I0331 04:55:57.611926 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0331 04:55:57.612050 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0331 04:55:57.612131 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 04:55:57.617804 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0331 04:55:57.619579 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0331 04:55:57.619773 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0331 04:55:57.620050 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0331 04:55:57.626261 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 04:55:57.642580 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0331 04:55:57.646190 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0331 04:55:57.648957 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0331 04:55:57.648984 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0331 04:55:57.649102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0331 04:55:57.652007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0331 04:55:57.656874 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0331 04:55:57.656946 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0331 04:55:57.661187 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0331 04:55:57.664153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0331 04:55:57.666313 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0331 04:55:57.668811 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0331 04:55:57.671511 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0331 04:55:57.674068 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0331 04:55:57.680125 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0331 04:55:57.683980 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0331 04:55:57.687184 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0331 04:55:57.687370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0331 04:55:57.689130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0331 04:55:57.690938 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0331 04:55:57.691030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0331 04:55:57.693052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0331 04:55:57.695011 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0331 04:55:57.697629 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0331 04:55:57.698273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0331 04:55:57.705347 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:57.706653 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:57.707979 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:57.708348 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:57.797030 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:58.004436 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:58.004887 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:58.005169 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:58.005646 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:55:58.005926 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 04:56:11.718550 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-31 04:56:11.718536268 +0000 UTC m=+14.137516468 I0331 04:56:12.461093 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 04:56:12.461077208 +0000 UTC m=+14.880057418 I0331 04:56:12.462308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 04:56:12.462387 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-31 04:56:12.462379503 +0000 UTC m=+14.881359713 E0331 04:56:12.500691 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 04:56:12.500799 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-31 04:56:12.500790817 +0000 UTC m=+14.919770987 E0331 04:56:12.500827 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 04:56:12.504573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:56:12.504663 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 04:56:12.50465597 +0000 UTC m=+14.923636150 E0331 04:56:12.532291 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0331 04:56:12.532719 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 04:56:12.532952 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 04:56:12.533160 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0331 04:56:12.535875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:56:12.535938 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 04:56:12.535929295 +0000 UTC m=+14.954909475 I0331 04:56:12.565973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dmbqw" condition "Approved" to 2026-03-31 04:56:12.565958016 +0000 UTC m=+14.984938226 I0331 04:56:12.588978 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 04:56:12.588961189 +0000 UTC m=+15.007941399 I0331 04:56:12.648315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:56:12.649224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dmbqw" condition "Ready" to 2026-03-31 04:56:12.649207397 +0000 UTC m=+15.068187607 I0331 04:56:12.753163 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 04:56:12.75314675 +0000 UTC m=+15.172126930 I0331 04:56:12.794183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:56:17.532820 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 04:56:17.532809481 +0000 UTC m=+19.951789661 I0331 04:56:40.745304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 04:56:40.745370 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-31 04:56:40.745362388 +0000 UTC m=+43.164342568 I0331 04:56:40.745607 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-31 04:56:40.745581884 +0000 UTC m=+43.164562134 I0331 04:56:40.758061 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-31 04:56:40.758049186 +0000 UTC m=+43.177029366 I0331 04:56:40.769694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:56:40.771253 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-31 04:56:40.771237618 +0000 UTC m=+43.190217838 I0331 04:56:41.016222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:56:41.051469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wmxvj" condition "Approved" to 2026-03-31 04:56:41.051452523 +0000 UTC m=+43.470432733 I0331 04:56:41.088753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wmxvj" condition "Ready" to 2026-03-31 04:56:41.088736478 +0000 UTC m=+43.507716678 I0331 04:56:41.122696 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 04:56:41.122680544 +0000 UTC m=+43.541660724 I0331 04:56:41.173203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:56:41.228587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:58:24.768439 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-31 04:58:24.76839559 +0000 UTC m=+147.187375760 I0331 04:58:24.768462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 04:58:24.768552 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-31 04:58:24.768540983 +0000 UTC m=+147.187521193 E0331 04:58:24.787075 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 04:58:24.787143 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-31 04:58:24.78713756 +0000 UTC m=+147.206117730 I0331 04:58:24.787174 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 04:58:24.789149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:58:24.789194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 04:58:24.789205 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-31 04:58:24.789201866 +0000 UTC m=+147.208182036 I0331 04:58:24.798992 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-31 04:58:24.798972827 +0000 UTC m=+147.217952997 I0331 04:58:24.799094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 04:58:24.799135 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-31 04:58:24.799128381 +0000 UTC m=+147.218108561 E0331 04:58:24.799002 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0331 04:58:24.799402 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 