I0428 03:23:22.598849 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 03:23:22.598994 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 03:23:22.599082 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 03:23:22.602690 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 03:23:22.603239 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 03:23:22.603368 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 03:23:22.603385 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 03:23:22.607213 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 03:23:22.624697 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 03:23:22.629648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 03:23:22.636563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 03:23:22.639630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 03:23:22.642323 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 03:23:22.642361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 03:23:22.645183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 03:23:22.648306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 03:23:22.650667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 03:23:22.654690 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 03:23:22.659517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 03:23:22.662111 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 03:23:22.662138 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 03:23:22.662144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 03:23:22.662150 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 03:23:22.664909 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 03:23:22.664955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 03:23:22.667506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 03:23:22.669715 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 03:23:22.674311 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 03:23:22.678126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 03:23:22.681731 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 03:23:22.681804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 03:23:22.689563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 03:23:22.693362 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 03:23:22.695494 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.696740 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.697644 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.712938 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.729865 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.745536 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.765417 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.780602 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.797906 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:22.799172 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 03:23:35.959109 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 03:23:35.959092875 +0000 UTC m=+13.400014402 I0428 03:23:36.688842 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 03:23:36.688824324 +0000 UTC m=+14.129745881 I0428 03:23:36.689002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:23:36.689102 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 03:23:36.68908954 +0000 UTC m=+14.130011107 E0428 03:23:36.702863 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:23:36.702955 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 03:23:36.702946787 +0000 UTC m=+14.143868324 E0428 03:23:36.702983 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:23:36.705952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:23:36.706023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:23:36.706049 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 03:23:36.706042728 +0000 UTC m=+14.146964255 E0428 03:23:36.712305 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 03:23:36.712699 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:23:36.712741 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:23:36.712800 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 03:23:36.740319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:23:36.748652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-27gdk" condition "Approved" to 2026-04-28 03:23:36.748631621 +0000 UTC m=+14.189553198 I0428 03:23:36.764059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-27gdk" condition "Ready" to 2026-04-28 03:23:36.764048389 +0000 UTC m=+14.204969926 I0428 03:23:36.788019 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:23:36.788001683 +0000 UTC m=+14.228923240 I0428 03:23:36.808192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:23:36.808679 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:23:36.808669573 +0000 UTC m=+14.249591130 I0428 03:23:36.818695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:23:36.830198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:23:36.830579 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:23:36.830569997 +0000 UTC m=+14.271491554 I0428 03:23:41.712823 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:23:41.712804692 +0000 UTC m=+19.153726249 I0428 03:23:59.677430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:23:59.677474 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 03:23:59.677463923 +0000 UTC m=+37.118385490 I0428 03:23:59.677686 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 03:23:59.677670627 +0000 UTC m=+37.118592244 I0428 03:23:59.689161 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 03:23:59.68914926 +0000 UTC m=+37.130070787 I0428 03:23:59.700775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:23:59.700862 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 03:23:59.700854566 +0000 UTC m=+37.141776113 I0428 03:24:00.011488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:00.044845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wmjmt" condition "Approved" to 2026-04-28 03:24:00.044833482 +0000 UTC m=+37.485755009 I0428 03:24:00.078469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wmjmt" condition "Ready" to 2026-04-28 03:24:00.078451783 +0000 UTC m=+37.519373320 I0428 03:24:00.112340 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:00.112326198 +0000 UTC m=+37.553247735 I0428 03:24:00.133820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:00.134195 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:24:00.13418769 +0000 UTC m=+37.575109217 I0428 03:24:00.144237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:24:00.156760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:28:16.408039 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-04-28 03:28:16.408005233 +0000 UTC m=+293.848926800 I0428 03:28:16.408681 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:28:16.408712 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Issuing" to 2026-04-28 03:28:16.408705596 +0000 UTC m=+293.849627153 I0428 03:28:16.420891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:28:16.420937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:28:16.420948 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Issuing" to 2026-04-28 03:28:16.420943677 +0000 UTC m=+293.861865214 I0428 03:28:16.648457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-svfg5" condition "Approved" to 2026-04-28 03:28:16.648443191 +0000 UTC m=+294.089364728 