I0701 07:28:39.091066 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0701 07:28:39.091266 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0701 07:28:39.091376 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0701 07:28:39.098527 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0701 07:28:39.099164 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0701 07:28:39.099288 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0701 07:28:39.099287 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0701 07:28:39.103300 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0701 07:28:39.118862 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0701 07:28:39.123984 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0701 07:28:39.126509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0701 07:28:39.133310 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0701 07:28:39.136847 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0701 07:28:39.139130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0701 07:28:39.141540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0701 07:28:39.143942 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0701 07:28:39.145804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0701 07:28:39.145831 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0701 07:28:39.145838 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0701 07:28:39.145843 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0701 07:28:39.145939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0701 07:28:39.148341 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0701 07:28:39.153876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0701 07:28:39.157797 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0701 07:28:39.161145 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0701 07:28:39.162909 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0701 07:28:39.163049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0701 07:28:39.165273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0701 07:28:39.167059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0701 07:28:39.169214 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0701 07:28:39.170817 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0701 07:28:39.170850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0701 07:28:39.172662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0701 07:28:39.176332 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.177676 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.179864 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.194908 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.212054 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.226877 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.243979 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.259533 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.270313 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:39.277863 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0701 07:28:52.777045 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-01 07:28:52.777032743 +0000 UTC m=+13.717208915 I0701 07:28:53.500053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:28:53.500091 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-01 07:28:53.500073764 +0000 UTC m=+14.440249966 I0701 07:28:53.500144 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-01 07:28:53.500132585 +0000 UTC m=+14.440308797 E0701 07:28:53.512572 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:28:53.512669 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-01 07:28:53.512658353 +0000 UTC m=+14.452834555 E0701 07:28:53.512705 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:28:53.515767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:53.515867 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-01 07:28:53.515857817 +0000 UTC m=+14.456033999 E0701 07:28:53.522107 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0701 07:28:53.522339 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:28:53.522402 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:28:53.522464 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0701 07:28:53.529683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:53.529764 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-01 07:28:53.529754165 +0000 UTC m=+14.469930367 I0701 07:28:53.537605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:53.540008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4fmvs" condition "Approved" to 2026-07-01 07:28:53.539997521 +0000 UTC m=+14.480173703 I0701 07:28:53.547167 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-01 07:28:53.547155825 +0000 UTC m=+14.487332007 I0701 07:28:53.553191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:53.553884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4fmvs" condition "Ready" to 2026-07-01 07:28:53.553876759 +0000 UTC m=+14.494052941 I0701 07:28:53.573136 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:28:53.57312389 +0000 UTC m=+14.513300102 I0701 07:28:53.589386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:28:58.522751 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:28:58.522729905 +0000 UTC m=+19.462906107 I0701 07:29:20.086307 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-01 07:29:20.086284224 +0000 UTC m=+41.026460406 I0701 07:29:20.086337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:29:20.086449 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-01 07:29:20.086437307 +0000 UTC m=+41.026613509 I0701 07:29:20.121961 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-01 07:29:20.121941371 +0000 UTC m=+41.062117573 I0701 07:29:20.146870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:20.147011 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-01 07:29:20.147000886 +0000 UTC m=+41.087177058 I0701 07:29:20.465213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:20.681312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rdmg6" condition "Approved" to 2026-07-01 07:29:20.681291617 +0000 UTC m=+41.621467829 I0701 07:29:20.754027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rdmg6" condition "Ready" to 2026-07-01 07:29:20.754015665 +0000 UTC m=+41.694191847 I0701 07:29:21.025024 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:21.025005664 +0000 UTC m=+41.965181876 I0701 07:29:21.196284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:29:21.196623 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:29:21.196615511 +0000 UTC m=+42.136791703 I0701 07:29:21.356501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:55.604849 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:31:55.604946 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-01 07:31:55.60493497 +0000 UTC m=+196.545111172 I0701 07:31:55.604990 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-01 07:31:55.6049568 +0000 UTC m=+196.545133002 E0701 07:31:55.619390 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0701 07:31:55.619508 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-01 07:31:55.61950155 +0000 UTC m=+196.559677732 I0701 07:31:55.619534 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0701 07:31:55.624021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:55.624195 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-01 07:31:55.624180906 +0000 UTC m=+196.564357088 E0701 07:31:55.635932 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0701 07:31:55.636129 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0701 07:31:55.636210 