I0626 10:23:28.174732 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0626 10:23:28.174847 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0626 10:23:28.174927 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0626 10:23:28.179448 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0626 10:23:28.179926 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0626 10:23:28.180001 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0626 10:23:28.180011 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0626 10:23:28.183942 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0626 10:23:28.203827 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0626 10:23:28.211137 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0626 10:23:28.211449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0626 10:23:28.216965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0626 10:23:28.221347 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0626 10:23:28.224030 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0626 10:23:28.224200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0626 10:23:28.226001 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0626 10:23:28.227967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0626 10:23:28.230307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0626 10:23:28.235798 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0626 10:23:28.235886 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0626 10:23:28.239891 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0626 10:23:28.243432 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0626 10:23:28.245891 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0626 10:23:28.247987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0626 10:23:28.250198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0626 10:23:28.252143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0626 10:23:28.254019 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0626 10:23:28.254057 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0626 10:23:28.254065 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0626 10:23:28.254178 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0626 10:23:28.260517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0626 10:23:28.263167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0626 10:23:28.266235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0626 10:23:28.269025 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.269299 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.271311 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.285850 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.307562 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.321279 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.333887 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.347780 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.368323 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:28.368730 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0626 10:23:42.289011 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-26 10:23:42.288955857 +0000 UTC m=+14.154855813 I0626 10:23:43.105826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:23:43.105810 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 10:23:43.105789824 +0000 UTC m=+14.971689770 I0626 10:23:43.105872 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-26 10:23:43.105866876 +0000 UTC m=+14.971766812 E0626 10:23:43.356870 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:23:43.356971 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-26 10:23:43.356955191 +0000 UTC m=+15.222855147 E0626 10:23:43.357193 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:23:43.361587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:43.361703 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-26 10:23:43.36169204 +0000 UTC m=+15.227591996 E0626 10:23:43.394435 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0626 10:23:43.394561 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:23:43.394609 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:23:43.394659 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0626 10:23:43.435631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:43.610196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gvpdb" condition "Approved" to 2026-06-26 10:23:43.610178518 +0000 UTC m=+15.476078474 I0626 10:23:43.707953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-gvpdb" condition "Ready" to 2026-06-26 10:23:43.707944496 +0000 UTC m=+15.573844422 I0626 10:23:43.973812 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:43.973797703 +0000 UTC m=+15.839697649 I0626 10:23:44.047672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:44.048663 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:44.048655399 +0000 UTC m=+15.914555335 I0626 10:23:44.114836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:23:44.115345 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:44.115337825 +0000 UTC m=+15.981237761 I0626 10:23:48.397286 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:23:48.397255126 +0000 UTC m=+20.263155052 I0626 10:24:10.675741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:24:10.675775 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 10:24:10.675768466 +0000 UTC m=+42.541668382 I0626 10:24:10.676171 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-26 10:24:10.676151457 +0000 UTC m=+42.542051413 I0626 10:24:10.955548 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-26 10:24:10.955523311 +0000 UTC m=+42.821423267 I0626 10:24:10.956950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:10.957101 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:24:10.957134 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-26 10:24:10.957127528 +0000 UTC m=+42.823027454 I0626 10:24:11.471565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:11.484715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2rtvv" condition "Approved" to 2026-06-26 10:24:11.484688222 +0000 UTC m=+43.350588198 I0626 10:24:11.523379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2rtvv" condition "Ready" to 2026-06-26 10:24:11.523359646 +0000 UTC m=+43.389259572 I0626 10:24:11.556808 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:11.556794237 +0000 UTC m=+43.422694163 I0626 10:24:11.576885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:11.577738 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:24:11.577731061 +0000 UTC m=+43.443630997 I0626 10:24:11.587688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:24:11.598302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:29:22.220097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-147.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:29:22.220156 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Issuing" to 2026-06-26 10:29:22.220140813 +0000 UTC m=+354.086040769 I0626 10:29:22.220826 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Ready" to 2026-06-26 10:29:22.220808579 +0000 UTC m=+354.086708555 I0626 10:29:22.238172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-147.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-147.