I0428 03:28:16.681425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-svfg5" condition "Ready" to 2026-04-28 03:28:16.681410032 +0000 UTC m=+294.122331599 I0428 03:28:16.704060 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:28:16.704045888 +0000 UTC m=+294.144967455 I0428 03:28:16.721534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:28:16.779398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:22.358228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:29:22.358318 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 03:29:22.358270586 +0000 UTC m=+359.799192123 I0428 03:29:22.358859 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 03:29:22.358150524 +0000 UTC m=+359.799072091 E0428 03:29:22.372437 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:29:22.372500 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 03:29:22.372491266 +0000 UTC m=+359.813412803 E0428 03:29:22.372549 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 03:29:22.374639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:22.374825 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:29:22.374867 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 03:29:22.37485655 +0000 UTC m=+359.815778117 E0428 03:29:22.382837 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 03:29:22.383078 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:29:22.383139 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 03:29:22.383217 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 03:29:22.408878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kkhdt" condition "Approved" to 2026-04-28 03:29:22.408862555 +0000 UTC m=+359.849784092 I0428 03:29:22.409434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:22.420197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-kkhdt" condition "Ready" to 2026-04-28 03:29:22.42018373 +0000 UTC m=+359.861105267 I0428 03:29:22.443529 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:22.443500811 +0000 UTC m=+359.884422378 I0428 03:29:22.460241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:22.460535 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:22.460525714 +0000 UTC m=+359.901447251 I0428 03:29:22.465000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:22.472432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:29:22.472705 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:22.472696044 +0000 UTC m=+359.913617581 I0428 03:29:27.383474 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:29:27.383462492 +0000 UTC m=+364.824384029 I0428 03:30:04.004335 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 03:30:04.00432345 +0000 UTC m=+401.445244987 I0428 03:30:04.004610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:30:04.004634 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 03:30:04.004630095 +0000 UTC m=+401.445551632 I0428 03:30:04.004890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:30:04.004911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 03:30:04.00490745 +0000 UTC m=+401.445828987 I0428 03:30:04.005149 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 03:30:04.005132216 +0000 UTC m=+401.446053743 I0428 03:30:04.006085 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 03:30:04.006071143 +0000 UTC m=+401.446992670 I0428 03:30:04.006555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:30:04.006602 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 03:30:04.006593603 +0000 UTC m=+401.447515140 I0428 03:30:04.032408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:04.032531 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 03:30:04.032520724 +0000 UTC m=+401.473442261 I0428 03:30:04.035628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:04.035788 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 03:30:04.035780165 +0000 UTC m=+401.476701682 I0428 03:30:04.035950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:04.036011 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 03:30:04.036003901 +0000 UTC m=+401.476925418 I0428 03:30:04.131414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:04.165543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f78nx" condition "Approved" to 2026-04-28 03:30:04.165527784 +0000 UTC m=+401.606449341 I0428 03:30:04.201333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f78nx" condition "Ready" to 2026-04-28 03:30:04.201317773 +0000 UTC m=+401.642239340 I0428 03:30:04.227319 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:04.227307615 +0000 UTC m=+401.668229152 I0428 03:30:04.245848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:04.298158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:04.328915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:04.332736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:04.336051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q2sds" condition "Approved" to 2026-04-28 03:30:04.336039606 +0000 UTC m=+401.776961143 I0428 03:30:04.350475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q2sds" condition "Ready" to 2026-04-28 03:30:04.350466659 +0000 UTC m=+401.791388196 I0428 03:30:04.441327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7tntw" condition "Approved" to 2026-04-28 03:30:04.441302531 +0000 UTC m=+401.882224098 I0428 03:30:04.847081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7tntw" condition "Ready" to 2026-04-28 03:30:04.847066411 +0000 UTC m=+402.287987948 I0428 03:30:04.936377 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:04.936358963 +0000 UTC m=+402.377280530 I0428 03:30:05.189563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:05.190918 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:05.190907096 +0000 UTC m=+402.631828663 I0428 03:30:05.295679 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:05.295658362 +0000 UTC m=+402.736579929 I0428 03:30:05.588084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:05.588384 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:05.588377278 +0000 UTC m=+403.029298805 I0428 03:30:05.638398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:05.688583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:05.938725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:12.619473 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" condition "Ready" to 2026-04-28 03:30:12.619454564 +0000 UTC m=+410.060376121 I0428 03:30:12.619594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:30:12.619628 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" condition "Issuing" to 2026-04-28 03:30:12.619619087 +0000 UTC m=+410.060540624 I0428 03:30:12.635508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cscr5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:12.635593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:30:12.635614 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" condition "Issuing" to 2026-04-28 03:30:12.635607851 +0000 UTC m=+410.076529388 I0428 03:30:12.796141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cscr5-5rfvk" condition "Approved" to 2026-04-28 03:30:12.796104752 +0000 UTC m=+410.237026289 I0428 03:30:12.817373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cscr5-5rfvk" condition "Ready" to 2026-04-28 03:30:12.817362414 +0000 UTC m=+410.258283951 I0428 03:30:12.843355 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:12.843340967 +0000 UTC m=+410.284262524 I0428 