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0701 07:31:55.636278 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0701 07:31:55.637563 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-01 07:31:55.63754553 +0000 UTC m=+196.577721692 I0701 07:31:55.638016 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:31:55.638064 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-01 07:31:55.638052021 +0000 UTC m=+196.578228203 I0701 07:31:55.654751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:55.654854 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-01 07:31:55.654844392 +0000 UTC m=+196.595020594 I0701 07:31:55.733446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:55.767719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6cjq5" condition "Approved" to 2026-07-01 07:31:55.76763612 +0000 UTC m=+196.707812312 I0701 07:31:55.787136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6cjq5" condition "Ready" to 2026-07-01 07:31:55.787116702 +0000 UTC m=+196.727292914 I0701 07:31:56.085212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:56.133460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6crlj" condition "Approved" to 2026-07-01 07:31:56.133449968 +0000 UTC m=+197.073626150 I0701 07:31:56.176540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6crlj" condition "Ready" to 2026-07-01 07:31:56.176523454 +0000 UTC m=+197.116699666 I0701 07:31:56.201037 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:31:56.201024931 +0000 UTC m=+197.141201113 I0701 07:31:56.222107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:31:56.222545 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:31:56.222535878 +0000 UTC m=+197.162712060 I0701 07:31:56.245512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:32:00.636714 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:32:00.636694601 +0000 UTC m=+201.576870813 I0701 07:32:00.656864 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-6cjq5" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:32:00.656849978 +0000 UTC m=+201.597026150 I0701 07:32:00.690379 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:32:00.690361418 +0000 UTC m=+201.630537630 I0701 07:32:00.716146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:35:03.540476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:35:03.540670 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-07-01 07:35:03.540657126 +0000 UTC m=+384.480833308 I0701 07:35:03.540562 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-07-01 07:35:03.540492162 +0000 UTC m=+384.480668344 I0701 07:35:03.560158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:35:03.560292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:35:03.560331 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-07-01 07:35:03.560322572 +0000 UTC m=+384.500498754 I0701 07:35:03.763474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-rsnfg" condition "Approved" to 2026-07-01 07:35:03.76346194 +0000 UTC m=+384.703638122 I0701 07:35:03.785678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-rsnfg" condition "Ready" to 2026-07-01 07:35:03.785669244 +0000 UTC m=+384.725845416 I0701 07:35:03.842809 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:35:03.842789749 +0000 UTC m=+384.782965931 I0701 07:35:03.894236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:36:17.608109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:36:17.608160 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-01 07:36:17.608135964 +0000 UTC m=+458.548312156 I0701 07:36:17.608189 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-01 07:36:17.608173204 +0000 UTC m=+458.548349406 E0701 07:36:17.625477 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:36:17.625579 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-01 07:36:17.625570158 +0000 UTC m=+458.565746340 E0701 07:36:17.625609 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0701 07:36:17.625826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:36:17.625985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:36:17.627672 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-01 07:36:17.627646606 +0000 UTC m=+458.567822958 E0701 07:36:17.641974 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0701 07:36:17.642677 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:36:17.642715 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0701 07:36:17.642760 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0701 07:36:17.681200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:36:17.688168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7pwx9" condition "Approved" to 2026-07-01 07:36:17.688151988 +0000 UTC m=+458.628328170 I0701 07:36:17.702573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7pwx9" condition "Ready" to 2026-07-01 07:36:17.702558172 +0000 UTC m=+458.642734354 I0701 07:36:17.724471 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:36:17.72445643 +0000 UTC m=+458.664632642 I0701 07:36:17.742933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:36:17.743730 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:36:17.743717857 +0000 UTC m=+458.683894069 I0701 07:36:17.758137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:36:17.758407 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:36:17.758399797 +0000 UTC m=+458.698575999 I0701 07:36:17.761777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:36:22.644505 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:36:22.644482796 +0000 UTC m=+463.584658998 I0701 07:37:09.234031 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-01 07:37:09.234012476 +0000 UTC m=+510.174188658 I0701 07:37:09.234558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:37:09.234603 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-01 07:37:09.234599351 +0000 UTC m=+510.174775523 I0701 07:37:09.237365 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-01 07:37:09.237347196 +0000 UTC m=+510.177523398 I0701 07:37:09.237740 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-01 07:37:09.237732725 +0000 UTC m=+510.177908937 I0701 07:37:09.237900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:37:09.237970 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-01 07:37:09.23795635 +0000 UTC m=+510.178132552 I0701 07:37:09.238192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:37:09.238212 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-01 07:37:09.238209216 +0000 UTC m=+510.178385388 I0701 07:37:09.279804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:09.279904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:37:09.279929 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-01 07:37:09.27992322 +0000 UTC m=+510.220099392 I0701 07:37:09.280388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:09.280510 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-01 07:37:09.280500744 +0000 UTC m=+510.220676916 I0701 07:37:09.280759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:09.281270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:37:09.281318 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-01 07:37:09.281311943 +0000 UTC m=+510.221488115 I0701 07:37:09.383826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:09.426592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qvp7m" condition "Approved" to 2026-07-01 07:37:09.426573663 +0000 UTC m=+510.366749845 I0701 07:37:09.456430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qvp7m" condition "Ready" to 2026-07-01 07:37:09.456413934 +0000 UTC m=+510.396590146 I0701 