803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:38:16.970832 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-24 01:38:16.970826244 +0000 UTC m=+2496.300568311 E0624 01:38:16.985367 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0624 01:38:16.985401 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-06-24 01:38:16.985393647 +0000 UTC m=+2496.315135694 I0624 01:38:16.985442 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0624 01:38:16.992141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:16.992236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:38:16.992258 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-24 01:38:16.992252999 +0000 UTC m=+2496.321995046 E0624 01:38:16.995603 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0624 01:38:16.995824 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0624 01:38:16.995867 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0624 01:38:16.995921 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0624 01:38:17.057388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:17.061790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-5sjvf" condition "Approved" to 2026-06-24 01:38:17.06177992 +0000 UTC m=+2496.391521967 I0624 01:38:17.080217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-5sjvf" condition "Ready" to 2026-06-24 01:38:17.080206995 +0000 UTC m=+2496.409949042 I0624 01:38:17.106688 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:38:17.106672489 +0000 UTC m=+2496.436414536 I0624 01:38:17.150488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:17.151332 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:38:17.151315123 +0000 UTC m=+2496.481057200 I0624 01:38:17.176752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:17.176827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:17.726278 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-24 01:38:17.726259239 +0000 UTC m=+2497.056001316 I0624 01:38:17.726588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:38:17.726680 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-24 01:38:17.726667539 +0000 UTC m=+2497.056409616 I0624 01:38:17.744283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:17.744366 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-24 01:38:17.744359466 +0000 UTC m=+2497.074101503 I0624 01:38:17.763744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:17.793127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-htvqn" condition "Approved" to 2026-06-24 01:38:17.793113227 +0000 UTC m=+2497.122855274 I0624 01:38:17.856212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-htvqn" condition "Ready" to 2026-06-24 01:38:17.856200315 +0000 UTC m=+2497.185942362 I0624 01:38:21.328032 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:38:21.328021736 +0000 UTC m=+2500.657763783 I0624 01:38:21.341481 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-htvqn" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:38:21.341470633 +0000 UTC m=+2500.671212680 I0624 01:38:21.393755 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:38:21.393734226 +0000 UTC m=+2500.723476303 I0624 01:38:21.413888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:38:21.996235 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:38:21.996218412 +0000 UTC m=+2501.325960479 I0624 01:40:29.409537 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-24 01:40:29.409513478 +0000 UTC m=+2628.739255525 I0624 01:40:29.409825 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:40:29.409845 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-24 01:40:29.409840936 +0000 UTC m=+2628.739582983 I0624 01:40:29.429848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:40:29.429932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:40:29.429949 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-24 01:40:29.429943711 +0000 UTC m=+2628.759685768 I0624 01:40:29.755936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-phljx" condition "Approved" to 2026-06-24 01:40:29.755916552 +0000 UTC m=+2629.085658589 I0624 01:40:29.774915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-phljx" condition "Ready" to 2026-06-24 01:40:29.77490458 +0000 UTC m=+2629.104646617 I0624 01:40:29.804445 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:40:29.804429617 +0000 UTC m=+2629.134171664 I0624 01:40:29.823070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:40:29.823359 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:40:29.823353793 +0000 UTC m=+2629.153095830 I0624 01:40:29.854718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:16.038390 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-24 01:41:16.038377406 +0000 UTC m=+2675.368119443 I0624 01:41:16.057765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:41:16.057962 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-24 01:41:16.057945618 +0000 UTC m=+2675.387687695 I0624 01:41:16.058720 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-24 01:41:16.058710636 +0000 UTC m=+2675.388452713 I0624 01:41:16.079722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:16.079839 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-24 01:41:16.079826674 +0000 UTC m=+2675.409568731 E0624 01:41:16.086723 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0624 01:41:16.163563 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-24 01:41:16.163539869 +0000 UTC m=+2675.493281916 I0624 01:41:16.181316 