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:29:22.238268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Ready" to 2026-06-26 10:29:22.238257771 +0000 UTC m=+354.104157737 I0626 10:29:22.574905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-147.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-147.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:29:22.607402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-147.nip.io-tls-sqn2g" condition "Approved" to 2026-06-26 10:29:22.607391755 +0000 UTC m=+354.473291691 I0626 10:29:22.651319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-147.nip.io-tls-sqn2g" condition "Ready" to 2026-06-26 10:29:22.651297981 +0000 UTC m=+354.517197927 I0626 10:29:22.682758 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-147.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:29:22.68274617 +0000 UTC m=+354.548646096 I0626 10:29:22.700501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-147.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-147.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:30:34.448702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:30:34.448798 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-26 10:30:34.448787327 +0000 UTC m=+426.314687283 I0626 10:30:34.448823 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-26 10:30:34.448801218 +0000 UTC m=+426.314701174 E0626 10:30:34.462476 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:30:34.462541 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-26 10:30:34.46252831 +0000 UTC m=+426.328428276 E0626 10:30:34.462605 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0626 10:30:34.464724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:30:34.464862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:30:34.464906 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-26 10:30:34.464898138 +0000 UTC m=+426.330798104 E0626 10:30:34.474965 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0626 10:30:34.475098 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:30:34.475130 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0626 10:30:34.475181 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0626 10:30:34.509133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5rgwd" condition "Approved" to 2026-06-26 10:30:34.50911321 +0000 UTC m=+426.375013146 I0626 10:30:34.523769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5rgwd" condition "Ready" to 2026-06-26 10:30:34.523758794 +0000 UTC m=+426.389658730 I0626 10:30:34.553893 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:30:34.553881694 +0000 UTC m=+426.419781630 I0626 10:30:34.569021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:30:34.569351 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:30:34.569345179 +0000 UTC m=+426.435245105 I0626 10:30:34.584406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:30:39.475749 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:30:39.475735222 +0000 UTC m=+431.341635188 I0626 10:31:19.557566 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-26 10:31:19.55752099 +0000 UTC m=+471.423420916 I0626 10:31:19.557855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:31:19.557960 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 10:31:19.557952601 +0000 UTC m=+471.423852537 I0626 10:31:19.559533 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:31:19.559561 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 10:31:19.55955608 +0000 UTC m=+471.425456016 I0626 10:31:19.559750 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-26 10:31:19.559742985 +0000 UTC m=+471.425642911 I0626 10:31:19.561697 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 10:31:19.561688582 +0000 UTC m=+471.427588508 I0626 10:31:19.561764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:31:19.561799 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-26 10:31:19.561794945 +0000 UTC m=+471.427694881 I0626 10:31:19.596256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:19.596313 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-26 10:31:19.596306292 +0000 UTC m=+471.462206218 I0626 10:31:19.603420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:19.603495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:31:19.603517 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-26 10:31:19.603511009 +0000 UTC m=+471.469410935 I0626 10:31:19.603666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:19.603802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:31:19.603832 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-26 10:31:19.603826437 +0000 UTC m=+471.469726373 I0626 10:31:19.731787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:19.759515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:19.774395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bs9p4" condition "Approved" to 2026-06-26 10:31:19.774382053 +0000 UTC m=+471.640281989 I0626 10:31:19.782131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-489gr" condition "Approved" to 2026-06-26 10:31:19.782113423 +0000 UTC m=+471.648013359 I0626 10:31:19.796414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bs9p4" condition "Ready" to 2026-06-26 10:31:19.796394694 +0000 UTC m=+471.662294660 I0626 10:31:19.802218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-489gr" condition "Ready" to 2026-06-26 10:31:19.802207196 +0000 UTC m=+471.668107132 I0626 10:31:19.838976 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:31:19.838956958 +0000 UTC m=+471.704856914 I0626 10:31:19.846015 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:31:19.845996781 +0000 UTC m=+471.711896727 I0626 10:31:19.871397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:19.873087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:19.873450 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:31:19.873443155 +0000 UTC m=+471.739343081 I0626 10:31:19.999250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:20.455885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fpp2x" condition "Approved" to 2026-06-26 10:31:20.455872271 +0000 UTC m=+472.321772197 I0626 10:31:20.808001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fpp2x" condition "Ready" to 2026-06-26 10:31:20.807989234 +0000 UTC m=+472.673889160 I0626 10:31:20.997393 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:31:20.997380733 +0000 UTC m=+472.863280669 I0626 10:31:21.183625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:33.627842 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" condition "Ready" to 2026-06-26 10:31:33.627824613 +0000 UTC m=+485.493724539 I0626 10:31:33.627907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:31:33.627958 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" condition "Issuing" to 2026-06-26 10:31:33.627935695 +0000 UTC m=+485.493835631 I0626 10:31:33.655005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:33.655105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:31:33.655127 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" condition "Issuing" to 2026-06-26 10:31:33.655120603 +0000 UTC m=+485.521020539 I0626 10:31:34.025362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:34.029575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zm5b2-d829v" condition "Approved" to 2026-06-26 10:31:34.029561293 +0000 UTC m=+485.895461209 I0626 10:31:34.058608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zm5b2-d829v" condition "Ready" to 2026-06-26 10:31:34.058598436 +0000 UTC m=+485.924498362 I0626 10:31:34.096065 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:31:34.096045995 +0000 UTC m=+485.961945941 I0626 10:31:34.122792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:31:34.185086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zm5b2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:32:13.341489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:32:13.341539 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-26 10:32:13.341529464 +0000 UTC m=+525.207429400 I0626 10:32:13.341533 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 10:32:13.341514374 +0000 UTC m=+525.207414310 I0626 10:32:13.361989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:32:13.362060 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-26 10:32:13.362052858 +0000 UTC m=+525.227952784 I0626 10:32:13.593869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:32:13.645419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d7d6t" condition "Approved" to 2026-06-26 10:32:13.645405803 +0000 UTC m=+525.511305769 I0626 10:32:13.675732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d7d6t" condition "Ready" to 2026-06-26 10:32:13.675717167 +0000 UTC m=+525.541617093 I0626 10:32:13.753930 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:32:13.753911346 +0000 UTC m=+525.619811282 I0626 10:32:13.781180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:35:32.191192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:35:32.191290 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-26 10:35:32.191279729 +0000 UTC m=+724.057179695 I0626 10:35:32.191507 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 10:35:32.191490684 +0000 UTC m=+724.057390620 I0626 10:35:32.223306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:35:32.223482 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-26 10:35:32.223473775 +0000 UTC m=+724.089373721 I0626 10:35:32.336697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:35:32.434490 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vs8vc" condition "Approved" to 2026-06-26 10:35:32.434472773 +0000 UTC m=+724.300372709 I0626 10:35:32.496411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vs8vc" condition "Ready" to 2026-06-26 10:35:32.496401425 +0000 UTC m=+724.362301351 I0626 10:35:32.544947 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:35:32.544927539 +0000 UTC m=+724.410827495 I0626 10:35:32.611705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:35:32.612039 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:35:32.612033047 +0000 UTC m=+724.477932973 I0626 10:35:32.685419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:38:02.338886 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-26 10:38:02.338818275 +0000 UTC m=+874.204718241 I0626 10:38:02.339421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:38:02.339549 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-26 10:38:02.339534323 +0000 UTC m=+874.205434279 I0626 10:38:02.360223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:38:02.360316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:38:02.360343 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-26 10:38:02.360334883 +0000 UTC m=+874.226234819 I0626 10:38:02.470970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:38:02.491938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-flltt" condition "Approved" to 2026-06-26 10:38:02.491919296 +0000 UTC m=+874.357819222 I0626 10:38:02.525112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-flltt" condition "Ready" to 2026-06-26 10:38:02.525095639 +0000 UTC m=+874.390995595 I0626 10:38:02.559181 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:38:02.559167193 +0000 UTC m=+874.425067109 I0626 10:38:02.596373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:38:02.596632 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:38:02.596627151 +0000 UTC m=+874.462527077 I0626 10:38:02.675843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:39:10.094882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:39:10.094964 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-26 10:39:10.094945963 +0000 UTC m=+941.960845929 I0626 10:39:10.095748 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-26 10:39:10.095738463 +0000 UTC m=+941.961638429 I0626 10:39:10.117350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:39:10.117445 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-26 10:39:10.117435652 +0000 UTC m=+941.983335588 I0626 10:39:10.376175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:39:10.431061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bp4hf" condition "Approved" to 2026-06-26 10:39:10.431043931 +0000 UTC m=+942.296943877 I0626 10:39:10.451226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bp4hf" condition "Ready" to 2026-06-26 10:39:10.451213783 +0000 UTC m=+942.317113709 I0626 10:39:10.486143 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:39:10.486121035 +0000 UTC m=+942.352020971 I0626 10:39:10.529416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:42:20.945546 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-26 10:42:20.945499825 +0000 UTC m=+1132.811399771 I0626 10:42:20.945579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:42:20.946005 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-26 10:42:20.945985337 +0000 UTC m=+1132.811885273 I0626 10:42:20.965557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:42:20.965672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:42:20.965706 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-26 10:42:20.965696497 +0000 UTC m=+1132.831596443 I0626 10:42:21.168383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-b7xz7" condition "Approved" to 2026-06-26 10:42:21.168369511 +0000 UTC m=+1133.034269457 I0626 10:42:21.191947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-b7xz7" condition "Ready" to 2026-06-26 10:42:21.191932696 +0000 UTC m=+1133.057832642 I0626 10:42:21.223708 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:42:21.223694451 +0000 UTC m=+1133.089594377 I0626 10:42:21.250585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:48:30.714190 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-26 10:48:30.714123286 +0000 UTC m=+1502.580023252 I0626 10:48:30.714773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:48:30.714815 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-26 10:48:30.714806832 +0000 UTC m=+1502.580706758 I0626 10:48:30.732189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:48:30.732279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:48:30.732300 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-26 10:48:30.732292937 +0000 UTC m=+1502.598192873 I0626 10:48:31.041781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-4vwpf" condition "Approved" to 2026-06-26 10:48:31.041762157 +0000 UTC m=+1502.907662093 I0626 10:48:31.062957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-4vwpf" condition "Ready" to 2026-06-26 10:48:31.062946103 +0000 UTC m=+1502.928846049 I0626 10:48:31.094168 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:48:31.094152792 +0000 UTC m=+1502.960052758 I0626 10:48:31.126805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:50:02.292154 