04:58:24.799431 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0331 04:58:24.799466 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0331 04:58:24.816647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:58:24.816731 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-31 04:58:24.816721891 +0000 UTC m=+147.235702071 I0331 04:58:25.029813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:58:25.099481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-g5hn9" condition "Approved" to 2026-03-31 04:58:25.099458188 +0000 UTC m=+147.518438398 I0331 04:58:25.105953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:58:25.118928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-g5hn9" condition "Ready" to 2026-03-31 04:58:25.118912558 +0000 UTC m=+147.537892738 I0331 04:58:25.121951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-xq8lw" condition "Approved" to 2026-03-31 04:58:25.121936609 +0000 UTC m=+147.540916789 I0331 04:58:25.148883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-xq8lw" condition "Ready" to 2026-03-31 04:58:25.148865098 +0000 UTC m=+147.567845298 I0331 04:58:25.184458 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 04:58:25.184446229 +0000 UTC m=+147.603426409 I0331 04:58:25.204812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 04:58:29.800597 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 04:58:29.800581134 +0000 UTC m=+152.219561314 I0331 04:58:29.820267 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-g5hn9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 04:58:29.820253569 +0000 UTC m=+152.239233769 I0331 04:58:29.852540 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 04:58:29.852516982 +0000 UTC m=+152.271497182 I0331 04:58:29.873756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:01:06.787023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-221.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:01:06.787060 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Issuing" to 2026-03-31 05:01:06.78705198 +0000 UTC m=+309.206032160 I0331 05:01:06.787091 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Ready" to 2026-03-31 05:01:06.787067281 +0000 UTC m=+309.206047481 I0331 05:01:06.804547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-221.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-221.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:01:06.804632 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Ready" to 2026-03-31 05:01:06.804623949 +0000 UTC m=+309.223604129 I0331 05:01:06.945686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-221.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-221.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:01:06.975167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-221.nip.io-tls-jflnb" condition "Approved" to 2026-03-31 05:01:06.975146261 +0000 UTC m=+309.394126472 I0331 05:01:07.000790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-221.nip.io-tls-jflnb" condition "Ready" to 2026-03-31 05:01:07.000771784 +0000 UTC m=+309.419752014 I0331 05:01:07.030614 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-221.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:01:07.030600709 +0000 UTC m=+309.449580879 I0331 05:01:07.050718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-221.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-221.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:02:18.936463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:02:18.936523 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-31 05:02:18.936505065 +0000 UTC m=+381.355485275 I0331 05:02:18.936576 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-31 05:02:18.936556487 +0000 UTC m=+381.355536677 I0331 05:02:18.952368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:02:18.952498 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-31 05:02:18.952487401 +0000 UTC m=+381.371467621 E0331 05:02:18.953638 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 05:02:18.953772 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-31 05:02:18.953760566 +0000 UTC m=+381.372740746 E0331 05:02:18.953847 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 05:02:18.967728 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0331 05:02:18.967935 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 05:02:18.967982 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 05:02:18.968045 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0331 05:02:18.969378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:02:18.985321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9qgpj" condition "Approved" to 2026-03-31 05:02:18.985303597 +0000 UTC m=+381.404283767 I0331 05:02:18.996782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9qgpj" condition "Ready" to 2026-03-31 05:02:18.99676759 +0000 UTC m=+381.415747800 I0331 05:02:19.020695 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:02:19.020677652 +0000 UTC m=+381.439657842 I0331 05:02:19.038191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:02:19.038521 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:02:19.038510839 +0000 UTC m=+381.457491019 I0331 05:02:19.051158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:02:19.055394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:02:23.968272 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:02:23.968255754 +0000 UTC m=+386.387235964 I0331 05:03:02.209847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:03:02.209933 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 05:03:02.209926305 +0000 UTC m=+424.628906505 I0331 05:03:02.210208 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-31 05:03:02.210202693 +0000 UTC m=+424.629182873 I0331 05:03:02.210433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:03:02.210479 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-31 05:03:02.21047069 +0000 UTC m=+424.629450870 I0331 05:03:02.210524 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-31 05:03:02.210520121 +0000 UTC m=+424.629500301 I0331 05:03:02.214235 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-31 05:03:02.214224662 +0000 UTC m=+424.633204832 I0331 05:03:02.214371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:03:02.214428 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-31 05:03:02.214423028 +0000 UTC m=+424.633403198 I0331 05:03:02.240075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:02.240152 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-31 05:03:02.24014475 +0000 UTC m=+424.659124930 I0331 05:03:02.245918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:02.246113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:03:02.246197 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-31 05:03:02.246140004 +0000 UTC m=+424.665120184 I0331 05:03:02.249370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:02.249432 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-31 05:03:02.249425323 +0000 UTC m=+424.668405493 I0331 05:03:02.447599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:02.454496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vlc7q" condition "Approved" to 2026-03-31 05:03:02.454486329 +0000 UTC m=+424.873466499 I0331 05:03:02.467528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:02.479501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vlc7q" condition "Ready" to 2026-03-31 05:03:02.479487661 +0000 UTC m=+424.898467831 I0331 05:03:02.500073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:02.502393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gjfxn" condition "Approved" to 2026-03-31 05:03:02.502380716 +0000 UTC m=+424.921360896 I0331 05:03:02.512649 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:02.512631856 +0000 UTC m=+424.931612026 I0331 05:03:02.519275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gjfxn" condition "Ready" to 2026-03-31 05:03:02.519213585 +0000 UTC m=+424.938193755 I0331 05:03:02.534558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8njqf" condition "Approved" to 2026-03-31 05:03:02.534537753 +0000 UTC m=+424.953517933 I0331 05:03:02.535071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:02.535470 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:02.535463249 +0000 UTC m=+424.954443419 I0331 05:03:02.906678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8njqf" condition "Ready" to 2026-03-31 05:03:02.906450422 +0000 UTC m=+425.325430602 I0331 05:03:03.100850 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:03.100838336 +0000 UTC m=+425.519818516 I0331 05:03:03.147158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:03.199280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:03.450804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:03.451188 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:03.451177416 +0000 UTC m=+425.870157596 I0331 05:03:03.571993 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:03.571968173 +0000 UTC m=+425.990948383 I0331 05:03:03.798784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:03.899774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:03.900323 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:03.900312723 +0000 UTC m=+426.319292903 I0331 05:03:03.951681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:04.001683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:04.249704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:11.379246 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" condition "Ready" to 2026-03-31 05:03:11.379229202 +0000 UTC m=+433.798209372 I0331 05:03:11.379293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:03:11.379329 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" condition "Issuing" to 2026-03-31 05:03:11.379321605 +0000 UTC m=+433.798301785 I0331 05:03:11.394850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c44f9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:11.395059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:03:11.395159 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" condition "Issuing" to 2026-03-31 05:03:11.395150607 +0000 UTC m=+433.814130777 I0331 05:03:11.693420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c44f9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:11.701793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c44f9-wxx4x" condition "Approved" to 2026-03-31 05:03:11.701783384 +0000 UTC m=+434.120763544 I0331 05:03:11.728348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-c44f9-wxx4x" condition "Ready" to 2026-03-31 05:03:11.728339779 +0000 UTC m=+434.147319949 I0331 05:03:11.759115 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:11.759100768 +0000 UTC m=+434.178080948 I0331 05:03:11.777692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c44f9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:11.778052 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:11.778041955 +0000 UTC m=+434.197022125 I0331 05:03:11.796999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c44f9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:11.797689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-c44f9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-c44f9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:37.892990 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-31 05:03:37.892971032 +0000 UTC m=+460.311951242 I0331 05:03:37.893524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:03:37.893639 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-31 05:03:37.89362771 +0000 UTC m=+460.312607970 I0331 05:03:37.913622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:37.913705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:03:37.913725 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-31 05:03:37.913717947 +0000 UTC m=+460.332698117 I0331 05:03:38.267316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h68fx" condition "Approved" to 2026-03-31 05:03:38.267306608 +0000 UTC m=+460.686286788 I0331 05:03:38.291279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h68fx" condition "Ready" to 2026-03-31 05:03:38.291269401 +0000 UTC m=+460.710249571 I0331 05:03:38.322514 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:38.322448961 +0000 UTC m=+460.741429141 I0331 05:03:38.341044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:38.341427 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:38.341419227 +0000 UTC m=+460.760399407 I0331 05:03:38.360228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:38.360562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:38.362482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:03:38.362777 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:03:38.362770439 +0000 UTC m=+460.781750619 I0331 05:06:58.754094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:06:58.754181 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-31 05:06:58.754172523 +0000 UTC m=+661.173152693 I0331 05:06:58.754197 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-31 05:06:58.754172773 +0000 UTC m=+661.173152953 I0331 05:06:58.773838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:06:58.774107 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-31 05:06:58.774094816 +0000 UTC m=+661.193074996 I0331 05:06:59.064911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:06:59.104222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bx48x" condition "Approved" to 2026-03-31 05:06:59.104200901 +0000 UTC m=+661.523181081 I0331 05:06:59.136103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bx48x" condition "Ready" to 2026-03-31 05:06:59.136086702 +0000 UTC m=+661.555066882 I0331 05:06:59.165191 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:06:59.165175066 +0000 UTC m=+661.584155266 I0331 05:06:59.191132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:06:59.246221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:09:26.965254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:09:26.965321 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-31 05:09:26.965313157 +0000 UTC m=+809.384293337 I0331 05:09:26.965421 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-31 05:09:26.965407469 +0000 UTC m=+809.384387650 I0331 05:09:26.982196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:09:26.982277 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-31 05:09:26.982270431 +0000 UTC m=+809.401250601 I0331 05:09:27.152971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:09:27.192086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-db4lp" condition "Approved" to 2026-03-31 05:09:27.192069839 +0000 UTC m=+809.611050039 I0331 05:09:27.209574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-db4lp" condition "Ready" to 2026-03-31 05:09:27.209559447 +0000 UTC m=+809.628539627 I0331 05:09:27.238967 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:09:27.238948291 +0000 UTC m=+809.657928481 I0331 05:09:27.264344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:09:27.264812 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:09:27.264804989 +0000 UTC m=+809.683785159 I0331 05:09:27.279578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:09:27.279963 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:09:27.279955173 +0000 UTC m=+809.698935353 I0331 05:10:55.902167 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-31 05:10:55.902149587 +0000 UTC m=+898.321129797 I0331 05:10:55.902810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:10:55.902856 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-31 05:10:55.902846716 +0000 UTC m=+898.321826926 I0331 05:10:56.027299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:10:56.027445 