07:37:09.497331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:09.498049 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:37:09.498027085 +0000 UTC m=+510.438203297 I0701 07:37:09.503279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mb76f" condition "Approved" to 2026-07-01 07:37:09.503259589 +0000 UTC m=+510.443435771 I0701 07:37:09.528076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mb76f" condition "Ready" to 2026-07-01 07:37:09.528049659 +0000 UTC m=+510.468225861 I0701 07:37:09.531176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:09.580492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gv82m" condition "Approved" to 2026-07-01 07:37:09.580473238 +0000 UTC m=+510.520649450 I0701 07:37:09.680513 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:37:09.680492791 +0000 UTC m=+510.620669003 I0701 07:37:09.950824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gv82m" condition "Ready" to 2026-07-01 07:37:09.950811999 +0000 UTC m=+510.890988181 I0701 07:37:10.141196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:10.141658 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:37:10.141647014 +0000 UTC m=+511.081823196 I0701 07:37:10.539752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:10.701847 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:37:10.701823356 +0000 UTC m=+511.641999548 I0701 07:37:10.708758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:10.756261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:18.888996 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" condition "Ready" to 2026-07-01 07:37:18.888974094 +0000 UTC m=+519.829150296 I0701 07:37:18.889125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:37:18.889204 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" condition "Issuing" to 2026-07-01 07:37:18.889187279 +0000 UTC m=+519.829363491 I0701 07:37:18.908373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:18.908465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:37:18.908491 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" condition "Issuing" to 2026-07-01 07:37:18.908484368 +0000 UTC m=+519.848660550 I0701 07:37:19.220689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:19.225332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7qq2x-j7vlh" condition "Approved" to 2026-07-01 07:37:19.225320535 +0000 UTC m=+520.165496717 I0701 07:37:19.248682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7qq2x-j7vlh" condition "Ready" to 2026-07-01 07:37:19.24866938 +0000 UTC m=+520.188845562 I0701 07:37:19.282024 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:37:19.281986084 +0000 UTC m=+520.222162266 I0701 07:37:19.300420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:37:19.300872 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:37:19.300866864 +0000 UTC m=+520.241043046 I0701 07:37:19.323152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7qq2x-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:38:06.650349 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-01 07:38:06.650298378 +0000 UTC m=+567.590474560 I0701 07:38:06.650369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:38:06.650412 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-01 07:38:06.650402931 +0000 UTC m=+567.590579113 I0701 07:38:06.672977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:38:06.673070 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:38:06.673102 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-01 07:38:06.673092761 +0000 UTC m=+567.613268973 I0701 07:38:06.863944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:38:06.873612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2cv28" condition "Approved" to 2026-07-01 07:38:06.873589417 +0000 UTC m=+567.813765599 I0701 07:38:06.909933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2cv28" condition "Ready" to 2026-07-01 07:38:06.909922902 +0000 UTC m=+567.850099074 I0701 07:38:06.971602 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:38:06.971576621 +0000 UTC m=+567.911752833 I0701 07:38:07.040310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:38:07.141582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:41:25.272925 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-01 07:41:25.272913679 +0000 UTC m=+766.213089871 I0701 07:41:25.273010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:41:25.273131 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-01 07:41:25.273121013 +0000 UTC m=+766.213297235 I0701 07:41:25.291048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:41:25.291191 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-01 07:41:25.291175488 +0000 UTC m=+766.231351690 I0701 07:41:25.542482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:41:25.574253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4dtrl" condition "Approved" to 2026-07-01 07:41:25.574228326 +0000 UTC m=+766.514404508 I0701 07:41:25.594857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4dtrl" condition "Ready" to 2026-07-01 07:41:25.59483774 +0000 UTC m=+766.535013932 I0701 07:41:25.622832 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:41:25.622813554 +0000 UTC m=+766.562989726 I0701 07:41:25.650943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:41:25.651377 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:41:25.651369861 +0000 UTC m=+766.591546033 I0701 07:41:25.657146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:41:25.670672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:43:54.539625 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-01 07:43:54.539609832 +0000 UTC m=+915.479786014 I0701 07:43:54.539632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:43:54.539805 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-01 07:43:54.539789936 +0000 UTC m=+915.479966138 I0701 07:43:54.561180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:43:54.561357 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-01 07:43:54.561344052 +0000 UTC m=+915.501520254 I0701 07:43:55.057844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:43:55.092756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-nhwlq" condition "Approved" to 2026-07-01 07:43:55.092734085 +0000 UTC m=+916.032910287 I0701 07:43:55.119674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-nhwlq" condition "Ready" to 2026-07-01 07:43:55.11966094 +0000 UTC m=+916.059837152 I0701 07:43:55.154463 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:43:55.154447748 +0000 UTC m=+916.094623960 I0701 07:43:55.184115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:43:55.184688 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:43:55.184676826 +0000 UTC m=+916.124853018 I0701 07:43:55.196291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:43:55.209880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:45:10.265199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:45:10.265249 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-01 07:45:10.265246175 +0000 UTC m=+991.205422337 I0701 07:45:10.265193 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-01 07:45:10.265181143 +0000 UTC m=+991.205357325 I0701 07:45:10.282783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:45:10.282921 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-01 07:45:10.282911124 +0000 UTC m=+991.223087306 I0701 07:45:10.376264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:45:10.428133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dkkff" condition "Approved" to 2026-07-01 07:45:10.428111961 +0000 UTC m=+991.368288143 I0701 07:45:10.461805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dkkff" condition "Ready" to 2026-07-01 07:45:10.461792594 +0000 UTC m=+991.401968776 I0701 07:45:10.500755 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:45:10.500735284 +0000 UTC m=+991.440911486 I0701 07:45:10.530723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:45:10.531119 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:45:10.531109995 +0000 UTC m=+991.471286177 I0701 07:45:10.538065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:45:10.554198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:48:24.806399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:48:24.806425 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-01 07:48:24.806404471 +0000 UTC m=+1185.746580683 I0701 07:48:24.806511 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-01 07:48:24.806498083 +0000 UTC m=+1185.746674295 I0701 07:48:24.825318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:48:24.825433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:48:24.825460 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-01 07:48:24.82545125 +0000 UTC m=+1185.765627432 I0701 07:48:25.293507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8tjmp" condition "Approved" to 2026-07-01 07:48:25.293490803 +0000 UTC m=+1186.233667015 I0701 07:48:25.360485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8tjmp" condition "Ready" to 2026-07-01 07:48:25.360462528 +0000 UTC m=+1186.300638740 I0701 07:48:25.481141 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:48:25.481053659 +0000 UTC m=+1186.421229861 I0701 07:48:25.531618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:48:25.661391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:56:26.405623 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-01 07:56:26.405593891 +0000 UTC m=+1667.345770123 I0701 07:56:26.405655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:56:26.405897 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-01 07:56:26.405887097 +0000 UTC m=+1667.346063269 I0701 07:56:26.424508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:56:26.424649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:56:26.424681 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-01 07:56:26.424673842 +0000 UTC m=+1667.364850024 I0701 07:56:26.646740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rf526" condition "Approved" to 2026-07-01 07:56:26.646699006 +0000 UTC m=+1667.586875218 I0701 07:56:26.668760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-rf526" condition "Ready" to 2026-07-01 07:56:26.668748386 +0000 UTC m=+1667.608924558 I0701 07:56:26.704691 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:56:26.704672367 +0000 UTC m=+1667.644848549 I0701 07:56:26.723628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:56:26.783004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:57:58.454363 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-01 07:57:58.454342159 +0000 UTC m=+1759.394518331 I0701 07:57:58.454413 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:57:58.454468 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-01 07:57:58.454454151 +0000 UTC m=+1759.394630333 I0701 07:57:58.475576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:57:58.475699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 07:57:58.475725 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-01 07:57:58.475716618 +0000 UTC m=+1759.415892800 I0701 07:57:58.711383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-fn552" condition "Approved" to 2026-07-01 07:57:58.711360702 +0000 UTC m=+1759.651536914 I0701 07:57:58.738008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-fn552" condition "Ready" to 2026-07-01 07:57:58.737993533 +0000 UTC m=+1759.678169735 I0701 07:57:58.767484 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:57:58.767463839 +0000 UTC m=+1759.707640011 I0701 07:57:58.789576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:57:58.790065 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:57:58.790056177 +0000 UTC m=+1759.730232359 I0701 07:57:58.794471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:57:58.808168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 07:57:58.808562 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 07:57:58.808549381 +0000 UTC m=+1759.748725563 I0701 08:00:06.825806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:00:06.825863 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-01 08:00:06.825849838 +0000 UTC m=+1887.766026040 I0701 08:00:06.826784 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-01 08:00:06.82677518 +0000 UTC m=+1887.766951392 I0701 08:00:06.854315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:06.854403 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:00:06.854425 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-01 08:00:06.854418483 +0000 UTC m=+1887.794594685 I0701 08:00:06.921701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:06.921785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-n5cmx" condition "Approved" to 2026-07-01 08:00:06.921770627 +0000 UTC m=+1887.861946799 I0701 08:00:06.944399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-n5cmx" condition "Ready" to 2026-07-01 08:00:06.944385517 +0000 UTC m=+1887.884561699 I0701 08:00:06.980010 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:00:06.979989653 +0000 UTC m=+1887.920165855 I0701 08:00:07.003159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:07.003569 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:00:07.003562604 +0000 UTC m=+1887.943738796 I0701 08:00:07.011139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:07.025218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:07.025551 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:00:07.025539377 +0000 UTC m=+1887.965715559 I0701 08:00:07.544486 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-01 08:00:07.544462988 +0000 UTC m=+1888.484639200 I0701 08:00:07.545086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:00:07.545120 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-01 08:00:07.545113783 +0000 UTC m=+1888.485289995 I0701 08:00:07.566645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:07.566711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:00:07.566727 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-01 08:00:07.566722649 +0000 UTC m=+1888.506898831 I0701 08:00:07.622553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-6vx56" condition "Approved" to 2026-07-01 08:00:07.622528198 +0000 UTC m=+1888.562704380 I0701 08:00:07.647822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-6vx56" condition "Ready" to 2026-07-01 08:00:07.647807018 +0000 UTC m=+1888.587983200 I0701 08:00:07.686212 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:00:07.686196138 +0000 UTC m=+1888.626372310 I0701 08:00:07.712616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:07.712899 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:00:07.71289131 +0000 UTC m=+1888.653067482 I0701 08:00:07.736406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:08.351399 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-01 08:00:08.351384813 +0000 UTC m=+1889.291560985 I0701 08:00:09.061409 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-01 08:00:09.061394044 +0000 UTC m=+1890.001570236 I0701 08:00:54.656159 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-01 08:00:54.65613927 +0000 UTC m=+1935.596315452 I0701 08:00:54.656286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:00:54.656309 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-01 