I0515 14:47:50.535767 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0515 14:47:50.535880 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0515 14:47:50.535953 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0515 14:47:50.540322 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0515 14:47:50.540760 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0515 14:47:50.540905 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0515 14:47:50.540938 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0515 14:47:50.549166 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0515 14:47:50.567980 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0515 14:47:50.582420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0515 14:47:50.585715 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0515 14:47:50.590111 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0515 14:47:50.590150 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0515 14:47:50.590160 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0515 14:47:50.590204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0515 14:47:50.598371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0515 14:47:50.607910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0515 14:47:50.647915 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0515 14:47:50.650801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0515 14:47:50.655008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0515 14:47:50.657930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0515 14:47:50.661136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0515 14:47:50.664863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0515 14:47:50.668401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0515 14:47:50.671014 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0515 14:47:50.671192 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0515 14:47:50.686870 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0515 14:47:50.690127 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0515 14:47:50.691901 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0515 14:47:50.695858 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0515 14:47:50.695909 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0515 14:47:50.700503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0515 14:47:50.704377 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0515 14:47:50.707464 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.708597 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.709375 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.711343 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.714067 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.714127 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.714375 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.715886 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.716920 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:47:50.974934 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:48:40.701083 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:48:40.701129 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-15 14:48:40.70112003 +0000 UTC m=+50.541368905 I0515 14:48:40.701169 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-15 14:48:40.701155192 +0000 UTC m=+50.541404087 I0515 14:48:40.727228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:48:40.727334 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-15 14:48:40.727324778 +0000 UTC m=+50.567573653 I0515 14:48:40.834275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:48:40.888180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-bdw7f" condition "Approved" to 2026-05-15 14:48:40.888168826 +0000 UTC m=+50.728417711 I0515 14:48:40.910326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-bdw7f" condition "Ready" to 2026-05-15 14:48:40.910313314 +0000 UTC m=+50.750562189 I0515 14:48:40.950386 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:48:40.950368603 +0000 UTC m=+50.790617508 I0515 14:48:40.978356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:48:40.978832 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:48:40.978821472 +0000 UTC m=+50.819070347 I0515 14:48:41.002759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:50:23.963662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:50:23.963705 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-15 14:50:23.963686889 +0000 UTC m=+153.803935794 I0515 14:50:23.963742 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-15 14:50:23.963728661 +0000 UTC m=+153.803977556 I0515 14:50:23.984333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:50:23.984578 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-15 14:50:23.984565587 +0000 UTC m=+153.824814472 I0515 14:50:24.366245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:50:24.401209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-txz76" condition "Approved" to 2026-05-15 14:50:24.401190778 +0000 UTC m=+154.241439683 I0515 14:50:24.420008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-txz76" condition "Ready" to 2026-05-15 14:50:24.419997629 +0000 UTC m=+154.260246494 I0515 14:50:24.455810 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:50:24.455790263 +0000 UTC m=+154.296039138 I0515 14:50:24.486669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:50:24.487048 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:50:24.487040003 +0000 UTC m=+154.327288868 I0515 14:50:24.490764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:50:24.508661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:50:24.509054 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:50:24.509043126 +0000 UTC m=+154.349292011 I0515 14:51:26.139619 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-15 14:51:26.139604845 +0000 UTC m=+215.979853960 I0515 14:51:26.139994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:51:26.140018 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-15 14:51:26.140012969 +0000 UTC m=+215.980261844 I0515 14:51:26.157627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:26.157719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:51:26.157744 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-15 14:51:26.157738165 +0000 UTC m=+215.997987040 I0515 14:51:26.210205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:26.215694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-d76c7" condition "Approved" to 2026-05-15 14:51:26.215677339 +0000 UTC m=+216.055926224 