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-26 10:50:02.292139299 +0000 UTC m=+1594.158039235 I0626 10:50:02.292192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:50:02.292269 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-26 10:50:02.292260172 +0000 UTC m=+1594.158160118 I0626 10:50:02.310085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:50:02.310215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:50:02.310243 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-26 10:50:02.310237059 +0000 UTC m=+1594.176136985 I0626 10:50:02.792082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cvpq2" condition "Approved" to 2026-06-26 10:50:02.792068934 +0000 UTC m=+1594.657968870 I0626 10:50:02.812934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-cvpq2" condition "Ready" to 2026-06-26 10:50:02.812923521 +0000 UTC m=+1594.678823447 I0626 10:50:02.840807 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:50:02.840793879 +0000 UTC m=+1594.706693815 I0626 10:50:02.860542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:50:02.860823 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:50:02.860817965 +0000 UTC m=+1594.726717891 I0626 10:50:02.878778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:50:02.879246 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:50:02.879234053 +0000 UTC m=+1594.745134019 I0626 10:52:25.419359 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-26 10:52:25.419308256 +0000 UTC m=+1737.285208232 I0626 10:52:25.419414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:52:25.419888 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-26 10:52:25.41987856 +0000 UTC m=+1737.285778506 I0626 10:52:25.437390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:52:25.437546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:52:25.437593 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-26 10:52:25.43757983 +0000 UTC m=+1737.303479776 I0626 10:52:25.488284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:52:25.497696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-l9b64" condition "Approved" to 2026-06-26 10:52:25.497686122 +0000 UTC m=+1737.363586058 I0626 10:52:25.513738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-l9b64" condition "Ready" to 2026-06-26 10:52:25.513726092 +0000 UTC m=+1737.379626028 I0626 10:52:25.540633 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:52:25.540618225 +0000 UTC m=+1737.406518161 I0626 10:52:25.565345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:52:25.565649 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:52:25.565642154 +0000 UTC m=+1737.431542090 I0626 10:52:25.590850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:52:25.591164 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:52:25.591151584 +0000 UTC m=+1737.457051550 I0626 10:52:26.121303 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-26 10:52:26.121279054 +0000 UTC m=+1737.987178980 I0626 10:52:26.121455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:52:26.121788 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-26 10:52:26.121744795 +0000 UTC m=+1737.987644741 I0626 10:52:26.143089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:52:26.143305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:52:26.143348 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-26 10:52:26.14333536 +0000 UTC m=+1738.009235326 I0626 10:52:26.199179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:52:26.205940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5twr5" condition "Approved" to 2026-06-26 10:52:26.205930102 +0000 UTC m=+1738.071830018 I0626 10:52:26.222681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5twr5" condition "Ready" to 2026-06-26 10:52:26.222670329 +0000 UTC m=+1738.088570265 I0626 10:52:26.248831 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:52:26.248816535 +0000 UTC m=+1738.114716481 I0626 10:52:26.267819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:52:26.867376 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-06-26 10:52:26.867362034 +0000 UTC m=+1738.733262000 I0626 10:52:27.543028 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-06-26 10:52:27.543019062 +0000 UTC m=+1739.408918988 I0626 10:53:11.919120 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-26 10:53:11.919105748 +0000 UTC m=+1783.785005684 I0626 10:53:11.919590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:53:11.919615 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-26 10:53:11.91961036 +0000 UTC m=+1783.785510286 I0626 10:53:11.985380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:53:11.985482 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-26 10:53:11.985472981 +0000 UTC m=+1783.851372927 I0626 10:53:13.820919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:53:13.864527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8lrd6" condition "Approved" to 2026-06-26 10:53:13.864517008 +0000 UTC m=+1785.730416924 I0626 10:53:13.889117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8lrd6" condition "Ready" to 2026-06-26 10:53:13.889101516 +0000 UTC m=+1785.755001482 I0626 10:53:13.927497 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:53:13.927481579 +0000 UTC m=+1785.793381505 I0626 10:53:13.951587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:53:13.952510 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:53:13.952502007 +0000 UTC m=+1785.818401943 I0626 10:53:13.963850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:53:13.967956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:53:13.968480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:53:13.969392 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:53:13.969380638 +0000 UTC m=+1785.835280574 I0626 10:55:47.121971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:55:47.122019 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-26 10:55:47.122009452 +0000 UTC m=+1938.987909418 I0626 10:55:47.121984 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-26 10:55:47.121969071 +0000 UTC m=+1938.987869007 I0626 10:55:47.138534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:47.138726 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-26 10:55:47.138714837 +0000 UTC m=+1939.004614793 I0626 10:55:47.271850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:47.305393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-82spb" condition "Approved" to 2026-06-26 10:55:47.305383487 +0000 UTC m=+1939.171283423 I0626 10:55:47.334466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-82spb" condition "Ready" to 2026-06-26 10:55:47.334451792 +0000 UTC m=+1939.200351728 I0626 10:55:47.377280 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:55:47.37726472 +0000 UTC m=+1939.243164656 I0626 10:55:47.403482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:47.403886 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:55:47.403878935 +0000 UTC m=+1939.269778871 I0626 10:55:47.425383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:47.425955 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:55:47.42594114 +0000 UTC m=+1939.291841096 I0626 10:55:47.427816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:48.746832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:55:48.746870 