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:10:56.027522 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-31 05:10:56.027508686 +0000 UTC m=+898.446488866 I0331 05:10:56.378256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:10:56.386051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-slmpr" condition "Approved" to 2026-03-31 05:10:56.386029761 +0000 UTC m=+898.805009971 I0331 05:10:56.409459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-slmpr" condition "Ready" to 2026-03-31 05:10:56.409447002 +0000 UTC m=+898.828427172 I0331 05:10:56.438251 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:10:56.438240449 +0000 UTC m=+898.857220629 I0331 05:10:56.463987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:10:56.465681 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:10:56.46566936 +0000 UTC m=+898.884649570 I0331 05:10:56.489460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:14:29.745561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:14:29.745644 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-31 05:14:29.745636516 +0000 UTC m=+1112.164616686 I0331 05:14:29.745683 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-31 05:14:29.745657196 +0000 UTC m=+1112.164637386 I0331 05:14:29.793059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:14:29.793210 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-31 05:14:29.793199376 +0000 UTC m=+1112.212179576 I0331 05:14:30.279478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:14:30.455655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-tztgw" condition "Approved" to 2026-03-31 05:14:30.455627898 +0000 UTC m=+1112.874608078 I0331 05:14:30.716357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-tztgw" condition "Ready" to 2026-03-31 05:14:30.716336766 +0000 UTC m=+1113.135316986 I0331 05:14:31.215178 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:14:31.215152685 +0000 UTC m=+1113.634132895 I0331 05:14:31.573461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:14:31.573837 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:14:31.573829652 +0000 UTC m=+1113.992809832 I0331 05:14:32.202326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:14:32.234968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:25:23.629041 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-03-31 05:25:23.629021837 +0000 UTC m=+1766.048002037 I0331 05:25:23.629227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:25:23.629373 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-03-31 05:25:23.629359726 +0000 UTC m=+1766.048339986 I0331 05:25:23.646305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:25:23.646569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:25:23.646612 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-03-31 05:25:23.646602596 +0000 UTC m=+1766.065582796 I0331 05:25:23.951832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-l97fn" condition "Approved" to 2026-03-31 05:25:23.951815184 +0000 UTC m=+1766.370795354 I0331 05:25:23.971936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-l97fn" condition "Ready" to 2026-03-31 05:25:23.971928454 +0000 UTC m=+1766.390908614 I0331 05:25:24.004046 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:25:24.004021899 +0000 UTC m=+1766.423002069 I0331 05:25:24.028462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:25:24.029858 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:25:24.029848754 +0000 UTC m=+1766.448828944 I0331 05:25:24.040014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:25:24.052178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:27:01.989502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:27:01.989572 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-03-31 05:27:01.989564417 +0000 UTC m=+1864.408544597 I0331 05:27:01.989996 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-03-31 05:27:01.989980489 +0000 UTC m=+1864.408960689 I0331 05:27:02.010260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:27:02.010424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:27:02.010467 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-03-31 05:27:02.010455627 +0000 UTC m=+1864.429435827 I0331 05:27:02.211305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-5pw6x" condition "Approved" to 2026-03-31 05:27:02.21128665 +0000 UTC m=+1864.630266860 I0331 05:27:02.229546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-5pw6x" condition "Ready" to 2026-03-31 05:27:02.229533308 +0000 UTC m=+1864.648513498 I0331 05:27:02.273131 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:27:02.273120398 +0000 UTC m=+1864.692100578 I0331 05:27:02.297546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:27:02.348941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:19.167004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:28:19.167041 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-03-31 05:28:19.167033718 +0000 UTC m=+1941.586013898 I0331 05:28:19.167401 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-03-31 05:28:19.167388128 +0000 UTC m=+1941.586368338 I0331 05:28:19.579497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:19.579634 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-03-31 05:28:19.57962306 +0000 UTC m=+1941.998603270 I0331 05:28:19.799962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:19.829735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-pllvt" condition "Approved" to 2026-03-31 05:28:19.829713547 +0000 UTC m=+1942.248693727 I0331 05:28:19.884753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-pllvt" condition "Ready" to 2026-03-31 05:28:19.884738539 +0000 UTC m=+1942.303718749 I0331 05:28:19.910314 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:28:19.910302197 +0000 UTC m=+1942.329282357 I0331 05:28:19.911826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:28:19.911836 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-03-31 05:28:19.911821198 +0000 UTC m=+1942.330801378 I0331 05:28:19.911878 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-03-31 05:28:19.91186943 +0000 UTC m=+1942.330849610 I0331 05:28:19.938030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:19.938982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:19.939086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:28:19.939116 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-03-31 05:28:19.939107903 +0000 UTC m=+1942.358088083 I0331 05:28:19.993253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:19.995910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-bqvxg" condition "Approved" to 2026-03-31 05:28:19.995898643 +0000 UTC m=+1942.414878813 I0331 05:28:20.014818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-bqvxg" condition "Ready" to 2026-03-31 05:28:20.01480624 +0000 UTC m=+1942.433786420 I0331 05:28:20.049550 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:28:20.049536578 +0000 UTC m=+1942.468516758 I0331 05:28:20.070086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:20.070398 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:28:20.070387387 +0000 UTC m=+1942.489367587 I0331 05:28:20.083240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:20.098264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:28:20.700587 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-03-31 05:28:20.700575808 +0000 UTC m=+1943.119555978 I0331 05:28:21.422489 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-03-31 05:28:21.422469834 +0000 UTC m=+1943.841450044 I0331 05:29:18.639405 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-03-31 05:29:18.639389703 +0000 UTC m=+2001.058369873 I0331 05:29:18.639933 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:29:18.639992 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-03-31 05:29:18.63998771 +0000 UTC