I0515 14:51:26.237357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-d76c7" condition "Ready" to 2026-05-15 14:51:26.237346723 +0000 UTC m=+216.077595588 I0515 14:51:26.270285 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:51:26.270270687 +0000 UTC m=+216.110519552 I0515 14:51:26.289617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:26.345179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:26.882594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:51:26.882629 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-15 14:51:26.882621513 +0000 UTC m=+216.722870388 I0515 14:51:26.882992 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-15 14:51:26.882985305 +0000 UTC m=+216.723234180 I0515 14:51:26.903552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:26.903629 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-15 14:51:26.903620763 +0000 UTC m=+216.743869638 I0515 14:51:26.925657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:26.965049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qtssj" condition "Approved" to 2026-05-15 14:51:26.965037138 +0000 UTC m=+216.805286013 I0515 14:51:26.996325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qtssj" condition "Ready" to 2026-05-15 14:51:26.996314935 +0000 UTC m=+216.836563800 I0515 14:51:27.033737 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:51:27.033717185 +0000 UTC m=+216.873966090 I0515 14:51:27.053532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:27.054011 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:51:27.05399643 +0000 UTC m=+216.894245335 I0515 14:51:27.060953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:27.071437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:51:27.071967 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:51:27.071952134 +0000 UTC m=+216.912201039 I0515 14:51:27.681361 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-15 14:51:27.681346286 +0000 UTC m=+217.521595191 I0515 14:51:28.391400 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-15 14:51:28.391389558 +0000 UTC m=+218.231638423 I0515 14:54:53.889954 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-15 14:54:53.889907836 +0000 UTC m=+423.730156701 I0515 14:54:53.890636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:54:53.890736 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-15 14:54:53.890726642 +0000 UTC m=+423.730975507 I0515 14:54:53.918325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:54:53.918423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:54:53.918448 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-15 14:54:53.918440493 +0000 UTC m=+423.758689368 I0515 14:54:55.224495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-cv2zw" condition "Approved" to 2026-05-15 14:54:55.224483296 +0000 UTC m=+425.064732171 I0515 14:54:55.255796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-cv2zw" condition "Ready" to 2026-05-15 14:54:55.255784311 +0000 UTC m=+425.096033186 I0515 14:54:55.298608 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:54:55.298584752 +0000 UTC m=+425.138833627 I0515 14:54:55.324807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:54:55.325570 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:54:55.325562589 +0000 UTC m=+425.165811454 I0515 14:54:55.348433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:05.867239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:58:05.867363 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-15 14:58:05.867355578 +0000 UTC m=+615.707604473 I0515 14:58:05.867214 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-15 14:58:05.867070668 +0000 UTC m=+615.707319563 I0515 14:58:05.888010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:05.888098 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-15 14:58:05.88809071 +0000 UTC m=+615.728339575 I0515 14:58:06.221335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:06.263573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-cbj8m" condition "Approved" to 2026-05-15 14:58:06.263559696 +0000 UTC m=+616.103808571 I0515 14:58:06.284341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-cbj8m" condition "Ready" to 2026-05-15 14:58:06.284325359 +0000 UTC m=+616.124574234 I0515 14:58:06.332405 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:58:06.332392125 +0000 UTC m=+616.172641000 I0515 14:58:06.359127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:06.359683 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:58:06.359674346 +0000 UTC m=+616.199923231 I0515 14:58:06.379718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:06.380022 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:58:06.380014076 +0000 UTC m=+616.220262951 I0515 14:58:07.457896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:58:07.457938 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-15 14:58:07.457930983 +0000 UTC m=+617.298179848 I0515 14:58:07.458268 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-15 14:58:07.458247993 +0000 UTC m=+617.298496858 I0515 14:58:07.479965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:07.480756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:58:07.480810 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-15 14:58:07.480798954 +0000 UTC m=+617.321047859 I0515 14:58:07.614308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-jdfm2" condition "Approved" to 2026-05-15 14:58:07.614294169 +0000 UTC m=+617.454543074 I0515 14:58:07.636734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-jdfm2" condition "Ready" to 2026-05-15 14:58:07.636688984 +0000 UTC m=+617.476937889 I0515 14:58:07.668661 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:58:07.668646505 +0000 UTC m=+617.508895370 I0515 14:58:07.695545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:07.695851 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:58:07.695844064 +0000 UTC m=+617.536092929 I0515 14:58:07.715269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:07.720170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:58:07.720553 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:58:07.720544143 +0000 UTC m=+617.560793008 I0515 15:01:29.220434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:01:29.220587 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-15 15:01:29.220495893 +0000 UTC m=+819.060744768 I0515 15:01:29.220960 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-15 15:01:29.220954508 +0000 UTC m=+819.061203383 I0515 