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-06-26 10:55:48.74686354 +0000 UTC m=+1940.612763466 I0626 10:55:48.747002 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-26 10:55:48.746972073 +0000 UTC m=+1940.612872029 I0626 10:55:48.764491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:48.764707 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-26 10:55:48.764691703 +0000 UTC m=+1940.630591669 I0626 10:55:48.927182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:48.959408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4s78f" condition "Approved" to 2026-06-26 10:55:48.959394013 +0000 UTC m=+1940.825293939 I0626 10:55:48.979366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4s78f" condition "Ready" to 2026-06-26 10:55:48.979354166 +0000 UTC m=+1940.845254092 I0626 10:55:49.008699 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:55:49.008685667 +0000 UTC m=+1940.874585603 I0626 10:55:49.029631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:49.029936 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:55:49.029928713 +0000 UTC m=+1940.895828649 I0626 10:55:49.056402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:55:49.056663 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:55:49.0566566 +0000 UTC m=+1940.922556536 I0626 10:58:56.880711 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-26 10:58:56.880652053 +0000 UTC m=+2128.746552019 I0626 10:58:56.881357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:58:56.881422 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-26 10:58:56.881415881 +0000 UTC m=+2128.747315837 I0626 10:58:56.897477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:58:56.897579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:58:56.897604 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-26 10:58:56.897597623 +0000 UTC m=+2128.763497559 I0626 10:58:57.274642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:58:57.284515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-6zq6n" condition "Approved" to 2026-06-26 10:58:57.284494064 +0000 UTC m=+2129.150394020 I0626 10:58:57.301792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-6zq6n" condition "Ready" to 2026-06-26 10:58:57.301782902 +0000 UTC m=+2129.167682828 I0626 10:58:57.327858 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:58:57.327846533 +0000 UTC m=+2129.193746469 I0626 10:58:57.349004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:58:57.349383 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:58:57.349376744 +0000 UTC m=+2129.215276680 I0626 10:58:57.369951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:58:57.370309 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:58:57.37030165 +0000 UTC m=+2129.236201596 I0626 10:58:57.372764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:59:56.891307 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z5f5w-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:59:56.891334 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z5f5w-api" condition "Ready" to 2026-06-26 10:59:56.891313702 +0000 UTC m=+2188.757213678 I0626 10:59:56.891361 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z5f5w-api" condition "Issuing" to 2026-06-26 10:59:56.891350033 +0000 UTC m=+2188.757249999 I0626 10:59:56.892674 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z5f5w-vnc" condition "Ready" to 2026-06-26 10:59:56.892667475 +0000 UTC m=+2188.758567411 I0626 10:59:56.892681 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z5f5w-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:59:56.892820 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z5f5w-vnc" condition "Issuing" to 2026-06-26 10:59:56.892815429 +0000 UTC m=+2188.758715355 I0626 10:59:56.907676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z5f5w-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z5f5w-api\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:59:56.907748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z5f5w-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:59:56.907767 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z5f5w-api" condition "Issuing" to 2026-06-26 10:59:56.90776118 +0000 UTC m=+2188.773661126 I0626 10:59:56.914572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z5f5w-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z5f5w-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:59:56.914628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-z5f5w-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 10:59:56.914643 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-z5f5w-vnc" condition "Issuing" to 2026-06-26 10:59:56.914637317 +0000 UTC m=+2188.780537253 I0626 10:59:57.092449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-z5f5w-vnc-htxv8" condition "Approved" to 2026-06-26 10:59:57.092439919 +0000 UTC m=+2188.958339845 I0626 10:59:57.112702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-z5f5w-vnc-htxv8" condition "Ready" to 2026-06-26 10:59:57.112670699 +0000 UTC m=+2188.978570645 I0626 10:59:57.130381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-z5f5w-api-95n4b" condition "Approved" to 2026-06-26 10:59:57.130368007 +0000 UTC m=+2188.996267943 I0626 10:59:57.151892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-z5f5w-api-95n4b" condition "Ready" to 2026-06-26 10:59:57.151881007 +0000 UTC m=+2189.017780943 I0626 10:59:57.155786 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-z5f5w-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:59:57.155773662 +0000 UTC m=+2189.021673598 I0626 10:59:57.181113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-z5f5w-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z5f5w-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:59:57.181574 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-z5f5w-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:59:57.181567025 +0000 UTC m=+2189.047466961 I0626 10:59:57.183768 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-z5f5w-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 10:59:57.183752468 +0000 UTC m=+2189.049652404 I0626 10:59:57.200827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-z5f5w-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z5f5w-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:59:57.206567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-z5f5w-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z5f5w-api\": the object has been modified; please apply your changes to the latest version and try again" I0626 10:59:57.252645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-z5f5w-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-z5f5w-api\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:01:39.655778 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-06-26 11:01:39.655762337 +0000 UTC m=+2291.521662553 I0626 11:01:39.656097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:01:39.656117 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-06-26 11:01:39.656113346 +0000 UTC m=+2291.522013282 I0626 11:01:39.673270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:01:39.673452 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-06-26 11:01:39.673411814 +0000 UTC m=+2291.539311770 I0626 11:01:40.115023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:01:40.158113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-5766x" condition "Approved" to 2026-06-26 11:01:40.158102462 +0000 UTC m=+2292.024002388 I0626 11:01:40.183338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-5766x" condition "Ready" to 2026-06-26 11:01:40.183308352 +0000 UTC m=+2292.049208288 I0626 11:01:40.220215 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:01:40.220195064 +0000 UTC m=+2292.086095030 I0626 11:01:40.244743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:01:40.245226 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:01:40.24521742 +0000 UTC m=+2292.111117366 I0626 11:01:40.255290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:01:40.267940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:05:19.308068 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-26 11:05:19.308049725 +0000 UTC m=+2511.173949681 I0626 11:05:19.308148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:05:19.308222 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-26 11:05:19.308215379 +0000 UTC m=+2511.174115315 I0626 11:05:19.326636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:05:19.326740 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-26 11:05:19.326730177 +0000 UTC m=+2511.192630113 I0626 11:05:19.409861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:05:19.444949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-zg9wl" condition "Approved" to 2026-06-26 11:05:19.444932386 +0000 UTC m=+2511.310832322 I0626 11:05:19.470666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-zg9wl" condition "Ready" to 2026-06-26 11:05:19.470656108 +0000 UTC m=+2511.336556044 I0626 11:05:19.499205 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:05:19.499194728 +0000 UTC m=+2511.365094664 I0626 11:05:19.527715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:05:20.854015 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:05:20.854052 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-26 11:05:20.854044057 +0000 UTC m=+2512.719943993 I0626 11:05:20.854338 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-26 11:05:20.854314414 +0000 UTC m=+2512.720214380 I0626 11:05:20.870788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:05:20.870884 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-26 11:05:20.870874784 +0000 UTC m=+2512.736774750 I0626 11:05:21.333797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:05:21.365428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-q754j" condition "Approved" to 2026-06-26 11:05:21.365412974 +0000 UTC m=+2513.231312910 I0626 11:05:21.381780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-q754j" condition "Ready" to 2026-06-26 11:05:21.381765229 +0000 UTC m=+2513.247665195 I0626 11:05:21.408452 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:05:21.408436385 +0000 UTC m=+2513.274336321 I0626 11:05:21.431705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:05:21.432184 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:05:21.432172738 +0000 UTC m=+2513.298072704 I0626 11:05:21.456123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:05:21.456468 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:05:21.456461336 +0000 UTC m=+2513.322361262 I0626 11:07:32.360333 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-26 11:07:32.360288776 +0000 UTC m=+2644.226188742 I0626 11:07:32.360462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:07:32.360537 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-26 11:07:32.360528162 +0000 UTC m=+2644.226428098 E0626 11:07:32.373629 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0626 11:07:32.373711 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-06-26 11:07:32.37370317 +0000 UTC m=+2644.239603106 I0626 11:07:32.373732 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0626 11:07:32.377382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:32.377464 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-26 11:07:32.377458211 +0000 UTC m=+2644.243358147 E0626 11:07:32.384604 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0626 11:07:32.384704 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0626 11:07:32.384732 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0626 11:07:32.384762 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0626 11:07:32.396106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:32.429470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-mrdtq" condition "Approved" to 2026-06-26 11:07:32.429453089 +0000 UTC m=+2644.295353025 I0626 11:07:32.450469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-mrdtq" condition "Ready" to 2026-06-26 11:07:32.450453616 +0000 UTC m=+2644.316353582 I0626 11:07:32.475788 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:32.475776559 +0000 UTC m=+2644.341676495 I0626 11:07:32.497138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:32.497466 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:32.497459913 +0000 UTC m=+2644.363359829 I0626 11:07:32.510871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:32.511115 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:32.511106364 +0000 UTC m=+2644.377006300 I0626 11:07:32.517186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.059179 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-26 11:07:33.059149378 +0000 UTC m=+2644.925049324 I0626 11:07:33.059197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:07:33.059430 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-26 11:07:33.059424065 +0000 UTC m=+2644.925323991 E0626 11:07:33.075337 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0626 11:07:33.075369 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-06-26 11:07:33.075363141 +0000 UTC m=+2644.941263067 I0626 11:07:33.075476 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0626 11:07:33.079246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.079327 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-26 11:07:33.079320946 +0000 UTC m=+2644.945220872 E0626 11:07:33.087718 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0626 11:07:33.087882 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0626 11:07:33.087930 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0626 11:07:33.087971 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0626 11:07:33.104498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.104541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.104608 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-26 11:07:33.104600248 +0000 UTC m=+2644.970500174 I0626 11:07:33.108388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-2mbxr" condition "Approved" to 2026-06-26 11:07:33.108377929 +0000 UTC m=+2644.974277855 I0626 11:07:33.130920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-2mbxr" condition "Ready" to 2026-06-26 11:07:33.130907754 +0000 UTC m=+2644.996807680 I0626 11:07:33.174395 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:33.174373825 +0000 UTC m=+2645.040273761 I0626 11:07:33.238116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.238520 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:33.238510926 +0000 UTC m=+2645.104410862 I0626 11:07:33.261901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.262258 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:33.262248181 +0000 UTC m=+2645.128148117 