03:30:12.863525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cscr5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:12.863792 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:12.863785785 +0000 UTC m=+410.304707322 I0428 03:30:12.882656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cscr5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cscr5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:39.798984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:30:39.799021 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 03:30:39.799007883 +0000 UTC m=+437.239929420 I0428 03:30:39.799144 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 03:30:39.799122635 +0000 UTC m=+437.240044212 I0428 03:30:39.815771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:39.815850 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 03:30:39.815842483 +0000 UTC m=+437.256764050 I0428 03:30:40.023382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:40.050239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pwxjw" condition "Approved" to 2026-04-28 03:30:40.050229095 +0000 UTC m=+437.491150632 I0428 03:30:40.066926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pwxjw" condition "Ready" to 2026-04-28 03:30:40.066912161 +0000 UTC m=+437.507833708 I0428 03:30:40.091890 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:30:40.091878285 +0000 UTC m=+437.532799822 I0428 03:30:40.110347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:30:40.153775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:33:47.123984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:33:47.124035 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 03:33:47.124025814 +0000 UTC m=+624.564947371 I0428 03:33:47.124074 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 03:33:47.123973443 +0000 UTC m=+624.564895000 I0428 03:33:47.142708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:33:47.142832 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 03:33:47.14282083 +0000 UTC m=+624.583742387 I0428 03:33:47.594486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:33:47.623679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-d6qpn" condition "Approved" to 2026-04-28 03:33:47.623665982 +0000 UTC m=+625.064587519 I0428 03:33:47.639818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-d6qpn" condition "Ready" to 2026-04-28 03:33:47.639806487 +0000 UTC m=+625.080728024 I0428 03:33:47.666724 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:33:47.666709787 +0000 UTC m=+625.107631354 I0428 03:33:47.692893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:33:47.693264 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:33:47.69325754 +0000 UTC m=+625.134179067 I0428 03:33:47.703135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:33:47.712744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:36:07.200064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:36:07.200117 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 03:36:07.200097905 +0000 UTC m=+764.641019462 I0428 03:36:07.200419 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 03:36:07.200028184 +0000 UTC m=+764.640949741 I0428 03:36:07.221747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:36:07.221884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:36:07.221928 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 03:36:07.221916334 +0000 UTC m=+764.662837861 I0428 03:36:07.398244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pjcc5" condition "Approved" to 2026-04-28 03:36:07.398230747 +0000 UTC m=+764.839152284 I0428 03:36:07.417098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-pjcc5" condition "Ready" to 2026-04-28 03:36:07.417088791 +0000 UTC m=+764.858010308 I0428 03:36:07.440851 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:36:07.440836377 +0000 UTC m=+764.881757914 I0428 03:36:07.464200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:36:07.464642 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:36:07.464632774 +0000 UTC m=+764.905554331 I0428 03:36:07.481705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:36:07.481990 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:36:07.48198096 +0000 UTC m=+764.922902507 I0428 03:37:04.063890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:37:04.063957 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 03:37:04.063938864 +0000 UTC m=+821.504860401 I0428 03:37:04.064105 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 03:37:04.064099857 +0000 UTC m=+821.505021374 I0428 03:37:04.080730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:37:04.080797 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 03:37:04.0807895 +0000 UTC m=+821.521711037 I0428 03:37:04.321799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:37:04.353323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-g9rzc" condition "Approved" to 2026-04-28 03:37:04.353306058 +0000 UTC m=+821.794227615 I0428 03:37:04.374996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-g9rzc" condition "Ready" to 2026-04-28 03:37:04.374986455 +0000 UTC m=+821.815907982 I0428 03:37:04.413789 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:37:04.413772503 +0000 UTC m=+821.854694060 I0428 03:37:04.435932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:37:04.500397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:39:54.245682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:39:54.245773 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 03:39:54.24573138 +0000 UTC m=+991.686652917 I0428 03:39:54.246096 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 03:39:54.246091726 +0000 UTC m=+991.687013263 I0428 03:39:54.261813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:39:54.261897 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 03:39:54.261888893 +0000 UTC m=+991.702810430 I0428 03:39:54.479103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:39:54.510019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-nvsbv" condition "Approved" to 2026-04-28 03:39:54.510010345 +0000 UTC m=+991.950931882 I0428 03:39:54.538536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-nvsbv" condition "Ready" to 2026-04-28 03:39:54.538528991 +0000 UTC m=+991.979450528 I0428 03:39:54.571347 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:39:54.571322807 +0000 UTC m=+992.012244374 I0428 03:39:54.600598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:39:54.600991 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:39:54.600984125 +0000 UTC m=+992.041905662 I0428 03:39:54.608158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:39:54.628595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:39:54.628606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:39:54.628934 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:39:54.62892581 +0000 UTC m=+992.069847337 I0428 03:46:08.435647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:46:08.435713 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 03:46:08.435675046 +0000 UTC m=+1365.876596583 I0428 03:46:08.435758 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-28 03:46:08.435738637 +0000 UTC m=+1365.876660194 I0428 03:46:08.451846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:46:08.451938 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-28 03:46:08.451929472 +0000 UTC m=+1365.892851039 I0428 