15:01:29.237773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:01:29.237977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:01:29.238037 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-15 15:01:29.238026584 +0000 UTC m=+819.078275489 I0515 15:01:29.530774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-zgngf" condition "Approved" to 2026-05-15 15:01:29.530763124 +0000 UTC m=+819.371011999 I0515 15:01:29.552594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-zgngf" condition "Ready" to 2026-05-15 15:01:29.552582652 +0000 UTC m=+819.392831527 I0515 15:01:29.590290 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:01:29.590281929 +0000 UTC m=+819.430530794 I0515 15:01:29.618879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:01:29.678637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:11.278509 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-frsgh-vnc" condition "Ready" to 2026-05-15 15:03:11.278494294 +0000 UTC m=+921.118743149 I0515 15:03:11.278795 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-frsgh-api" condition "Ready" to 2026-05-15 15:03:11.278783103 +0000 UTC m=+921.119031968 I0515 15:03:11.278846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-frsgh-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:03:11.278901 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-frsgh-vnc" condition "Issuing" to 2026-05-15 15:03:11.278889147 +0000 UTC m=+921.119138022 I0515 15:03:11.279388 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-frsgh-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:03:11.279465 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-frsgh-api" condition "Issuing" to 2026-05-15 15:03:11.279457215 +0000 UTC m=+921.119706090 I0515 15:03:11.296174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-frsgh-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:11.296231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-frsgh-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:03:11.296246 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-frsgh-vnc" condition "Issuing" to 2026-05-15 15:03:11.296239284 +0000 UTC m=+921.136488159 I0515 15:03:11.301659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-frsgh-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-api\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:11.301929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-frsgh-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:03:11.301955 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-frsgh-api" condition "Issuing" to 2026-05-15 15:03:11.301948704 +0000 UTC m=+921.142197569 I0515 15:03:11.599893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-frsgh-api-q5fzm" condition "Approved" to 2026-05-15 15:03:11.599881899 +0000 UTC m=+921.440130764 I0515 15:03:11.665119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-frsgh-api-q5fzm" condition "Ready" to 2026-05-15 15:03:11.665108116 +0000 UTC m=+921.505356991 I0515 15:03:11.787056 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-frsgh-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:03:11.787038442 +0000 UTC m=+921.627287337 I0515 15:03:12.005070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-frsgh-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-api\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:12.005378 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-frsgh-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:03:12.005368497 +0000 UTC m=+921.845617372 I0515 15:03:12.023373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-frsgh-vnc-56v59" condition "Approved" to 2026-05-15 15:03:12.023359035 +0000 UTC m=+921.863607910 I0515 15:03:12.023975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-frsgh-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:12.245200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-frsgh-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-api\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:12.245534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-frsgh-vnc-56v59" condition "Ready" to 2026-05-15 15:03:12.245522061 +0000 UTC m=+922.085770926 I0515 15:03:12.254134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-frsgh-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-api\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:12.283137 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-frsgh-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:03:12.283123317 +0000 UTC m=+922.123372192 I0515 15:03:12.299112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-frsgh-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:12.299475 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-frsgh-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:03:12.299467272 +0000 UTC m=+922.139716147 I0515 15:03:12.307356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-frsgh-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:12.315790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-frsgh-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-frsgh-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:03:12.316071 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-frsgh-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:03:12.316064635 +0000 UTC m=+922.156313510 I0515 15:06:53.962704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:06:53.962837 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-15 15:06:53.962794142 +0000 UTC m=+1143.803043047 I0515 15:06:53.962967 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-05-15 15:06:53.962949957 +0000 UTC m=+1143.803198852 I0515 15:06:53.979686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:06:53.979786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:06:53.979813 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-05-15 15:06:53.979806873 +0000 UTC m=+1143.820055738 I0515 15:06:54.285175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-z4m8j" condition "Approved" to 2026-05-15 15:06:54.285164772 +0000 UTC m=+1144.125413647 I0515 15:06:54.304661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-z4m8j" condition "Ready" to 2026-05-15 15:06:54.304649672 +0000 UTC m=+1144.144898547 I0515 15:06:54.335122 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:06:54.335111972 +0000 UTC m=+1144.175360847 I0515 15:06:54.367765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:06:54.368270 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:06:54.368263587 +0000 UTC m=+1144.208512452 I0515 