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-24 01:41:16.181299658 +0000 UTC m=+2675.511041695 I0624 01:41:16.181491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:41:16.181538 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-24 01:41:16.181529484 +0000 UTC m=+2675.511271531 I0624 01:41:16.205319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:16.205399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:41:16.205419 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-24 01:41:16.205413827 +0000 UTC m=+2675.535155854 I0624 01:41:16.370469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:16.381444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-gdp7f" condition "Approved" to 2026-06-24 01:41:16.381427471 +0000 UTC m=+2675.711169518 I0624 01:41:16.405593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-gdp7f" condition "Ready" to 2026-06-24 01:41:16.40558143 +0000 UTC m=+2675.735323467 I0624 01:41:16.435112 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:16.435096727 +0000 UTC m=+2675.764838764 E0624 01:41:16.468376 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0624 01:41:16.469648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:16.469879 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:16.469861517 +0000 UTC m=+2675.799603554 I0624 01:41:16.491822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:16.492205 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:16.492197724 +0000 UTC m=+2675.821939791 I0624 01:41:17.060226 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-24 01:41:17.060210007 +0000 UTC m=+2676.389952044 I0624 01:41:17.082480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:41:17.082536 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-24 01:41:17.082522364 +0000 UTC m=+2676.412264421 I0624 01:41:17.082567 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-24 01:41:17.082547964 +0000 UTC m=+2676.412290011 I0624 01:41:17.112949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:17.113067 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-24 01:41:17.113057824 +0000 UTC m=+2676.442799861 I0624 01:41:17.277920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:17.371068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-nsjx7" condition "Approved" to 2026-06-24 01:41:17.371056352 +0000 UTC m=+2676.700798379 I0624 01:41:17.401711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-nsjx7" condition "Ready" to 2026-06-24 01:41:17.401699185 +0000 UTC m=+2676.731441232 I0624 01:41:17.453649 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:17.453629141 +0000 UTC m=+2676.783371178 I0624 01:41:17.475227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:17.475504 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:17.475499006 +0000 UTC m=+2676.805241043 I0624 01:41:17.512880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:17.513214 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:17.513208486 +0000 UTC m=+2676.842950543 I0624 01:41:17.592778 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-24 01:41:17.592763874 +0000 UTC m=+2676.922505921 I0624 01:41:17.614770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:41:17.614809 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-24 01:41:17.614794293 +0000 UTC m=+2676.944536340 I0624 01:41:17.614815 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-24 01:41:17.614807883 +0000 UTC m=+2676.944549930 I0624 01:41:17.642322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:17.642427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:41:17.642465 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-24 01:41:17.642457516 +0000 UTC m=+2676.972199583 I0624 01:41:17.855181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bgsww" condition "Approved" to 2026-06-24 01:41:17.855164205 +0000 UTC m=+2677.184906242 I0624 01:41:17.856391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:17.902446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bgsww" condition "Ready" to 2026-06-24 01:41:17.90242415 +0000 UTC m=+2677.232166187 I0624 01:41:17.975327 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:17.97530557 +0000 UTC m=+2677.305047617 I0624 01:41:18.037687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:18.038111 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:18.038103562 +0000 UTC m=+2677.367845629 I0624 01:41:18.167530 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-24 01:41:18.167498325 +0000 UTC m=+2677.497240372 I0624 01:41:18.185750 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-24 01:41:18.185734525 +0000 UTC m=+2677.515476572 I0624 01:41:18.185776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:41:18.186493 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-24 01:41:18.186485603 +0000 UTC m=+2677.516227690 I0624 01:41:18.198504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:18.198590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:41:18.198612 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-24 01:41:18.198605689 +0000 UTC m=+2677.528347736 I0624 01:41:18.456173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-g7xk4" condition "Approved" to 2026-06-24 01:41:18.456163656 +0000 UTC m=+2677.785905693 I0624 01:41:18.769036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-g7xk4" condition "Ready" to 2026-06-24 01:41:18.769026399 +0000 UTC m=+2678.098768426 I0624 01:41:19.049993 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:19.049980217 +0000 