03:46:08.861663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:46:08.893225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-mbbfb" condition "Approved" to 2026-04-28 03:46:08.893207024 +0000 UTC m=+1366.334128571 I0428 03:46:08.916540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-mbbfb" condition "Ready" to 2026-04-28 03:46:08.916528212 +0000 UTC m=+1366.357449749 I0428 03:46:08.943719 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:46:08.943700023 +0000 UTC m=+1366.384621580 I0428 03:46:08.961683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:47:33.665149 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 03:47:33.665122313 +0000 UTC m=+1451.106043860 I0428 03:47:33.665110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:47:33.665444 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 03:47:33.665434809 +0000 UTC m=+1451.106356366 I0428 03:47:33.682153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:47:33.682393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:47:33.682414 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 03:47:33.682408648 +0000 UTC m=+1451.123330175 I0428 03:47:33.840901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:47:33.845915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-gptsl" condition "Approved" to 2026-04-28 03:47:33.845894554 +0000 UTC m=+1451.286816161 I0428 03:47:33.865076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-gptsl" condition "Ready" to 2026-04-28 03:47:33.865063064 +0000 UTC m=+1451.305984601 I0428 03:47:33.891984 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:47:33.89196487 +0000 UTC m=+1451.332886407 I0428 03:47:33.915398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:47:33.915770 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:47:33.915760368 +0000 UTC m=+1451.356681905 I0428 03:47:33.924396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:47:33.939087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:47:33.939672 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:47:33.939661158 +0000 UTC m=+1451.380582695 I0428 03:48:25.709423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:48:25.709484 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 03:48:25.709476189 +0000 UTC m=+1503.150397726 I0428 03:48:25.709904 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 03:48:25.709899568 +0000 UTC m=+1503.150821105 I0428 03:48:25.731860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:25.731944 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 03:48:25.731934221 +0000 UTC m=+1503.172855789 I0428 03:48:25.756210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:25.756287 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 03:48:25.75627867 +0000 UTC m=+1503.197200237 I0428 03:48:25.763463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-bsgcp" condition "Approved" to 2026-04-28 03:48:25.763452835 +0000 UTC m=+1503.204374402 I0428 03:48:25.767507 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 03:48:25.767501511 +0000 UTC m=+1503.208423048 I0428 03:48:25.771983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:25.780820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-bsgcp" condition "Ready" to 2026-04-28 03:48:25.780813581 +0000 UTC m=+1503.221735118 I0428 03:48:25.807752 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:48:25.807741159 +0000 UTC m=+1503.248662676 I0428 03:48:25.828259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:25.828555 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:48:25.828548709 +0000 UTC m=+1503.269470246 I0428 03:48:25.851409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:26.330941 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:48:26.330976 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 03:48:26.330968961 +0000 UTC m=+1503.771890498 I0428 03:48:26.330969 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 03:48:26.330947131 +0000 UTC m=+1503.771868698 I0428 03:48:26.348588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:26.348691 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 03:48:26.348682915 +0000 UTC m=+1503.789604482 I0428 03:48:26.372047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:26.401750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-pdlb6" condition "Approved" to 2026-04-28 03:48:26.401727053 +0000 UTC m=+1503.842648610 I0428 03:48:26.419432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-pdlb6" condition "Ready" to 2026-04-28 03:48:26.419421805 +0000 UTC m=+1503.860343342 I0428 03:48:26.456225 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:48:26.456205558 +0000 UTC m=+1503.897127085 I0428 03:48:26.474467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:26.474865 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:48:26.474853278 +0000 UTC m=+1503.915774835 I0428 03:48:26.490912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:26.491195 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:48:26.491185806 +0000 UTC m=+1503.932107353 I0428 03:48:26.496064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:48:27.013710 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-28 03:48:27.013695145 +0000 UTC m=+1504.454616702 I0428 03:48:27.634991 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-28 03:48:27.634979864 +0000 UTC m=+1505.075901401 I0428 03:49:13.078930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:49:13.078964 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 03:49:13.07895827 +0000 UTC m=+1550.519879787 I0428 03:49:13.079314 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 03:49:13.079310986 +0000 UTC m=+1550.520232513 I0428 03:49:13.116821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:49:13.116907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:49:13.116931 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 03:49:13.116921804 +0000 UTC m=+1550.557843331 I0428 03:49:18.160347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:49:18.176305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-jzgqs" condition "Approved" to 2026-04-28 03:49:18.176288763 +0000 UTC m=+1555.617210310 I0428 03:49:18.197709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-jzgqs" condition "Ready" to 2026-04-28 03:49:18.197697496 +0000 UTC m=+1555.638619023 I0428 03:49:18.229740 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:49:18.229727128 +0000 UTC m=+1555.670648665 I0428 03:49:18.253018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:51:38.057696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:51:38.057812 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 03:51:38.05776752 +0000 UTC m=+1695.498689087 I0428 03:51:38.057962 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-28 03:51:38.057910903 +0000 UTC m=+1695.498832470 I0428 03:51:38.074553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:51:38.074784 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:51:38.074870 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 03:51:38.074860121 +0000 UTC m=+1695.515781688 I0428 03:51:38.334055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:51:38.338516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-bgp8h" condition "Approved" to 2026-04-28 03:51:38.338509672 +0000 UTC m=+1695.779431199 I0428 03:51:38.361458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-bgp8h" condition "Ready" to 2026-04-28 