I0626 11:07:33.834533 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:07:33.834589 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-26 11:07:33.834558711 +0000 UTC m=+2645.700458627 I0626 11:07:33.835047 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-26 11:07:33.835042223 +0000 UTC m=+2645.700942149 I0626 11:07:33.855244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.855319 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-26 11:07:33.855310724 +0000 UTC m=+2645.721210660 I0626 11:07:33.872031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.874135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:33.874276 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-26 11:07:33.874232991 +0000 UTC m=+2645.740132927 I0626 11:07:33.877846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-2q5kp" condition "Approved" to 2026-06-26 11:07:33.877838768 +0000 UTC m=+2645.743738714 I0626 11:07:33.888654 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-26 11:07:33.88864206 +0000 UTC m=+2645.754542016 I0626 11:07:33.893407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-2q5kp" condition "Ready" to 2026-06-26 11:07:33.893391545 +0000 UTC m=+2645.759291481 I0626 11:07:34.069080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:37.385301 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:37.385283539 +0000 UTC m=+2649.251183495 I0626 11:07:37.400229 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-2q5kp" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:37.40021642 +0000 UTC m=+2649.266116366 I0626 11:07:37.423996 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:37.423978265 +0000 UTC m=+2649.289878231 I0626 11:07:37.457231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:07:38.088760 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:07:38.088749673 +0000 UTC m=+2649.954649609 I0626 11:09:48.140813 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-26 11:09:48.140795393 +0000 UTC m=+2780.006695329 I0626 11:09:48.140826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:09:48.140938 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-26 11:09:48.140931207 +0000 UTC m=+2780.006831183 I0626 11:09:48.161931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:09:48.162188 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-26 11:09:48.162176631 +0000 UTC m=+2780.028076587 I0626 11:09:48.452799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:09:48.484919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-g5mf6" condition "Approved" to 2026-06-26 11:09:48.484909316 +0000 UTC m=+2780.350809242 I0626 11:09:48.510559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-g5mf6" condition "Ready" to 2026-06-26 11:09:48.510547756 +0000 UTC m=+2780.376447692 I0626 11:09:48.542584 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:09:48.542570491 +0000 UTC m=+2780.408470437 I0626 11:09:48.570948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:09:48.571377 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:09:48.571368088 +0000 UTC m=+2780.437268024 I0626 11:09:48.592373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:09:48.593323 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:09:48.593308288 +0000 UTC m=+2780.459208254 I0626 11:10:35.195601 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-26 11:10:35.195546462 +0000 UTC m=+2827.061446428 I0626 11:10:35.219571 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-26 11:10:35.219551853 +0000 UTC m=+2827.085451809 I0626 11:10:35.219593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:10:35.219631 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-26 11:10:35.219623625 +0000 UTC m=+2827.085523561 I0626 11:10:35.254260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:35.254347 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-26 11:10:35.254337524 +0000 UTC m=+2827.120237490 E0626 11:10:35.262532 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0626 11:10:35.318581 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-26 11:10:35.318566547 +0000 UTC m=+2827.184466493 I0626 11:10:35.343838 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-26 11:10:35.343823059 +0000 UTC m=+2827.209722995 I0626 11:10:35.343858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:10:35.344086 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-26 11:10:35.344033294 +0000 UTC m=+2827.209933270 I0626 11:10:35.362413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:35.362470 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-26 11:10:35.362464399 +0000 UTC m=+2827.228364325 E0626 11:10:35.382046 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0626 11:10:35.551723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:35.599849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-jhs7l" condition "Approved" to 2026-06-26 11:10:35.599834781 +0000 UTC m=+2827.465734717 I0626 11:10:35.632575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-jhs7l" condition "Ready" to 2026-06-26 11:10:35.632564382 +0000 UTC m=+2827.498464318 I0626 11:10:35.672678 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:10:35.672662772 +0000 UTC m=+2827.538562718 I0626 11:10:35.710285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:35.803872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:36.255659 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-26 11:10:36.255644681 +0000 UTC m=+2828.121544617 I0626 11:10:36.279644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:10:36.279673 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-26 11:10:36.279666722 +0000 UTC m=+2828.145566648 I0626 11:10:36.280007 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-26 11:10:36.27998872 +0000 UTC m=+2828.145888666 I0626 11:10:36.302952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:36.303043 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-26 11:10:36.303033177 +0000 UTC m=+2828.168933133 I0626 11:10:36.472577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:36.536638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-f78p2" condition "Approved" to 2026-06-26 11:10:36.536614207 +0000 UTC m=+2828.402514133 I0626 11:10:36.560035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-f78p2" condition "Ready" to 2026-06-26 11:10:36.560018043 +0000 UTC m=+2828.425917969 I0626 11:10:36.601929 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:10:36.601919166 +0000 UTC m=+2828.467819082 I0626 11:10:36.630400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:36.630611 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:10:36.6306047 +0000 UTC m=+2828.496504626 I0626 11:10:36.661474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:36.810524 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-26 11:10:36.810510261 +0000 UTC m=+2828.676410197 I0626 11:10:36.836865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:10:36.836895 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-26 11:10:36.836888029 +0000 UTC m=+2828.702787955 I0626 11:10:36.837227 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-26 11:10:36.837223487 +0000 UTC m=+2828.703123413 I0626 11:10:36.857417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:36.857635 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-26 11:10:36.85761227 +0000 UTC m=+2828.723512226 