15:06:54.373720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:06:54.389291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:06:55.642624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:06:55.642647 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-05-15 15:06:55.642632057 +0000 UTC m=+1145.482880932 I0515 15:06:55.642670 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-15 15:06:55.642660027 +0000 UTC m=+1145.482908922 I0515 15:06:55.660094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:06:55.660204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:06:55.660229 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-05-15 15:06:55.660223476 +0000 UTC m=+1145.500472361 I0515 15:06:55.874143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:06:55.888177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-s8gwq" condition "Approved" to 2026-05-15 15:06:55.888165331 +0000 UTC m=+1145.728414196 I0515 15:06:55.915266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-s8gwq" condition "Ready" to 2026-05-15 15:06:55.915254273 +0000 UTC m=+1145.755503148 I0515 15:06:55.944648 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:06:55.944638029 +0000 UTC m=+1145.784886894 I0515 15:06:55.976657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:06:55.977112 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:06:55.977101382 +0000 UTC m=+1145.817350267 I0515 15:06:55.994749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:06:55.995180 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:06:55.995171077 +0000 UTC m=+1145.835419942 I0515 15:09:42.355778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:09:42.355827 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-05-15 15:09:42.355817794 +0000 UTC m=+1312.196066669 I0515 15:09:42.356342 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-15 15:09:42.35633603 +0000 UTC m=+1312.196584915 E0515 15:09:42.372667 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 15:09:42.372759 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-05-15 15:09:42.372751121 +0000 UTC m=+1312.212999986 I0515 15:09:42.372782 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 15:09:42.376275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:42.376360 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-05-15 15:09:42.376351716 +0000 UTC m=+1312.216600611 E0515 15:09:42.383993 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0515 15:09:42.384113 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 15:09:42.384141 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0515 15:09:42.384172 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0515 15:09:42.400250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:42.432322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-8h6fg" condition "Approved" to 2026-05-15 15:09:42.432307194 +0000 UTC m=+1312.272556089 I0515 15:09:42.451160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-8h6fg" condition "Ready" to 2026-05-15 15:09:42.451149403 +0000 UTC m=+1312.291398268 I0515 15:09:42.475964 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:42.47595058 +0000 UTC m=+1312.316199455 I0515 15:09:42.504433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:42.504852 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:42.504843539 +0000 UTC m=+1312.345092414 I0515 15:09:42.521274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:43.028112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:09:43.028146 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-05-15 15:09:43.028138984 +0000 UTC m=+1312.868387859 I0515 15:09:43.028274 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-15 15:09:43.028257058 +0000 UTC m=+1312.868505933 E0515 15:09:43.039557 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 15:09:43.039593 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-05-15 15:09:43.039585917 +0000 UTC m=+1312.879834792 I0515 15:09:43.039629 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 15:09:43.044472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:43.044520 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-15 15:09:43.044515214 +0000 UTC m=+1312.884764069 E0515 15:09:43.048598 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0515 15:09:43.048993 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 15:09:43.049022 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0515 15:09:43.049067 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0515 15:09:43.057614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:43.057697 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-05-15 15:09:43.057687193 +0000 UTC m=+1312.897936078 I0515 15:09:43.060714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:43.071616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-6w7hb" condition "Approved" to 2026-05-15 15:09:43.071596925 +0000 UTC m=+1312.911845820 I0515 15:09:43.086392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-6w7hb" condition "Ready" to 2026-05-15 15:09:43.086371084 +0000 UTC m=+1312.926619959 I0515 15:09:43.112838 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:43.112826485 +0000 UTC m=+1312.953075360 I0515 15:09:43.142352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:43.143424 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:43.143416766 +0000 UTC m=+1312.983665631 I0515 15:09:43.156496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:43.169465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:43.750807 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-05-15 15:09:43.750788144 +0000 UTC m=+1313.591037039 I0515 15:09:43.750882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:09:43.750922 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-15 15:09:43.750910788 +0000 UTC m=+1313.591159683 I0515 15:09:43.770717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:43.770798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:09:43.770813 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-05-15 15:09:43.77080742 +0000 UTC m=+1313.611056285 I0515 15:09:43.825557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-2jwsn" condition "Approved" to 2026-05-15 15:09:43.825534359 +0000 UTC m=+1313.665783264 I0515 15:09:43.843525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-2jwsn" condition "Ready" to 2026-05-15 15:09:43.84351048 +0000 UTC m=+1313.683759355 I0515 15:09:47.385136 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:47.385122105 +0000 UTC m=+1317.225371000 I0515 15:09:47.398198 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-2jwsn" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:47.3981827 +0000 UTC