03:51:38.361446992 +0000 UTC m=+1695.802368539 I0428 03:51:38.392074 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:51:38.392060167 +0000 UTC m=+1695.832981694 I0428 03:51:38.418493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:51:39.443193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:51:39.443233 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-28 03:51:39.443225563 +0000 UTC m=+1696.884147100 I0428 03:51:39.443376 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 03:51:39.443360826 +0000 UTC m=+1696.884282363 I0428 03:51:39.461518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:51:39.461571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:51:39.461583 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-28 03:51:39.461578488 +0000 UTC m=+1696.902500015 I0428 03:51:39.708669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-qrp5q" condition "Approved" to 2026-04-28 03:51:39.708661286 +0000 UTC m=+1697.149582803 I0428 03:51:39.726415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-qrp5q" condition "Ready" to 2026-04-28 03:51:39.7263998 +0000 UTC m=+1697.167321327 I0428 03:51:39.751001 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:51:39.750989091 +0000 UTC m=+1697.191910638 I0428 03:51:39.767350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:51:39.767610 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:51:39.767602853 +0000 UTC m=+1697.208524390 I0428 03:51:39.783121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:51:39.783698 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:51:39.783689715 +0000 UTC m=+1697.224611252 I0428 03:51:39.787007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:54:37.553230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:54:37.553263 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-28 03:54:37.553255041 +0000 UTC m=+1874.994176578 I0428 03:54:37.553505 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 03:54:37.553491976 +0000 UTC m=+1874.994413503 I0428 03:54:37.576155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:54:37.576367 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 03:54:37.576355784 +0000 UTC m=+1875.017277341 I0428 03:54:37.726833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:54:37.751832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-pvv55" condition "Approved" to 2026-04-28 03:54:37.751814347 +0000 UTC m=+1875.192735914 I0428 03:54:37.776683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-pvv55" condition "Ready" to 2026-04-28 03:54:37.776673523 +0000 UTC m=+1875.217595050 I0428 03:54:37.805736 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:54:37.805721568 +0000 UTC m=+1875.246643135 I0428 03:54:37.824009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:54:37.880067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:55:25.678746 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7x76f-api" condition "Ready" to 2026-04-28 03:55:25.678734826 +0000 UTC m=+1923.119656353 I0428 03:55:25.678974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7x76f-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:55:25.679023 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7x76f-api" condition "Issuing" to 2026-04-28 03:55:25.678999081 +0000 UTC m=+1923.119920618 I0428 03:55:25.679939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7x76f-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:55:25.679960 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7x76f-vnc" condition "Issuing" to 2026-04-28 03:55:25.679956029 +0000 UTC m=+1923.120877576 I0428 03:55:25.680063 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7x76f-vnc" condition "Ready" to 2026-04-28 03:55:25.680055911 +0000 UTC m=+1923.120977458 I0428 03:55:25.697417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7x76f-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7x76f-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:55:25.697475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7x76f-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:55:25.697492 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7x76f-api" condition "Issuing" to 2026-04-28 03:55:25.697487338 +0000 UTC m=+1923.138408875 I0428 03:55:25.703506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7x76f-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7x76f-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:55:25.703740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7x76f-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:55:25.703827 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7x76f-vnc" condition "Issuing" to 2026-04-28 03:55:25.703812027 +0000 UTC m=+1923.144733584 I0428 03:55:25.923941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7x76f-api-lth56" condition "Approved" to 2026-04-28 03:55:25.923920827 +0000 UTC m=+1923.364842394 I0428 03:55:25.953733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7x76f-api-lth56" condition "Ready" to 2026-04-28 03:55:25.953721226 +0000 UTC m=+1923.394642763 I0428 03:55:25.985958 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7x76f-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:55:25.98594197 +0000 UTC m=+1923.426863517 I0428 03:55:26.004347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7x76f-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7x76f-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:55:26.004943 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7x76f-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:55:26.004932427 +0000 UTC m=+1923.445853964 I0428 03:55:26.016596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-7x76f-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7x76f-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:55:26.021672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7x76f-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7x76f-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:55:26.056495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7x76f-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7x76f-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:55:26.066256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7x76f-vnc-8jdd2" condition "Approved" to 2026-04-28 03:55:26.066236408 +0000 UTC m=+1923.507157975 I0428 03:55:26.085554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7x76f-vnc-8jdd2" condition "Ready" to 2026-04-28 03:55:26.08553747 +0000 UTC m=+1923.526459007 I0428 03:55:26.116038 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7x76f-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:55:26.116022161 +0000 UTC m=+1923.556943688 I0428 03:55:26.139213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-7x76f-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7x76f-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:57:35.373493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/senlin-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 03:57:35.373523 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Issuing" to 2026-04-28 03:57:35.373516481 +0000 UTC m=+2052.814438018 I0428 03:57:35.373479 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-28 03:57:35.373422259 +0000 UTC m=+2052.814343826 I0428 03:57:35.391152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:57:35.391234 1 conditions.go:203] Setting lastTransitionTime for