UTC m=+2678.379722254 I0624 01:41:19.148516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:19.149018 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:41:19.149009444 +0000 UTC m=+2678.478751491 I0624 01:41:19.398215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:41:19.449339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:44:39.922179 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-24 01:44:39.922153889 +0000 UTC m=+2879.251895936 I0624 01:44:39.922424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:44:39.922464 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-24 01:44:39.922455986 +0000 UTC m=+2879.252198033 I0624 01:44:39.939831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:44:39.939935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:44:39.939960 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-24 01:44:39.939949589 +0000 UTC m=+2879.269691656 I0624 01:44:40.125590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-fwdct" condition "Approved" to 2026-06-24 01:44:40.125575476 +0000 UTC m=+2879.455317523 I0624 01:44:40.147416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-fwdct" condition "Ready" to 2026-06-24 01:44:40.147405092 +0000 UTC m=+2879.477147119 I0624 01:44:40.178829 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:44:40.178811204 +0000 UTC m=+2879.508553261 I0624 01:44:40.204465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:44:40.204871 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:44:40.20486546 +0000 UTC m=+2879.534607487 I0624 01:44:40.220762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:44:40.258305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:44:42.321908 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-24 01:44:42.321895002 +0000 UTC m=+2881.651637039 I0624 01:44:42.322293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:44:42.322312 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-06-24 01:44:42.322308812 +0000 UTC m=+2881.652050849 I0624 01:44:42.339308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:44:42.339473 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-24 01:44:42.339462227 +0000 UTC m=+2881.669204294 I0624 01:44:42.559424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:44:42.613769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-xk8p9" condition "Approved" to 2026-06-24 01:44:42.61375642 +0000 UTC m=+2881.943498477 I0624 01:44:42.669290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-xk8p9" condition "Ready" to 2026-06-24 01:44:42.669278992 +0000 UTC m=+2881.999021019 I0624 01:44:42.724575 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:44:42.724562078 +0000 UTC m=+2882.054304115 I0624 01:44:42.750111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:44:42.750385 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:44:42.750381209 +0000 UTC m=+2882.080123246 I0624 01:44:42.807032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:50:19.980716 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-06-24 01:50:19.980690534 +0000 UTC m=+3219.310432611 I0624 01:50:19.981055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:50:19.981193 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-24 01:50:19.981178376 +0000 UTC m=+3219.310920443 I0624 01:50:20.004156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:50:20.004375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:50:20.004444 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-24 01:50:20.004434336 +0000 UTC m=+3219.334176393 I0624 01:50:20.246336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:50:20.256292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-qtz4k" condition "Approved" to 2026-06-24 01:50:20.256280417 +0000 UTC m=+3219.586022454 I0624 01:50:20.277447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-qtz4k" condition "Ready" to 2026-06-24 01:50:20.277437017 +0000 UTC m=+3219.607179054 I0624 01:50:20.305058 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:50:20.3050408 +0000 UTC m=+3219.634782867 I0624 01:50:20.329390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:50:55.523473 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-24 01:50:55.523456836 +0000 UTC m=+3254.853198863 I0624 01:50:55.523661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:50:55.523710 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 01:50:55.523699501 +0000 UTC m=+3254.853441578 I0624 01:50:55.543622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:50:55.543764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0624 01:50:55.543797 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-24 01:50:55.543788056 +0000 UTC m=+3254.873530133 I0624 01:50:55.671127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:50:55.678922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-srs76" condition "Approved" to 2026-06-24 01:50:55.67891017 +0000 UTC m=+3255.008652217 I0624 01:50:55.699042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-srs76" condition "Ready" to 2026-06-24 01:50:55.699005375 +0000 UTC m=+3255.028747432 I0624 01:50:55.742743 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:50:55.742730388 +0000 UTC m=+3255.072472435 I0624 01:50:55.769637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0624 01:50:55.769994 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-24 01:50:55.769985952 +0000 UTC m=+3255.099727999 I0624 01:50:55.794724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"