m=+2001.058967880 I0331 05:29:18.684441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:29:18.684600 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-03-31 05:29:18.684594017 +0000 UTC m=+2001.103574177 I0331 05:29:19.293838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:29:19.347593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-fphgv" condition "Approved" to 2026-03-31 05:29:19.347576464 +0000 UTC m=+2001.766556634 I0331 05:29:19.369945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-fphgv" condition "Ready" to 2026-03-31 05:29:19.369921444 +0000 UTC m=+2001.788901644 I0331 05:29:19.406233 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:29:19.406217195 +0000 UTC m=+2001.825197375 I0331 05:29:19.428197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:29:19.429059 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:29:19.429051369 +0000 UTC m=+2001.848031549 I0331 05:29:19.459283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:29:19.460358 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:29:19.460349253 +0000 UTC m=+2001.879329433 I0331 05:32:24.139024 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-03-31 05:32:24.139000255 +0000 UTC m=+2186.557980475 I0331 05:32:24.139422 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:32:24.139521 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-03-31 05:32:24.139508629 +0000 UTC m=+2186.558488839 I0331 05:32:24.160088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:24.160222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:32:24.160264 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-03-31 05:32:24.160255526 +0000 UTC m=+2186.579235696 I0331 05:32:24.278450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-xk59w" condition "Approved" to 2026-03-31 05:32:24.278437637 +0000 UTC m=+2186.697417807 I0331 05:32:24.297414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-xk59w" condition "Ready" to 2026-03-31 05:32:24.297400155 +0000 UTC m=+2186.716380335 I0331 05:32:24.331844 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:32:24.331832487 +0000 UTC m=+2186.750812667 I0331 05:32:24.356737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:24.357287 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:32:24.357279752 +0000 UTC m=+2186.776259922 I0331 05:32:24.365451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:24.377397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:24.377953 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:32:24.377942467 +0000 UTC m=+2186.796922647 I0331 05:32:24.381200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:25.787237 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-03-31 05:32:25.787218155 +0000 UTC m=+2188.206198365 I0331 05:32:25.787301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:32:25.787327 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-03-31 05:32:25.787320048 +0000 UTC m=+2188.206300228 I0331 05:32:25.802281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:25.802361 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-03-31 05:32:25.802353259 +0000 UTC m=+2188.221333429 I0331 05:32:25.939673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:25.971144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-cvm2t" condition "Approved" to 2026-03-31 05:32:25.971122783 +0000 UTC m=+2188.390103003 I0331 05:32:25.997419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-cvm2t" condition "Ready" to 2026-03-31 05:32:25.997405992 +0000 UTC m=+2188.416386172 I0331 05:32:26.038438 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:32:26.038421083 +0000 UTC m=+2188.457401263 I0331 05:32:26.065155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:26.065538 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:32:26.065532804 +0000 UTC m=+2188.484512974 I0331 05:32:26.082148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:32:26.082471 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:32:26.082450257 +0000 UTC m=+2188.501430437 I0331 05:32:26.090662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:35:53.283155 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-03-31 05:35:53.283138144 +0000 UTC m=+2395.702118354 I0331 05:35:53.283494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:35:53.283548 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-03-31 05:35:53.283541625 +0000 UTC m=+2395.702521825 I0331 05:35:53.302107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:35:53.302452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:35:53.302481 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-03-31 05:35:53.302474223 +0000 UTC m=+2395.721454413 I0331 05:35:53.591103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-5jtl7" condition "Approved" to 2026-03-31 05:35:53.591062292 +0000 UTC m=+2396.010042472 I0331 05:35:53.611968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-5jtl7" condition "Ready" to 2026-03-31 05:35:53.611955494 +0000 UTC m=+2396.030935674 I0331 05:35:53.646322 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:35:53.646306173 +0000 UTC m=+2396.065286343 I0331 05:35:53.669127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:35:53.669651 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:35:53.669645501 +0000 UTC m=+2396.088625661 I0331 05:35:53.698441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:37:02.093376 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-stzlp-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:37:02.093587 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-stzlp-api" condition "Issuing" to 2026-03-31 05:37:02.093573358 +0000 UTC m=+2464.512553608 I0331 05:37:02.093742 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-stzlp-api" condition "Ready" to 2026-03-31 05:37:02.093601859 +0000 UTC m=+2464.512582069 I0331 05:37:02.094030 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-stzlp-vnc" condition "Ready" to 2026-03-31 05:37:02.09401258 +0000 UTC m=+2464.512992760 I0331 05:37:02.094159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-stzlp-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:37:02.094205 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-stzlp-vnc" condition "Issuing" to 2026-03-31 05:37:02.094193805 +0000 UTC m=+2464.513174015 I0331 05:37:02.561861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-stzlp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-stzlp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:37:02.562057 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-stzlp-vnc" condition "Ready" to 2026-03-31 05:37:02.562018275 +0000 UTC m=+2464.980998455 I0331 05:37:02.574088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-stzlp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-stzlp-api\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:37:02.574185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-stzlp-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:37:02.574210 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-stzlp-api" condition "Issuing" to 2026-03-31 05:37:02.574205868 +0000 UTC m=+2464.993186048 I0331 05:37:03.009737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-stzlp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-stzlp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:37:03.212677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-stzlp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-stzlp-api\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:37:03.217519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-stzlp-vnc-fpzx2" condition "Approved" to 2026-03-31 05:37:03.217509724 +0000 UTC m=+2465.636489904 I0331 05:37:03.221378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-stzlp-api-k8hw7" condition "Approved" to 2026-03-31 05:37:03.221364979 +0000 UTC m=+2465.640345149 