I0626 11:10:37.033998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:37.107117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9t89v" condition "Approved" to 2026-06-26 11:10:37.107101804 +0000 UTC m=+2828.973001750 I0626 11:10:37.161671 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-9t89v" condition "Ready" to 2026-06-26 11:10:37.161657674 +0000 UTC m=+2829.027557600 I0626 11:10:37.207152 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:10:37.207142034 +0000 UTC m=+2829.073041960 I0626 11:10:37.263201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:37.409492 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-26 11:10:37.409462797 +0000 UTC m=+2829.275362733 I0626 11:10:37.434393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:10:37.434437 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-26 11:10:37.434426011 +0000 UTC m=+2829.300325947 I0626 11:10:37.434846 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-26 11:10:37.434826551 +0000 UTC m=+2829.300726487 I0626 11:10:37.449642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:37.449723 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-26 11:10:37.449715161 +0000 UTC m=+2829.315615087 I0626 11:10:37.605577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:37.761948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8txz6" condition "Approved" to 2026-06-26 11:10:37.761937022 +0000 UTC m=+2829.627836948 I0626 11:10:37.892132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8txz6" condition "Ready" to 2026-06-26 11:10:37.892122581 +0000 UTC m=+2829.758022507 I0626 11:10:38.306928 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:10:38.306913263 +0000 UTC m=+2830.172813189 I0626 11:10:38.457168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:10:38.457631 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:10:38.457621908 +0000 UTC m=+2830.323521854 I0626 11:10:38.652736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:13:56.100585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:13:56.100616 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-26 11:13:56.100609901 +0000 UTC m=+3027.966509827 I0626 11:13:56.102084 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-26 11:13:56.102072066 +0000 UTC m=+3027.967972032 I0626 11:13:56.127289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:13:56.127396 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-26 11:13:56.127389057 +0000 UTC m=+3027.993288993 I0626 11:13:56.429497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:13:56.460481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-k94xl" condition "Approved" to 2026-06-26 11:13:56.460467909 +0000 UTC m=+3028.326367835 I0626 11:13:56.484018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-k94xl" condition "Ready" to 2026-06-26 11:13:56.484007088 +0000 UTC m=+3028.349907014 I0626 11:13:56.515621 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:13:56.515606171 +0000 UTC m=+3028.381506107 I0626 11:13:56.541681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:13:56.657064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:13:58.644832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:13:58.644887 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-26 11:13:58.644867772 +0000 UTC m=+3030.510767738 I0626 11:13:58.644914 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-06-26 11:13:58.644897902 +0000 UTC m=+3030.510797868 I0626 11:13:58.664425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:13:58.664528 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:13:58.664658 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-06-26 11:13:58.664650479 +0000 UTC m=+3030.530550435 I0626 11:13:58.821802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:13:58.835857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-7h7dm" condition "Approved" to 2026-06-26 11:13:58.835835443 +0000 UTC m=+3030.701735369 I0626 11:13:58.878819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-7h7dm" condition "Ready" to 2026-06-26 11:13:58.87879443 +0000 UTC m=+3030.744694366 I0626 11:13:58.917853 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:13:58.917840753 +0000 UTC m=+3030.783740689 I0626 11:13:58.942038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:12.850615 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-06-26 11:19:12.850596476 +0000 UTC m=+3344.716496412 I0626 11:19:12.851135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:19:12.851249 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-26 11:19:12.851236002 +0000 UTC m=+3344.717135988 I0626 11:19:12.865691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:12.865799 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:19:12.865823 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-06-26 11:19:12.865817104 +0000 UTC m=+3344.731717040 I0626 11:19:13.242617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:13.251102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-n6fzx" condition "Approved" to 2026-06-26 11:19:13.251091297 +0000 UTC m=+3345.116991223 I0626 11:19:13.266631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-n6fzx" condition "Ready" to 2026-06-26 11:19:13.266616351 +0000 UTC m=+3345.132516317 I0626 11:19:13.290423 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:19:13.290214481 +0000 UTC m=+3345.156114417 I0626 11:19:13.321958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:13.322361 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:19:13.322353447 +0000 UTC m=+3345.188253373 I0626 11:19:13.339389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:13.342549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:13.342878 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:19:13.342870173 +0000 UTC m=+3345.208770119 I0626 11:19:48.606546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0626 11:19:48.606600 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-06-26 11:19:48.606590174 +0000 UTC m=+3380.472490130 I0626 11:19:48.606552 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 11:19:48.606536562 +0000 UTC m=+3380.472436498 I0626 11:19:48.624923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:48.625092 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-06-26 11:19:48.625079761 +0000 UTC m=+3380.490979727 I0626 11:19:48.955868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:48.985212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mgnnl" condition "Approved" to 2026-06-26 11:19:48.985200976 +0000 UTC m=+3380.851100912 I0626 11:19:49.001221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-mgnnl" condition "Ready" to 2026-06-26 11:19:49.001206583 +0000 UTC m=+3380.867106579 I0626 11:19:49.038455 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:19:49.038441133 +0000 UTC m=+3380.904341069 I0626 11:19:49.057545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:49.060357 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:19:49.060347832 +0000 UTC m=+3380.926247768 I0626 11:19:49.065439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:49.072749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0626 11:19:49.073086 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-26 11:19:49.07307904 +0000 UTC m=+3380.938978976 I0626 11:19:49.073579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"