08:00:54.656304744 +0000 UTC m=+1935.596480916 I0701 08:00:54.681015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:54.681113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:00:54.681145 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-01 08:00:54.681137704 +0000 UTC m=+1935.621313886 I0701 08:00:56.392374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:56.418212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5qfr5" condition "Approved" to 2026-07-01 08:00:56.418196081 +0000 UTC m=+1937.358372253 I0701 08:00:56.462296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5qfr5" condition "Ready" to 2026-07-01 08:00:56.462277113 +0000 UTC m=+1937.402453325 I0701 08:00:56.498027 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:00:56.498014564 +0000 UTC m=+1937.438190726 I0701 08:00:56.520470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:56.521203 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:00:56.521194626 +0000 UTC m=+1937.461370798 I0701 08:00:56.529790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:56.543743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:00:56.544525 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:00:56.544515302 +0000 UTC m=+1937.484691484 I0701 08:03:35.473078 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-01 08:03:35.473058433 +0000 UTC m=+2096.413234695 I0701 08:03:35.473120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:03:35.473225 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-01 08:03:35.473211797 +0000 UTC m=+2096.413387999 I0701 08:03:35.547160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:03:35.547251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:03:35.547286 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-01 08:03:35.547264977 +0000 UTC m=+2096.487441159 I0701 08:03:36.090055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-snpzk" condition "Approved" to 2026-07-01 08:03:36.090041794 +0000 UTC m=+2097.030217966 I0701 08:03:36.155110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-snpzk" condition "Ready" to 2026-07-01 08:03:36.155098608 +0000 UTC m=+2097.095274780 I0701 08:03:36.213185 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:03:36.213171392 +0000 UTC m=+2097.153347574 I0701 08:03:36.248011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:03:36.472000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:03:37.350433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:03:37.350485 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-01 08:03:37.350471893 +0000 UTC m=+2098.290648075 I0701 08:03:37.350993 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-01 08:03:37.350986454 +0000 UTC m=+2098.291162646 I0701 08:03:37.485605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:03:37.485730 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-01 08:03:37.485719869 +0000 UTC m=+2098.425896051 I0701 08:03:37.595456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:03:37.763748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4z8dc" condition "Approved" to 2026-07-01 08:03:37.763734784 +0000 UTC m=+2098.703910946 I0701 08:03:37.847744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4z8dc" condition "Ready" to 2026-07-01 08:03:37.847726803 +0000 UTC m=+2098.787903005 I0701 08:03:37.909834 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:03:37.909819519 +0000 UTC m=+2098.849995701 I0701 08:03:37.937219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:06:48.952639 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-01 08:06:48.952627998 +0000 UTC m=+2289.892804170 I0701 08:06:48.953067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:06:48.953107 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-01 08:06:48.953103919 +0000 UTC m=+2289.893280091 I0701 08:06:48.973779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:06:48.973923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:06:48.973956 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-01 08:06:48.973945637 +0000 UTC m=+2289.914121819 I0701 08:06:49.167650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-nrsj9" condition "Approved" to 2026-07-01 08:06:49.167635052 +0000 UTC m=+2290.107811224 I0701 08:06:49.187774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-nrsj9" condition "Ready" to 2026-07-01 08:06:49.187755223 +0000 UTC m=+2290.127931425 I0701 08:06:49.218122 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:06:49.21810848 +0000 UTC m=+2290.158284652 I0701 08:06:49.241562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:06:49.241964 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:06:49.241956788 +0000 UTC m=+2290.182132990 I0701 08:06:49.260899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:07:49.285889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-55882-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:07:49.285934 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-55882-api" condition "Issuing" to 2026-07-01 08:07:49.285924847 +0000 UTC m=+2350.226101029 I0701 08:07:49.286551 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-55882-api" condition "Ready" to 2026-07-01 08:07:49.286544751 +0000 UTC m=+2350.226720933 I0701 08:07:49.286844 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-55882-vnc" condition "Ready" to 2026-07-01 08:07:49.286839898 +0000 UTC m=+2350.227016080 I0701 08:07:49.287075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-55882-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:07:49.287094 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-55882-vnc" condition "Issuing" to 2026-07-01 08:07:49.287090654 +0000 UTC m=+2350.227266836 I0701 08:07:49.311192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-55882-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-55882-api\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:07:49.311372 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-55882-api" condition "Ready" to 2026-07-01 08:07:49.311359751 +0000 UTC m=+2350.251535963 I0701 08:07:49.334091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-55882-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-55882-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:07:49.334322 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-55882-vnc" condition "Ready" to 2026-07-01 08:07:49.334306827 +0000 UTC m=+2350.274483039 I0701 08:07:49.668921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-55882-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-55882-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:07:49.669054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-55882-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-55882-api\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:07:49.796286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-55882-api-hknvt" condition "Approved" to 2026-07-01 08:07:49.796268409 +0000 UTC m=+2350.736444621 I0701 08:07:49.825186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-55882-vnc-kgjx5" condition "Approved" to 2026-07-01 08:07:49.825172922 +0000 UTC m=+2350.765349084 I0701 08:07:49.826722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-55882-api-hknvt" condition "Ready" to 2026-07-01 08:07:49.826711758 +0000 UTC m=+2350.766887940 I0701 08:07:49.845644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-55882-vnc-kgjx5" condition "Ready" to 2026-07-01 08:07:49.845633851 +0000 UTC m=+2350.785810033 I0701 08:07:49.919873 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-55882-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:07:49.919838335 +0000 UTC m=+2350.860014517 I0701 08:07:49.924849 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-55882-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:07:49.92484347 +0000 UTC m=+2350.865019652 I0701 08:07:49.993029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-55882-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-55882-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:07:49.994373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-55882-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-55882-api\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:07:49.994762 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-55882-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:07:49.994753234 +0000 UTC m=+2350.934929416 I0701 08:07:50.025426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-55882-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-55882-api\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:11:21.400383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:11:21.400499 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-01 08:11:21.400489846 +0000 UTC m=+2562.340666048 I0701 08:11:21.400559 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-01 08:11:21.400536377 +0000 UTC m=+2562.340712569 I0701 08:11:21.463226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:11:21.463403 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-01 08:11:21.463389789 +0000 UTC m=+2562.403566001 I0701 08:11:21.624336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:11:21.839556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-7fjvq" condition "Approved" to 2026-07-01 08:11:21.839534121 +0000 UTC m=+2562.779710293 I0701 08:11:21.919066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-7fjvq" condition "Ready" to 2026-07-01 08:11:21.919049177 +0000 UTC m=+2562.859225359 I0701 08:11:21.984005 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:11:21.983986637 +0000 UTC m=+2562.924162819 I0701 08:11:22.279219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:11:22.280213 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:11:22.280202475 +0000 UTC m=+2563.220378657 I0701 08:11:22.376309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:11:23.321504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:11:23.321550 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-01 08:11:23.321539022 +0000 UTC m=+2564.261715224 I0701 08:11:23.321822 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-01 08:11:23.321787258 +0000 UTC m=+2564.261963510 I0701 08:11:23.398700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:11:23.398919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:11:23.398973 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-01 08:11:23.398958879 +0000 UTC m=+2564.339135101 I0701 08:11:23.694242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-k7mm9" condition "Approved" to 2026-07-01 08:11:23.694213585 +0000 UTC m=+2564.634389767 I0701 08:11:23.727424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-k7mm9" condition "Ready" to 2026-07-01 08:11:23.727408347 +0000 UTC m=+2564.667584539 I0701 08:11:23.779170 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:11:23.779147785 +0000 UTC m=+2564.719323997 I0701 08:11:23.870766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:11:24.056358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:58.430100 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-01 08:13:58.430074958 +0000 UTC m=+2719.370251130 I0701 08:13:58.430629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:13:58.430747 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-01 08:13:58.430734652 +0000 UTC m=+2719.370910854 I0701 08:13:58.446134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:58.446236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:13:58.446270 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-01 08:13:58.446262188 +0000 UTC m=+2719.386438390 E0701 08:13:58.446872 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0701 08:13:58.446936 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-01 08:13:58.446928703 +0000 UTC m=+2719.387104915 I0701 08:13:58.446960 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0701 08:13:58.457629 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0701 08:13:58.457788 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0701 08:13:58.457886 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0701 08:13:58.457930 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0701 08:13:58.497006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-gkz6l" condition "Approved" to 2026-07-01 08:13:58.49698657 +0000 UTC m=+2719.437162762 I0701 08:13:58.515796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-gkz6l" condition "Ready" to 2026-07-01 08:13:58.515783641 +0000 UTC m=+2719.455959823 I0701 08:13:58.541626 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:13:58.541605692 +0000 UTC m=+2719.481781924 I0701 08:13:58.568476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:58.568878 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:13:58.568869447 +0000 UTC m=+2719.509045629 I0701 08:13:58.585932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:58.588344 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:13:58.588320683 +0000 UTC m=+2719.528496865 I0701 08:13:59.173684 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-01 08:13:59.173668091 +0000 UTC m=+2720.113844273 I0701 08:13:59.174218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:13:59.174244 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-01 08:13:59.174239594 +0000 UTC m=+2720.114415776 I0701 08:13:59.192873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:59.192985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:13:59.193009 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-01 08:13:59.193002593 +0000 UTC m=+2720.133178765 E0701 08:13:59.193082 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0701 08:13:59.193131 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-01 08:13:59.193121726 +0000 UTC m=+2720.133297908 I0701 08:13:59.193185 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0701 08:13:59.209702 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0701 08:13:59.209812 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0701 08:13:59.209839 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0701 08:13:59.209877 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0701 08:13:59.239025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:59.242803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-9qh6g" condition "Approved" to 2026-07-01 08:13:59.242786704 +0000 UTC m=+2720.182962886 I0701 08:13:59.263550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-9qh6g" condition "Ready" to 2026-07-01 08:13:59.263534899 +0000 UTC m=+2720.203711071 I0701 08:13:59.299985 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:13:59.299970264 +0000 UTC m=+2720.240146446 I0701 08:13:59.323252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:59.323552 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:13:59.323540634 +0000 UTC m=+2720.263716846 I0701 08:13:59.335435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:59.351101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:13:59.999374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:13:59.999547 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-01 08:13:59.999532488 +0000 UTC m=+2720.939708690 I0701 08:13:59.999405 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-01 08:13:59.999376695 +0000 UTC m=+2720.939552897 I0701 08:14:00.045000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:14:00.045133 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-01 08:14:00.045123393 +0000 UTC m=+2720.985299565 I0701 08:14:00.098014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:14:00.104268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:14:00.104382 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-01 08:14:00.10437351 +0000 UTC m=+2721.044549682 I0701 08:14:00.112473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-pfbw4" condition "Approved" to 2026-07-01 08:14:00.112462145 +0000 UTC m=+2721.052638317 I0701 08:14:00.138968 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-01 08:14:00.138953272 +0000 UTC m=+2721.079129444 I0701 08:14:00.140286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-pfbw4" condition "Ready" to 2026-07-01 08:14:00.140271822 +0000 UTC m=+2721.080447994 I0701 08:14:00.196591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:14:03.458355 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:14:03.458325717 +0000 UTC m=+2724.398501929 I0701 08:14:03.472212 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-pfbw4" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:14:03.472196735 +0000 UTC m=+2724.412372897 I0701 08:14:03.508326 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:14:03.508306652 +0000 UTC m=+2724.448482864 I0701 08:14:03.531707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:14:03.532305 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:14:03.532293771 +0000 UTC m=+2724.472469953 I0701 08:14:03.564038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:14:03.564484 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:14:03.564473199 +0000 UTC m=+2724.504649381 I0701 08:14:04.211956 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:14:04.211924129 +0000 UTC m=+2725.152100311 I0701 08:16:32.967560 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-01 08:16:32.967540736 +0000 UTC m=+2873.907716918 I0701 08:16:32.968204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:16:32.968265 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-01 08:16:32.968253692 +0000 UTC m=+2873.908429894 I0701 08:16:32.986017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:16:32.986154 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-01 08:16:32.986143232 +0000 UTC m=+2873.926319414 I0701 08:16:33.164578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:16:33.227284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-z4zsh" condition "Approved" to 2026-07-01 08:16:33.227264575 +0000 UTC m=+2874.167440747 I0701 08:16:33.251091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-z4zsh" condition "Ready" to 2026-07-01 08:16:33.25107766 +0000 UTC m=+2874.191253832 I0701 08:16:33.291742 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:16:33.291725712 +0000 UTC m=+2874.231901884 I0701 08:16:33.322745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:16:33.324202 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:16:33.324195235 +0000 UTC m=+2874.264371407 I0701 08:16:33.348418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:16:33.348824 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:16:33.348812979 +0000 UTC m=+2874.288989151 I0701 08:16:33.352184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:20.448218 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-01 08:17:20.4481998 +0000 UTC m=+2921.388375982 I0701 08:17:20.475150 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-01 08:17:20.475135918 +0000 UTC m=+2921.415312090 I0701 08:17:20.475564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:17:20.475583 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-01 08:17:20.475580698 +0000 UTC m=+2921.415756870 I0701 08:17:20.496087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:20.496187 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-01 08:17:20.496175089 +0000 UTC m=+2921.436351301 E0701 08:17:20.508183 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0701 08:17:20.566507 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-01 08:17:20.56648076 +0000 UTC m=+2921.506656942 I0701 08:17:20.600964 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-01 08:17:20.60094563 +0000 UTC m=+2921.541121852 I0701 08:17:20.601467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:17:20.601491 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-01 08:17:20.601486152 +0000 UTC m=+2921.541662334 I0701 08:17:20.634170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:20.634306 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-01 08:17:20.634291392 +0000 UTC m=+2921.574467604 E0701 08:17:20.700315 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0701 08:17:20.821869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:20.862998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rsscq" condition "Approved" to 2026-07-01 08:17:20.862983622 +0000 UTC m=+2921.803159794 I0701 08:17:20.886452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-rsscq" condition "Ready" to 2026-07-01 08:17:20.886433348 +0000 UTC m=+2921.826609540 I0701 08:17:20.927725 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:17:20.927706164 +0000 UTC m=+2921.867882346 I0701 08:17:20.955244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:20.955646 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:17:20.955637874 +0000 UTC m=+2921.895814066 I0701 08:17:20.981996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:21.500042 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-01 08:17:21.500022815 +0000 UTC m=+2922.440199027 I0701 08:17:21.525000 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-01 08:17:21.524980985 +0000 UTC m=+2922.465157177 I0701 08:17:21.525412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:17:21.525466 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-01 08:17:21.525457227 +0000 UTC m=+2922.465633399 I0701 08:17:21.543267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:21.543338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:17:21.543357 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-01 08:17:21.543349317 +0000 UTC m=+2922.483525499 I0701 08:17:21.810319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-4xffx" condition "Approved" to 2026-07-01 08:17:21.810303021 +0000 UTC m=+2922.750479193 I0701 08:17:21.828883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-4xffx" condition "Ready" to 2026-07-01 08:17:21.828867627 +0000 UTC m=+2922.769043799 I0701 08:17:21.873421 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:17:21.873401397 +0000 UTC m=+2922.813577579 I0701 08:17:21.920642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:21.920841 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:17:21.920831474 +0000 UTC m=+2922.861007646 I0701 08:17:21.937579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:21.953202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:22.032016 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-01 08:17:22.031994979 +0000 UTC m=+2922.972171151 I0701 08:17:22.076250 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-01 08:17:22.076236123 +0000 UTC m=+2923.016412295 I0701 08:17:22.076590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:17:22.076608 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-01 08:17:22.076605731 +0000 UTC m=+2923.016781903 I0701 08:17:22.104044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:22.104218 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-01 08:17:22.104158312 +0000 