m=+1317.238431575 I0515 15:09:47.422466 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:47.422447141 +0000 UTC m=+1317.262696046 I0515 15:09:47.441583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:47.442021 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:47.442014343 +0000 UTC m=+1317.282263208 I0515 15:09:47.447444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:47.457542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:09:47.457800 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:47.457790534 +0000 UTC m=+1317.298039409 I0515 15:09:48.049889 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:09:48.049874026 +0000 UTC m=+1317.890122891 I0515 15:12:14.428299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:12:14.429073 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-15 15:12:14.428376052 +0000 UTC m=+1464.268624947 I0515 15:12:14.429751 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-05-15 15:12:14.429709105 +0000 UTC m=+1464.269958010 I0515 15:12:14.458012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:12:14.458111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:12:14.458138 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-05-15 15:12:14.458131228 +0000 UTC m=+1464.298380123 I0515 15:12:14.853099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:12:14.865153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-k96r5" condition "Approved" to 2026-05-15 15:12:14.865138575 +0000 UTC m=+1464.705387450 I0515 15:12:14.886512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-k96r5" condition "Ready" to 2026-05-15 15:12:14.886500784 +0000 UTC m=+1464.726749659 I0515 15:12:14.918100 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:12:14.918083338 +0000 UTC m=+1464.758332213 I0515 15:12:14.947008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:02.670330 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-05-15 15:13:02.670311991 +0000 UTC m=+1512.510560896 I0515 15:13:02.692921 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-05-15 15:13:02.692901349 +0000 UTC m=+1512.533150254 I0515 15:13:02.693312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:13:02.693351 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-15 15:13:02.693344413 +0000 UTC m=+1512.533593288 I0515 15:13:02.719102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:02.719185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:13:02.719200 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-05-15 15:13:02.719195595 +0000 UTC m=+1512.559444450 E0515 15:13:02.728063 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0515 15:13:02.781411 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-05-15 15:13:02.781400422 +0000 UTC m=+1512.621649287 I0515 15:13:02.808125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:13:02.808155 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-15 15:13:02.808148862 +0000 UTC m=+1512.648397727 I0515 15:13:02.808425 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-05-15 15:13:02.80840831 +0000 UTC m=+1512.648657195 E0515 15:13:02.810065 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0515 15:13:02.824028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:02.824164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:13:02.824204 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-05-15 15:13:02.824193322 +0000 UTC m=+1512.664442227 I0515 15:13:03.339941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rpv4f" condition "Approved" to 2026-05-15 15:13:03.339927614 +0000 UTC m=+1513.180176479 I0515 15:13:03.362465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rpv4f" condition "Ready" to 2026-05-15 15:13:03.36245381 +0000 UTC m=+1513.202702685 I0515 15:13:03.396418 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:13:03.39640835 +0000 UTC m=+1513.236657225 I0515 15:13:03.414091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:03.492617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:03.636053 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-05-15 15:13:03.636037136 +0000 UTC m=+1513.476286011 I0515 15:13:03.659092 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:13:03.659148 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-05-15 15:13:03.659137561 +0000 UTC m=+1513.499386446 I0515 15:13:03.659082 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-15 15:13:03.659064929 +0000 UTC m=+1513.499313804 I0515 15:13:03.684707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:03.684871 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-05-15 15:13:03.684858388 +0000 UTC m=+1513.525107263 I0515 15:13:03.786493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:03.820852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8nshz" condition "Approved" to 2026-05-15 15:13:03.820836981 +0000 UTC m=+1513.661085856 I0515 15:13:03.874319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8nshz" condition "Ready" to 2026-05-15 15:13:03.87431054 +0000 UTC m=+1513.714559395 I0515 15:13:03.920966 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:13:03.920956393 +0000 UTC m=+1513.761205258 I0515 15:13:03.974183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:04.120121 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-05-15 15:13:04.120105473 +0000 UTC m=+1513.960354348 I0515 15:13:04.138852 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-05-15 15:13:04.138840359 +0000 UTC m=+1513.979089254 I0515 15:13:04.139146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:13:04.139213 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-15 15:13:04.13920337 +0000 UTC m=+1513.979452245 I0515 15:13:04.153277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:04.153323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:13:04.153340 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-05-15 15:13:04.15333548 +0000 UTC m=+1513.993584345 I0515 15:13:04.363369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:04.369387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-vzt4r" condition "Approved" to 2026-05-15 15:13:04.369367176 +0000 UTC m=+1514.209616041 I0515 15:13:04.403476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-vzt4r" condition "Ready" to 2026-05-15 15:13:04.40345978 +0000 UTC m=+1514.243708645 I0515 15:13:04.444011 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:13:04.443991238 +0000 UTC m=+1514.284240143 I0515 15:13:04.514033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:04.514418 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:13:04.514411407 +0000 UTC