I0331 05:37:03.261062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-stzlp-vnc-fpzx2" condition "Ready" to 2026-03-31 05:37:03.261039214 +0000 UTC m=+2465.680019424 I0331 05:37:03.267507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-stzlp-api-k8hw7" condition "Ready" to 2026-03-31 05:37:03.267493321 +0000 UTC m=+2465.686473501 I0331 05:37:03.298307 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-stzlp-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:37:03.298296383 +0000 UTC m=+2465.717276553 I0331 05:37:03.306012 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-stzlp-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:37:03.305997983 +0000 UTC m=+2465.724978173 I0331 05:37:03.320579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-stzlp-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-stzlp-api\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:37:03.323631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-stzlp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-stzlp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:37:03.324041 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-stzlp-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:37:03.324034406 +0000 UTC m=+2465.743014576 I0331 05:37:03.343049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-stzlp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-stzlp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:37:03.343320 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-stzlp-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:37:03.343313614 +0000 UTC m=+2465.762293794 I0331 05:37:03.350728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-stzlp-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-stzlp-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:00.475610 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-03-31 05:41:00.475593397 +0000 UTC m=+2702.894573597 I0331 05:41:00.475797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:41:00.475888 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-03-31 05:41:00.475878335 +0000 UTC m=+2702.894858535 I0331 05:41:00.498475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:00.498640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:41:00.498683 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-03-31 05:41:00.498673079 +0000 UTC m=+2702.917653249 I0331 05:41:00.733462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-tmc5q" condition "Approved" to 2026-03-31 05:41:00.73344824 +0000 UTC m=+2703.152428410 I0331 05:41:00.755185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-tmc5q" condition "Ready" to 2026-03-31 05:41:00.755162254 +0000 UTC m=+2703.174142434 I0331 05:41:00.795567 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:41:00.795546088 +0000 UTC m=+2703.214526258 I0331 05:41:00.820716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:00.821220 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:41:00.82121101 +0000 UTC m=+2703.240191180 I0331 05:41:00.841071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:02.093612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:41:02.093649 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-03-31 05:41:02.093641782 +0000 UTC m=+2704.512621962 I0331 05:41:02.094022 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-03-31 05:41:02.094004432 +0000 UTC m=+2704.512984612 I0331 05:41:02.112509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:02.112819 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-03-31 05:41:02.112804967 +0000 UTC m=+2704.531785217 I0331 05:41:02.284146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:02.324986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-vzs28" condition "Approved" to 2026-03-31 05:41:02.32496826 +0000 UTC m=+2704.743948450 I0331 05:41:02.357578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-vzs28" condition "Ready" to 2026-03-31 05:41:02.357568841 +0000 UTC m=+2704.776549011 I0331 05:41:02.395671 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:41:02.395657593 +0000 UTC m=+2704.814637773 I0331 05:41:02.431886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:02.432314 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:41:02.432307105 +0000 UTC m=+2704.851287275 I0331 05:41:02.456444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:02.461454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:41:02.461947 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:41:02.461937576 +0000 UTC m=+2704.880917746 I0331 05:43:46.382334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:43:46.382384 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-03-31 05:43:46.382377204 +0000 UTC m=+2868.801357384 I0331 05:43:46.382469 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-03-31 05:43:46.382451126 +0000 UTC m=+2868.801431336 E0331 05:43:46.399586 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 05:43:46.399692 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-03-31 05:43:46.399683407 +0000 UTC m=+2868.818663587 I0331 05:43:46.399718 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 05:43:46.402616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:46.402911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:43:46.402947 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-03-31 05:43:46.402939426 +0000 UTC m=+2868.821919596 E0331 05:43:46.414610 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0331 05:43:46.414702 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 05:43:46.414793 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0331 05:43:46.414844 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0331 05:43:46.454714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:46.458138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-6dnzw" condition "Approved" to 2026-03-31 05:43:46.458126966 +0000 UTC m=+2868.877107146 I0331 05:43:46.478522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-6dnzw" condition "Ready" to 2026-03-31 05:43:46.478513323 +0000 UTC m=+2868.897493493 I0331 05:43:46.504418 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:46.504400761 +0000 UTC m=+2868.923380941 I0331 05:43:46.532120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:46.532473 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:46.532467829 +0000 UTC m=+2868.951448009 I0331 05:43:46.550522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:46.550817 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:46.550810141 +0000 UTC m=+2868.969790301 I0331 05:43:47.184813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:43:47.184851 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-03-31 05:43:47.184844572 +0000 UTC m=+2869.603824742 I0331 05:43:47.185449 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-03-31 05:43:47.185444378 +0000 UTC m=+2869.604424548 I0331 05:43:47.203905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:47.204022 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-03-31 05:43:47.204014467 +0000 UTC m=+2869.622994637 E0331 05:43:47.206373 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 05:43:47.206413 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-03-31 05:43:47.206405172 +0000 UTC m=+2869.625385342 I0331 05:43:47.206461 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0331 05:43:47.228736 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0331 05:43:47.228879 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 05:43:47.228911 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0331 05:43:47.228949 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0331 05:43:47.239142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:47.270697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-wx7mf" condition "Approved" to 2026-03-31 05:43:47.270679579 +0000 UTC