UTC m=+2923.044334514 I0701 08:17:22.286117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:22.361427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-jtzcm" condition "Approved" to 2026-07-01 08:17:22.361410045 +0000 UTC m=+2923.301586227 I0701 08:17:22.387471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-jtzcm" condition "Ready" to 2026-07-01 08:17:22.387458952 +0000 UTC m=+2923.327635124 I0701 08:17:22.443280 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:17:22.44326375 +0000 UTC m=+2923.383439922 I0701 08:17:22.473270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:22.473603 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:17:22.473595505 +0000 UTC m=+2923.413771667 I0701 08:17:22.503370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:22.557583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:22.620280 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-01 08:17:22.620264004 +0000 UTC m=+2923.560440196 I0701 08:17:22.647298 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-01 08:17:22.647278624 +0000 UTC m=+2923.587454806 I0701 08:17:22.647417 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:17:22.647507 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-01 08:17:22.647492439 +0000 UTC m=+2923.587668651 I0701 08:17:22.770305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:22.770384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:17:22.770406 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-01 08:17:22.770400094 +0000 UTC m=+2923.710576266 I0701 08:17:23.059326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:23.116903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rvdzk" condition "Approved" to 2026-07-01 08:17:23.116884621 +0000 UTC m=+2924.057060793 I0701 08:17:23.171804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-rvdzk" condition "Ready" to 2026-07-01 08:17:23.171777618 +0000 UTC m=+2924.111953790 I0701 08:17:23.665219 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:17:23.66519449 +0000 UTC m=+2924.605370702 I0701 08:17:23.840232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:23.840561 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:17:23.840552727 +0000 UTC m=+2924.780728899 I0701 08:17:24.007428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:17:24.120541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:21:14.877450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:21:14.877508 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-01 08:21:14.87749789 +0000 UTC m=+3155.817674062 I0701 08:21:14.878098 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-01 08:21:14.878052003 +0000 UTC m=+3155.818228295 I0701 08:21:14.897938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:21:14.898085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:21:14.898132 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-01 08:21:14.898124243 +0000 UTC m=+3155.838300435 I0701 08:21:15.240226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:21:15.250075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-tkmpn" condition "Approved" to 2026-07-01 08:21:15.250057604 +0000 UTC m=+3156.190233776 I0701 08:21:15.276907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-tkmpn" condition "Ready" to 2026-07-01 08:21:15.276895669 +0000 UTC m=+3156.217071841 I0701 08:21:15.311221 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:21:15.311207095 +0000 UTC m=+3156.251383267 I0701 08:21:15.336393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:21:15.394940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:21:17.668102 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-01 08:21:17.668074553 +0000 UTC m=+3158.608250755 I0701 08:21:17.668832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:21:17.668865 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-01 08:21:17.66885791 +0000 UTC m=+3158.609034112 I0701 08:21:17.688174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:21:17.688779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:21:17.688816 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-01 08:21:17.688806767 +0000 UTC m=+3158.628982949 I0701 08:21:18.712788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-9wf62" condition "Approved" to 2026-07-01 08:21:18.712768113 +0000 UTC m=+3159.652944305 I0701 08:21:18.796715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-9wf62" condition "Ready" to 2026-07-01 08:21:18.796700896 +0000 UTC m=+3159.736877078 I0701 08:21:18.913893 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:21:18.91387772 +0000 UTC m=+3159.854053892 I0701 08:21:19.280320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:21:19.280729 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:21:19.280718643 +0000 UTC m=+3160.220894815 I0701 08:21:19.565624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:28:33.055906 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-01 08:28:33.055885858 +0000 UTC m=+3593.996062070 I0701 08:28:33.056367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:28:33.056479 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-01 08:28:33.056466742 +0000 UTC m=+3593.996642944 I0701 08:28:33.095931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:28:33.096280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:28:33.096332 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-01 08:28:33.096320257 +0000 UTC m=+3594.036496469 I0701 08:28:33.475956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-xb6dp" condition "Approved" to 2026-07-01 08:28:33.47593933 +0000 UTC m=+3594.416115542 I0701 08:28:33.505110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-xb6dp" condition "Ready" to 2026-07-01 08:28:33.505094092 +0000 UTC m=+3594.445270304 I0701 08:28:33.558470 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:28:33.558451494 +0000 UTC m=+3594.498627676 I0701 08:28:33.613670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:28:33.614013 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:28:33.614006986 +0000 UTC m=+3594.554183158 I0701 08:28:33.744448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:29:12.288929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0701 08:29:12.288977 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-01 08:29:12.288960498 +0000 UTC m=+3633.229136680 I0701 08:29:12.289465 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-01 08:29:12.289458819 +0000 UTC m=+3633.229635001 I0701 08:29:12.312501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:29:12.312629 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-01 08:29:12.312619616 +0000 UTC m=+3633.252795798 I0701 08:29:12.398443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:29:12.438163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kmdfg" condition "Approved" to 2026-07-01 08:29:12.438145387 +0000 UTC m=+3633.378321549 I0701 08:29:12.464162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-kmdfg" condition "Ready" to 2026-07-01 08:29:12.464147858 +0000 UTC m=+3633.404324040 I0701 08:29:12.511796 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:29:12.51177686 +0000 UTC m=+3633.451953042 I0701 08:29:12.530839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:29:12.531153 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:29:12.531144519 +0000 UTC m=+3633.471320691 I0701 08:29:12.547011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:29:12.575379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0701 08:29:12.575892 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-01 08:29:12.575883266 +0000 UTC m=+3633.516059448