m=+1514.354660272 I0515 15:13:04.632342 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-05-15 15:13:04.632303594 +0000 UTC m=+1514.472552499 I0515 15:13:04.676951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:13:04.676978 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-05-15 15:13:04.676971574 +0000 UTC m=+1514.517220439 I0515 15:13:04.684095 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-15 15:13:04.68407643 +0000 UTC m=+1514.524325345 I0515 15:13:04.716440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:04.858491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:04.858611 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-05-15 15:13:04.858602857 +0000 UTC m=+1514.698851722 I0515 15:13:05.136136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:13:05.269167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rpw2v" condition "Approved" to 2026-05-15 15:13:05.269153477 +0000 UTC m=+1515.109402352 I0515 15:13:05.374983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rpw2v" condition "Ready" to 2026-05-15 15:13:05.374971491 +0000 UTC m=+1515.215220346 I0515 15:13:06.042134 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:13:06.042114677 +0000 UTC m=+1515.882363552 I0515 15:13:06.066936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:16:37.110629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:16:37.110705 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-15 15:16:37.110658707 +0000 UTC m=+1726.950907602 I0515 15:16:37.110704 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-05-15 15:16:37.110682827 +0000 UTC m=+1726.950931742 I0515 15:16:37.131891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:16:37.132011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:16:37.132046 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-05-15 15:16:37.13203626 +0000 UTC m=+1726.972285165 I0515 15:16:37.327888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-g885w" condition "Approved" to 2026-05-15 15:16:37.32787282 +0000 UTC m=+1727.168121685 I0515 15:16:37.350466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-g885w" condition "Ready" to 2026-05-15 15:16:37.350452972 +0000 UTC m=+1727.190701847 I0515 15:16:37.380130 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:16:37.38011595 +0000 UTC m=+1727.220364845 I0515 15:16:37.401421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:16:37.401761 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:16:37.401754712 +0000 UTC m=+1727.242003587 I0515 15:16:37.409926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:16:37.430099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:16:39.666655 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-05-15 15:16:39.666639513 +0000 UTC m=+1729.506888398 I0515 15:16:39.666932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:16:39.666955 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-15 15:16:39.666952153 +0000 UTC m=+1729.507201028 I0515 15:16:39.692695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:16:39.692881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:16:39.692895 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-05-15 15:16:39.692889382 +0000 UTC m=+1729.533138257 I0515 15:16:40.118214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:16:40.144581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-4g7cj" condition "Approved" to 2026-05-15 15:16:40.1445536 +0000 UTC m=+1729.984802495 I0515 15:16:40.178787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-4g7cj" condition "Ready" to 2026-05-15 15:16:40.178775394 +0000 UTC m=+1730.019024269 I0515 15:16:40.211642 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:16:40.211631065 +0000 UTC m=+1730.051879920 I0515 15:16:40.244354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:16:40.330120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:21:55.986505 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-15 15:21:55.986490251 +0000 UTC m=+2045.826739116 I0515 15:21:55.986630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:21:55.986696 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-05-15 15:21:55.986689197 +0000 UTC m=+2045.826938062 I0515 15:21:56.006192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:21:56.006280 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-05-15 15:21:56.006271965 +0000 UTC m=+2045.846520850 I0515 15:21:56.354414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:21:56.389388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-5tvmf" condition "Approved" to 2026-05-15 15:21:56.389377305 +0000 UTC m=+2046.229626170 I0515 15:21:56.415698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-5tvmf" condition "Ready" to 2026-05-15 15:21:56.415684138 +0000 UTC m=+2046.255933013 I0515 15:21:56.448776 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:21:56.448761488 +0000 UTC m=+2046.289010363 I0515 15:21:56.471816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:21:56.472721 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:21:56.472707886 +0000 UTC m=+2046.312956771 I0515 15:21:56.502898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:21:56.516154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:22:35.893763 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 15:22:35.893746904 +0000 UTC m=+2085.733995779 I0515 15:22:35.893854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 15:22:35.893905 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-05-15 15:22:35.893898679 +0000 UTC m=+2085.734147554 I0515 15:22:35.908613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:22:35.908736 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-05-15 15:22:35.908725302 +0000 UTC m=+2085.748974177 I0515 15:22:36.280266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:22:36.312602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5vf5d" condition "Approved" to 2026-05-15 15:22:36.31258332 +0000 UTC m=+2086.152832225 I0515 15:22:36.335482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5vf5d" condition "Ready" to 2026-05-15 15:22:36.33546338 +0000 UTC m=+2086.175712285 I0515 15:22:36.362918 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:22:36.362899664 +0000 UTC m=+2086.203148539 I0515 15:22:36.383644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:22:36.383982 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 15:22:36.383976907 +0000 UTC m=+2086.224225772 I0515 15:22:36.394815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 15:22:36.407157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"