Certificate "senlin-api-certs" condition "Ready" to 2026-04-28 03:57:35.391226273 +0000 UTC m=+2052.832147830 I0428 03:57:35.443152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:57:35.474559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-jxcqm" condition "Approved" to 2026-04-28 03:57:35.474541936 +0000 UTC m=+2052.915463463 I0428 03:57:35.498182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "senlin-api-certs-jxcqm" condition "Ready" to 2026-04-28 03:57:35.498161929 +0000 UTC m=+2052.939083506 I0428 03:57:35.528217 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:57:35.528200164 +0000 UTC m=+2052.969121721 I0428 03:57:35.551522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:57:35.551988 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:57:35.55197937 +0000 UTC m=+2052.992900937 I0428 03:57:35.581822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/senlin-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"senlin-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 03:57:35.582186 1 conditions.go:192] Found status change for Certificate "senlin-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 03:57:35.582177266 +0000 UTC m=+2053.023098803 I0428 04:01:03.989033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:01:03.989151 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-28 04:01:03.989118086 +0000 UTC m=+2261.430039643 I0428 04:01:03.989153 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 04:01:03.989098345 +0000 UTC m=+2261.430019902 I0428 04:01:04.003217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:04.003342 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 04:01:04.003332422 +0000 UTC m=+2261.444253979 I0428 04:01:04.118519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:04.150456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-fzfvv" condition "Approved" to 2026-04-28 04:01:04.150445614 +0000 UTC m=+2261.591367151 I0428 04:01:04.167789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-fzfvv" condition "Ready" to 2026-04-28 04:01:04.167779379 +0000 UTC m=+2261.608700896 I0428 04:01:04.191269 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:01:04.191256609 +0000 UTC m=+2261.632178146 I0428 04:01:04.211096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:04.211434 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:01:04.211427297 +0000 UTC m=+2261.652348834 I0428 04:01:04.225600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:04.236548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:04.236950 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:01:04.236940116 +0000 UTC m=+2261.677861663 I0428 04:01:04.241378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:05.350825 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 04:01:05.350802338 +0000 UTC m=+2262.791723915 I0428 04:01:05.350855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:01:05.350960 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 04:01:05.35095663 +0000 UTC m=+2262.791878147 I0428 04:01:05.365684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:05.365919 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 04:01:05.365910021 +0000 UTC m=+2262.806831558 I0428 04:01:05.563236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:05.592542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-v82nc" condition "Approved" to 2026-04-28 04:01:05.592528083 +0000 UTC m=+2263.033449620 I0428 04:01:05.609190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-v82nc" condition "Ready" to 2026-04-28 04:01:05.609179825 +0000 UTC m=+2263.050101352 I0428 04:01:05.639658 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:01:05.639645277 +0000 UTC m=+2263.080566824 I0428 04:01:05.661190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:01:05.661511 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:01:05.661503388 +0000 UTC m=+2263.102424925 I0428 04:01:05.689637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:02:59.617708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:02:59.617863 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 04:02:59.617754107 +0000 UTC m=+2377.058675644 I0428 04:02:59.617968 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-28 04:02:59.61794621 +0000 UTC m=+2377.058867767 E0428 04:02:59.631989 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 04:02:59.632037 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-28 04:02:59.632032125 +0000 UTC m=+2377.072953642 I0428 04:02:59.632052 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 04:02:59.639084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:02:59.639141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:02:59.639152 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 04:02:59.639148989 +0000 UTC m=+2377.080070516 E0428 04:02:59.642655 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0428 04:02:59.642930 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 04:02:59.643008 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 04:02:59.643087 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0428 04:02:59.681118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:02:59.690509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-xt2xl" condition "Approved" to 2026-04-28 04:02:59.690496331 +0000 UTC m=+2377.131417848 I0428 04:02:59.704735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-xt2xl" condition "Ready" to 2026-04-28 04:02:59.704726728 +0000 UTC m=+2377.145648265 I0428 04:02:59.732207 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:02:59.732196664 +0000 UTC m=+2377.173118201 I0428 04:02:59.747172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:02:59.747494 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:02:59.747487991 +0000 UTC m=+2377.188409528 I0428 04:02:59.775552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:00.335519 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 04:03:00.33550139 +0000 UTC m=+2377.776422947 I0428 04:03:00.335560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:03:00.335587 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-28 04:03:00.335579902 +0000 UTC m=+2377.776501469 E0428 04:03:00.352866 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 04:03:00.352908 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-28 04:03:00.352899697 +0000 UTC m=+2377.793821254 I0428 04:03:00.352968 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 04:03:00.354040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:00.354109 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 04:03:00.354101919 +0000 UTC m=+2377.795023486 E0428 04:03:00.363908 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0428 04:03:00.364026 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 04:03:00.364052 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 04:03:00.364086 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0428 04:03:00.372848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:00.397593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-7xqxp" condition "Approved" to 2026-04-28 04:03:00.397578215 +0000 UTC m=+2377.838499772 I0428 04:03:00.412083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-7xqxp" condition "Ready" to 2026-04-28 04:03:00.412073337 +0000 UTC m=+2377.852994874 I0428 04:03:00.440865 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:03:00.440848926 +0000 UTC