m=+2869.689659779 I0331 05:43:47.284579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-wx7mf" condition "Ready" to 2026-03-31 05:43:47.284568409 +0000 UTC m=+2869.703548589 I0331 05:43:47.309701 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:47.309671805 +0000 UTC m=+2869.728651995 I0331 05:43:47.340901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:47.341240 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:47.341230559 +0000 UTC m=+2869.760210739 I0331 05:43:47.367291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:48.052074 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-03-31 05:43:48.05205304 +0000 UTC m=+2870.471033290 I0331 05:43:48.052195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:43:48.052368 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-03-31 05:43:48.052351458 +0000 UTC m=+2870.471331678 I0331 05:43:48.069325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:48.069537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:43:48.069597 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-03-31 05:43:48.069566429 +0000 UTC m=+2870.488546639 I0331 05:43:48.121575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:48.127005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-l46nc" condition "Approved" to 2026-03-31 05:43:48.12699013 +0000 UTC m=+2870.545970310 I0331 05:43:48.147539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-l46nc" condition "Ready" to 2026-03-31 05:43:48.147527222 +0000 UTC m=+2870.566507392 I0331 05:43:51.415280 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:51.415268617 +0000 UTC m=+2873.834248797 I0331 05:43:51.431852 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-l46nc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:51.43183963 +0000 UTC m=+2873.850819820 I0331 05:43:51.460937 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:51.460925115 +0000 UTC m=+2873.879905295 I0331 05:43:51.489379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:51.489753 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:51.489744603 +0000 UTC m=+2873.908724773 I0331 05:43:51.515150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:51.520298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:43:52.230130 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:43:52.230115263 +0000 UTC m=+2874.649095443 I0331 05:46:49.708014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:46:49.708076 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-03-31 05:46:49.708062531 +0000 UTC m=+3052.127042741 I0331 05:46:49.708265 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-03-31 05:46:49.708251736 +0000 UTC m=+3052.127231926 I0331 05:46:49.730141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:46:49.730240 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-03-31 05:46:49.730233307 +0000 UTC m=+3052.149213477 I0331 05:46:49.825447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:46:49.865229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-s57cg" condition "Approved" to 2026-03-31 05:46:49.865210648 +0000 UTC m=+3052.284190828 I0331 05:46:49.885711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-s57cg" condition "Ready" to 2026-03-31 05:46:49.885696318 +0000 UTC m=+3052.304676518 I0331 05:46:49.917027 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:46:49.917012035 +0000 UTC m=+3052.335992225 I0331 05:46:49.938621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:46:49.939044 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:46:49.939038187 +0000 UTC m=+3052.358018357 I0331 05:46:49.957557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:46:49.957962 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:46:49.957952755 +0000 UTC m=+3052.376932925 I0331 05:46:49.959764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:37.744407 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-03-31 05:47:37.74439085 +0000 UTC m=+3100.163371030 I0331 05:47:37.770093 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-03-31 05:47:37.770069162 +0000 UTC m=+3100.189049382 I0331 05:47:37.770249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:47:37.770333 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-31 05:47:37.770324099 +0000 UTC m=+3100.189304299 I0331 05:47:37.785955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:37.786378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:47:37.786416 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-03-31 05:47:37.786406419 +0000 UTC m=+3100.205386629 E0331 05:47:37.805216 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0331 05:47:37.870560 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-03-31 05:47:37.87054492 +0000 UTC m=+3100.289525100 I0331 05:47:37.890571 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-31 05:47:37.890558457 +0000 UTC m=+3100.309538637 I0331 05:47:37.891061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:47:37.891084 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-03-31 05:47:37.891080012 +0000 UTC m=+3100.310060192 I0331 05:47:37.911966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:37.912082 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-03-31 05:47:37.912069876 +0000 UTC m=+3100.331050076 E0331 05:47:37.951531 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0331 05:47:38.098372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:38.151791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-wxgss" condition "Approved" to 2026-03-31 05:47:38.151780602 +0000 UTC m=+3100.570760772 I0331 05:47:38.177634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-wxgss" condition "Ready" to 2026-03-31 05:47:38.177624229 +0000 UTC m=+3100.596604389 I0331 05:47:38.212626 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:47:38.212613026 +0000 UTC m=+3100.631593206 I0331 05:47:38.237928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:38.238488 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:47:38.238481724 +0000 UTC m=+3100.657461904 I0331 05:47:38.266234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:38.718749 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-03-31 05:47:38.718731969 +0000 UTC m=+3101.137712139 I0331 05:47:38.743552 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-03-31 05:47:38.743537077 +0000 UTC m=+3101.162517257 I0331 05:47:38.743687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:47:38.743732 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-31 05:47:38.743724473 +0000 UTC m=+3101.162704653 I0331 05:47:38.769289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:38.769395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:47:38.769417 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-03-31 05:47:38.769410375 +0000 UTC m=+3101.188390555 I0331 05:47:39.199767 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-03-31 05:47:39.199746125 +0000 UTC m=+3101.618726325 I0331 05:47:39.228147 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-03-31 05:47:39.228125641 +0000 UTC m=+3101.647105841 I0331 05:47:39.228181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:47:39.228223 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-31 05:47:39.228215214 +0000 UTC m=+3101.647195394 I0331 05:47:39.244513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:39.244640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:47:39.244686 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-03-31 05:47:39.244678554 +0000 UTC m=+3101.663658764 I0331 05:47:39.284031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:39.286923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-cb9hh" condition "Approved" to 2026-03-31 05:47:39.286910189 +0000 UTC m=+3101.705890359 I0331 05:47:39.322757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-cb9hh" condition "Ready" to 2026-03-31 05:47:39.322745069 +0000 UTC m=+3101.741725249 I0331 05:47:39.365542 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:47:39.36553285 +0000 UTC m=+3101.784513020 I0331 05:47:39.396431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:39.396754 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:47:39.396745793 +0000 UTC m=+3101.815725963 I0331 05:47:39.417384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:39.561219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-22vnz" condition "Approved" to 2026-03-31 05:47:39.561197901 +0000 UTC m=+3101.980178081 I0331 05:47:39.582076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-22vnz" condition "Ready" to 2026-03-31 05:47:39.582044721 +0000 UTC m=+3102.001024911 I0331 05:47:39.631203 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:47:39.631186145 +0000 UTC m=+3102.050166325 I0331 05:47:39.694372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:39.694770 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:47:39.694764294 +0000 UTC m=+3102.113744474 I0331 05:47:39.729523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:39.737583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:39.737867 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:47:39.737860783 +0000 UTC m=+3102.156840953 I0331 05:47:39.742073 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-03-31 05:47:39.742060558 +0000 UTC m=+3102.161040738 I0331 05:47:39.769035 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-31 05:47:39.769017395 +0000 UTC m=+3102.187997575 I0331 05:47:39.769407 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:47:39.769445 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-03-31 05:47:39.769436837 +0000 UTC m=+3102.188417017 I0331 05:47:39.905498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:39.905598 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-03-31 05:47:39.9055882 +0000 UTC m=+3102.324568380 I0331 05:47:40.167611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:47:40.283024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hc7l5" condition "Approved" to 2026-03-31 05:47:40.283010552 +0000 UTC m=+3102.701990722 I0331 05:47:40.373765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hc7l5" condition "Ready" to 2026-03-31 05:47:40.373753185 +0000 UTC m=+3102.792733355 I0331 05:47:40.869670 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:47:40.869651778 +0000 UTC m=+3103.288631978 I0331 05:47:40.954553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:51:24.699569 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-03-31 05:51:24.699545882 +0000 UTC m=+3327.118526072 I0331 05:51:24.699881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:51:24.699922 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-03-31 05:51:24.699911652 +0000 UTC m=+3327.118891832 I0331 05:51:24.720192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:51:24.720281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:51:24.720311 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-03-31 05:51:24.720304068 +0000 UTC m=+3327.139284248 I0331 05:51:24.984852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:51:24.994964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-r4nhr" condition "Approved" to 2026-03-31 05:51:24.9949533 +0000 UTC m=+3327.413933480 I0331 05:51:25.012707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-r4nhr" condition "Ready" to 2026-03-31 05:51:25.012696374 +0000 UTC m=+3327.431676554 I0331 05:51:25.044486 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:51:25.044468621 +0000 UTC m=+3327.463448831 I0331 05:51:25.063802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:51:25.064219 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:51:25.064212429 +0000 UTC m=+3327.483192609 I0331 05:51:25.082412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:51:27.632063 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-03-31 05:51:27.632041137 +0000 UTC m=+3330.051021317 I0331 05:51:27.632290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 05:51:27.632343 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-03-31 05:51:27.632331925 +0000 UTC m=+3330.051312095 I0331 05:51:27.654107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:51:27.654250 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-03-31 05:51:27.654241783 +0000 UTC m=+3330.073221963 I0331 05:51:27.876006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 05:51:27.917182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-gqx66" condition "Approved" to 2026-03-31 05:51:27.917167395 +0000 UTC m=+3330.336147555 I0331 05:51:27.943509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-gqx66" condition "Ready" to 2026-03-31 05:51:27.943497494 +0000 UTC m=+3330.362477674 I0331 05:51:27.979728 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 05:51:27.979713421 +0000 UTC m=+3330.398693591 I0331 05:51:28.019972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0331 05:51:54.562700 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0331 05:55:03.970825 1 leaderelection.go:369] Failed to update lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused E0331 05:55:18.972089 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused E0331 05:55:33.972003 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0331 05:55:41.634637 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0331 05:55:41.635455 1 leaderelection.go:308] Failed to release lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0331 05:55:41.635648 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0331 05:55:41.635680 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0331 05:55:41.635693 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0331 05:55:41.635823 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0331 05:55:41.635841 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0331 05:55:41.635865 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0331 05:55:41.635881 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0331 05:55:41.635902 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0331 05:55:41.635915 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0331 05:55:41.635927 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0331 05:55:41.635940 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0331 05:55:41.635959 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0331 05:55:41.636004 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0331 05:55:41.636047 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0331 05:55:41.636151 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" E0331 05:55:41.636159 1 event.go:355] "Unable to write event (may retry after sleeping)" err="Post \"https://10.96.0.1:443/api/v1/namespaces/cert-manager/events\": dial tcp 10.96.0.1:443: connect: connection refused" event="&Event{ObjectMeta:{cert-manager-controller.18a1d7616f0bc2dd cert-manager 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Lease,Namespace:cert-manager,Name:cert-manager-controller,UID:ae480c11-1e47-4b2d-b204-c443f0e61640,APIVersion:coordination.k8s.io/v1,ResourceVersion:27133,FieldPath:,},Reason:LeaderElection,Message:cert-manager-75c4c745bc-8979d-external-cert-manager-controller stopped leading,Source:EventSource{Component:cert-manager-leader-election,Host:,},FirstTimestamp:2026-03-31 05:55:41.635527389 +0000 UTC m=+3584.054507569,LastTimestamp:2026-03-31 05:55:41.635527389 +0000 UTC m=+3584.054507569,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-leader-election,ReportingInstance:,}" I0331 05:55:41.636193 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0331 05:55:41.636216 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0331 05:55:41.636236 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" E0331 05:55:41.636291 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"