m=+2377.881770483 I0428 04:03:00.458673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:00.459096 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:03:00.459085048 +0000 UTC m=+2377.900006605 I0428 04:03:00.488241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:01.071058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:03:01.071081 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 04:03:01.071066238 +0000 UTC m=+2378.511987775 I0428 04:03:01.071123 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-28 04:03:01.071110339 +0000 UTC m=+2378.512031906 I0428 04:03:01.090362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:01.090544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:03:01.090594 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-28 04:03:01.090582324 +0000 UTC m=+2378.531503881 I0428 04:03:01.130673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-nfrrz" condition "Approved" to 2026-04-28 04:03:01.13030005 +0000 UTC m=+2378.571221587 I0428 04:03:01.146719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-nfrrz" condition "Ready" to 2026-04-28 04:03:01.146705127 +0000 UTC m=+2378.587626664 I0428 04:03:04.647107 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:03:04.647093267 +0000 UTC m=+2382.088014834 I0428 04:03:04.661879 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-nfrrz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:03:04.661858464 +0000 UTC m=+2382.102780001 I0428 04:03:04.687837 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:03:04.6878093 +0000 UTC m=+2382.128730867 I0428 04:03:04.720248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:04.720651 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:03:04.720641317 +0000 UTC m=+2382.161562874 I0428 04:03:04.728060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:04.748822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:03:05.367738 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:03:05.367720694 +0000 UTC m=+2382.808642231 I0428 04:05:10.799795 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-28 04:05:10.79978303 +0000 UTC m=+2508.240704567 I0428 04:05:10.800232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:10.800274 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 04:05:10.800270479 +0000 UTC m=+2508.241192016 I0428 04:05:10.816094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:10.816177 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-28 04:05:10.816172508 +0000 UTC m=+2508.257094045 I0428 04:05:10.906060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:10.938471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-r4z89" condition "Approved" to 2026-04-28 04:05:10.938456201 +0000 UTC m=+2508.379377758 I0428 04:05:10.956311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-r4z89" condition "Ready" to 2026-04-28 04:05:10.956300056 +0000 UTC m=+2508.397221593 I0428 04:05:10.978295 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:05:10.978282528 +0000 UTC m=+2508.419204065 I0428 04:05:11.005876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:11.006394 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:05:11.006386965 +0000 UTC m=+2508.447308502 I0428 04:05:11.028448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:11.028594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:11.029219 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:05:11.029207484 +0000 UTC m=+2508.470129051 I0428 04:05:56.903836 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-28 04:05:56.90382014 +0000 UTC m=+2554.344741677 I0428 04:05:56.924504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:56.924532 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 04:05:56.924527489 +0000 UTC m=+2554.365449026 I0428 04:05:56.924626 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 04:05:56.924621851 +0000 UTC m=+2554.365543388 I0428 04:05:56.940175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:56.940259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:56.940280 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 04:05:56.940271364 +0000 UTC m=+2554.381192931 E0428 04:05:56.951695 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0428 04:05:56.993516 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-28 04:05:56.993499872 +0000 UTC m=+2554.434421409 I0428 04:05:57.014185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:57.014214 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-28 04:05:57.014207241 +0000 UTC m=+2554.455128778 I0428 04:05:57.014491 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 04:05:57.014475796 +0000 UTC m=+2554.455397333 I0428 04:05:57.030834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:57.030893 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 04:05:57.030886354 +0000 UTC m=+2554.471807891 E0428 04:05:57.035989 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0428 04:05:57.253413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:57.284896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-mlk9m" condition "Approved" to 2026-04-28 04:05:57.284882628 +0000 UTC m=+2554.725804165 I0428 04:05:57.313363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-mlk9m" condition "Ready" to 2026-04-28 04:05:57.313347032 +0000 UTC m=+2554.754268559 I0428 04:05:57.352364 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:05:57.352328494 +0000 UTC m=+2554.793250031 I0428 04:05:57.371187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:57.469861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:57.738517 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-28 04:05:57.738501647 +0000 UTC m=+2555.179423184 I0428 04:05:57.753890 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-28 04:05:57.753877836 +0000 UTC m=+2555.194799373 I0428 04:05:57.753933 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:57.753960 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 04:05:57.753953327 +0000 UTC m=+2555.194874854 I0428 04:05:57.768521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:57.770910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:57.770984 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 04:05:57.770975417 +0000 UTC m=+2555.211896944 I0428 04:05:57.900009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8qqtt" condition "Approved" to 2026-04-28 04:05:57.899995937 +0000 UTC m=+2555.340917474 I0428 04:05:57.926311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8qqtt" condition "Ready" to 2026-04-28 04:05:57.9262995 +0000 UTC m=+2555.367221037 I0428 04:05:57.987716 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:05:57.987700242 +0000 UTC m=+2555.428621769 I0428 04:05:58.025428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:58.025782 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:05:58.025774696 +0000 UTC m=+2555.466696223 I0428 04:05:58.035681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:58.051372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:58.142239 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-28 04:05:58.142227171 +0000 UTC m=+2555.583148698 I0428 04:05:58.176629 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 04:05:58.176613805 +0000 UTC m=+2555.617535352 I0428 04:05:58.177021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:58.177063 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 04:05:58.177054534 +0000 UTC m=+2555.617976071 I0428 04:05:58.217030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:58.217114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:58.217140 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 04:05:58.217133985 +0000 UTC m=+2555.658055512 I0428 04:05:58.597736 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-28 04:05:58.597718524 +0000 UTC m=+2556.038640091 I0428 04:05:58.622876 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-28 04:05:58.622860596 +0000 UTC m=+2556.063782153 I0428 04:05:58.622913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:58.622946 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 04:05:58.622938548 +0000 UTC m=+2556.063860085 I0428 04:05:58.623751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-j2jh8" condition "Approved" to 2026-04-28 04:05:58.623737783 +0000 UTC m=+2556.064659320 I0428 04:05:58.637519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:58.638821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:05:58.638851 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 04:05:58.638844715 +0000 UTC m=+2556.079766242 I0428 04:05:58.639755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-j2jh8" condition "Ready" to 2026-04-28 04:05:58.639747613 +0000 UTC m=+2556.080669140 I0428 04:05:58.871581 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:05:58.871564982 +0000 UTC m=+2556.312486509 I0428 04:05:58.966355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:58.966709 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:05:58.966688406 +0000 UTC m=+2556.407609923 I0428 04:05:59.311852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:59.363788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:05:59.419405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hcxtb" condition "Approved" to 2026-04-28 04:05:59.419388107 +0000 UTC m=+2556.860309664 I0428 04:05:59.626227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hcxtb" condition "Ready" to 2026-04-28 04:05:59.626216797 +0000 UTC m=+2557.067138334 I0428 04:06:00.021844 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:06:00.021829588 +0000 UTC m=+2557.462751125 I0428 04:06:00.169334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:06:00.169769 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:06:00.169758673 +0000 UTC m=+2557.610680240 I0428 04:06:00.360079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:06:00.461729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:09:17.008484 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-28 04:09:17.008464993 +0000 UTC m=+2754.449386560 I0428 04:09:17.009310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:09:17.009333 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-28 04:09:17.009328829 +0000 UTC m=+2754.450250366 I0428 04:09:17.022739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:09:17.022991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:09:17.023025 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-28 04:09:17.023013586 +0000 UTC m=+2754.463935143 I0428 04:09:17.259836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-dz5l7" condition "Approved" to 2026-04-28 04:09:17.259807218 +0000 UTC m=+2754.700728775 I0428 04:09:17.279640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-dz5l7" condition "Ready" to 2026-04-28 04:09:17.279631719 +0000 UTC m=+2754.720553236 I0428 04:09:17.313519 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:09:17.313502934 +0000 UTC m=+2754.754424501 I0428 04:09:17.333152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:09:17.333814 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:09:17.333807776 +0000 UTC m=+2754.774729313 I0428 04:09:17.338789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:09:17.352481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:09:17.352942 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:09:17.352932245 +0000 UTC m=+2754.793853802 I0428 04:09:19.400027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:09:19.400065 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-28 04:09:19.400056365 +0000 UTC m=+2756.840977902 I0428 04:09:19.400867 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-28 04:09:19.399853401 +0000 UTC m=+2756.840774958 I0428 04:09:19.429442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:09:19.429549 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-28 04:09:19.429540857 +0000 UTC m=+2756.870462374 I0428 04:09:19.661271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:09:19.695157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-6z4k4" condition "Approved" to 2026-04-28 04:09:19.695141729 +0000 UTC m=+2757.136063256 I0428 04:09:19.717983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-6z4k4" condition "Ready" to 2026-04-28 04:09:19.717972968 +0000 UTC m=+2757.158894505 I0428 04:09:19.749648 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:09:19.749635731 +0000 UTC m=+2757.190557258 I0428 04:09:19.775571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:13:15.195444 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 04:13:15.195403788 +0000 UTC m=+2992.636325345 I0428 04:13:15.195631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:13:15.195727 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-28 04:13:15.195715464 +0000 UTC m=+2992.636637031 I0428 04:13:15.216710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:13:15.216868 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:13:15.216900 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-28 04:13:15.21688913 +0000 UTC m=+2992.657810697 I0428 04:13:15.443381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-r8lsn" condition "Approved" to 2026-04-28 04:13:15.443370336 +0000 UTC m=+2992.884291873 I0428 04:13:15.467016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-r8lsn" condition "Ready" to 2026-04-28 04:13:15.467001318 +0000 UTC m=+2992.907922885 I0428 04:13:15.491622 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:13:15.491605838 +0000 UTC m=+2992.932527375 I0428 04:13:15.518013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:13:15.522409 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:13:15.522403184 +0000 UTC m=+2992.963324711 I0428 04:13:15.538523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:13:48.055025 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 04:13:48.055009139 +0000 UTC m=+3025.495930676 I0428 04:13:48.055518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 04:13:48.055541 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 04:13:48.055533928 +0000 UTC m=+3025.496455465 I0428 04:13:48.072158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:13:48.072274 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 04:13:48.072264621 +0000 UTC m=+3025.513186188 I0428 04:13:48.197510 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 04:13:48.232950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2nvb8" condition "Approved" to 2026-04-28 04:13:48.232937046 +0000 UTC m=+3025.673858593 I0428 04:13:48.251763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-2nvb8" condition "Ready" to 2026-04-28 04:13:48.251748878 +0000 UTC m=+3025.692670415 I0428 04:13:48.291732 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 04:13:48.291719666 +0000 UTC m=+3025.732641203 I0428 04:13:48.311483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"